cve.org

Title/body text match only.

• AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

  AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000

• SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

  SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE

• Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

  Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under activ

• Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

  Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor's Ju

• Schneider Electric Modicon Network Managed Switches

  Schneider Electric Modicon Network Managed Switches View CSAF Summary Schneider Electric is aware of a RADIUS protocol vulnerability affecting its Modicon Network Managed Switch product. The Modicon Network Managed Switch product provides connectivity for multiple Ethernet devic

• Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

  Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw Public exploit details released on July 27 show how an unauthenticated request can reach PHP's eval() function inside vBulletin and execute code on an unpatched forum server. The attack requires no accoun

All reports →