News & Updates

Revisiting Image Maps

I mentioned last time that I’ve been working on a new website for Emmy-award-winning game composer Mike Worth. He hired…

CISA Sounds the Alarm: Broadcom and Commvault Flaws Under Active Exploitation! ️

CISA Sounds the Alarm: Broadcom and Commvault Flaws Under Active Exploitation! ️

Photo by Mika Baumeister on UnsplashBuckle up, cybersecurity enthusiasts! The U.S. Cybersecurity and Infrastructure Security Agency (CISA) just dropped a bombshell by adding two critical vulnerabiliti …
Read more

Published Date:
Apr 30, 2025 (2 hours, 53 minutes ago)

Vulnerabilities has been mentioned in this article.

Avast Antivirus Vulnerability Let Attackers Escalate Privileges

Avast Antivirus Vulnerability Let Attackers Escalate Privileges

Security researchers have disclosed a critical vulnerability in Avast Free Antivirus that could allow attackers to gain elevated system privileges and execute malicious code with kernel-level access.
…
Read more

Published Date:
Apr 30, 2025 (2 hours, 13 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-22882 – Delta Electronics ISPSoft Buffer Overflow

CVE ID : CVE-2025-22882

Published : April 30, 2025, 8:15 a.m. | 38 minutes ago

Description : Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary code when parsing CBDGL file.

Severity: 7.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-22883 – Delta Electronics ISPSoft Out-Of-Bounds Write Vulnerability

CVE ID : CVE-2025-22883

Published : April 30, 2025, 8:15 a.m. | 38 minutes ago

Description : Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.

Severity: 7.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-22884 – Delta Electronics ISPSoft Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-22884

Published : April 30, 2025, 8:15 a.m. | 38 minutes ago

Description : Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.

Severity: 7.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-46778 – Apache HTTP Server Denial of Service

CVE ID : CVE-2025-46778

Published : April 30, 2025, 3:15 a.m. | 3 hours, 58 minutes ago

Description : Rejected reason: Not used

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-46779 – Apache HTTP Server HTTP Header Injection

CVE ID : CVE-2025-46779

Published : April 30, 2025, 3:15 a.m. | 3 hours, 58 minutes ago

Description : Rejected reason: Not used

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-46780 – Apache HTTP Server Denial of Service

CVE ID : CVE-2025-46780

Published : April 30, 2025, 3:15 a.m. | 3 hours, 58 minutes ago

Description : Rejected reason: Not used

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-3471 – “SureForms WordPress Plugin Unauthenticated Configuration Update”

CVE ID : CVE-2025-3471

Published : April 30, 2025, 6:15 a.m. | 57 minutes ago

Description : The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the REST API, which could allow Contributor and above roles to perform such action

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-3953 – WordPress WP Statistics Unauthenticated Settings Modification Vulnerability

CVE ID : CVE-2025-3953

Published : April 30, 2025, 6:15 a.m. | 57 minutes ago

Description : The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ‘optionUpdater’ function in all versions up to, and including, 14.13.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary plugin settings.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…