Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      The Psychology Of Color In UX Design And Digital Products

      August 15, 2025

      This week in AI dev tools: Claude Sonnet 4’s larger context window, ChatGPT updates, and more (August 15, 2025)

      August 15, 2025

      Sentry launches MCP monitoring tool

      August 14, 2025

      10 Benefits of Hiring a React.js Development Company (2025–2026 Edition)

      August 13, 2025

      14 secret phone codes that unlock hidden features on your Android and iPhone

      August 17, 2025

      Stop using AI for these 9 work tasks – here’s why

      August 17, 2025

      A smart sensor assessed my home’s risk of electrical fires, and I was impressed

      August 17, 2025

      I brought Samsung’s rugged Galaxy tablet on a hiking trip, and it weathered everything

      August 17, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      AI’s Hidden Thirst: The Water Behind Tech

      August 16, 2025
      Recent

      AI’s Hidden Thirst: The Water Behind Tech

      August 16, 2025

      Minesweeper game in 100 lines of pure JavaScript – easy tutorial

      August 16, 2025

      Maintaining Data Consistency with Laravel Database Transactions

      August 16, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      5 Best VPN for Lenovo Laptops to Enjoy the Web Safely

      August 16, 2025
      Recent

      5 Best VPN for Lenovo Laptops to Enjoy the Web Safely

      August 16, 2025

      3 Best Antivirus and Malware Protection Software

      August 16, 2025

      11 Best Antivirus Without Ads

      August 16, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2024-35164 – Apache Guacamole SSH Console Code Execution Vulnerability

    CVE-2024-35164 – Apache Guacamole SSH Console Code Execution Vulnerability

    July 2, 2025

    CVE ID : CVE-2024-35164

    Published : July 2, 2025, 12:15 p.m. | 3 hours, 1 minute ago

    Description : The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based protocols like SSH. If a malicious user has access to a text-based connection, a specially-crafted sequence of console codes could allow arbitrary code to be executed
    with the privileges of the running guacd process.

    Users are recommended to upgrade to version 1.6.0, which fixes this issue.

    Severity: 6.8 | MEDIUM

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-46647 – Apache APISIX OpenID-Connect Plugin Issuer Key Reuse Vulnerability
    Next Article CVE-2025-45006 – RISC-V Processor Mstatus.SUM Bit Retention Privilege Escalation Vulnerability

    Related Posts

    Development

    Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

    August 16, 2025
    Development

    ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

    August 16, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Jakarta EE 11 Platform launches with modernized Test Compatibility Kit framework

    Tech & Work

    CVE-2025-3302 – Xagio SEO – WordPress Stored Cross-Site Scripting

    Common Vulnerabilities and Exposures (CVEs)

    Streamline API Resources with Laravel’s Fluent Methods

    Development

    This Ninja Gaiden spin off is not only amazing, it’s converted me into a franchise fan — a retro gateway for newcomers

    News & Updates

    Highlights

    CVE-2025-6290 – WordPress Tournament Bracket Generator Stored Cross-Site Scripting

    June 26, 2025

    CVE ID : CVE-2025-6290

    Published : June 26, 2025, 2:15 a.m. | 2 hours, 52 minutes ago

    Description : The Tournament Bracket Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s ‘bracket’ shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

    Severity: 6.4 | MEDIUM

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Selenium: How to click a button using the button label?

    August 12, 2025

    CVE-2025-47664 – ThimPress WP Pipes SSRF

    May 7, 2025

    CVE-2025-27955 – Clinical Collaboration Platform Session Token Weakness (Authentication Bypass)

    June 2, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.