Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

web application security

Everything RedTeam Tribune has reported about web application security: 2 stories, newest first. Part of our Vulnerabilities coverage.

15 Oct
Vulnerabilities

Server-Side Template Injection: Definition, Risks, and Mitigation

Server-side template injection allows attackers to execute arbitrary code by manipulating the data that populates your application’s user interface templates.

15 Oct
Vulnerabilities

WordPress Theme Vulnerabilities: 6 Myths That Leave Sites Exposed

Theme code runs with full server permissions, meaning a single flawed template file can bypass firewall rules and compromise the entire hosting environment without user interaction.