Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the…

In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn’t properly restrict access to an endpoint that is responsible for saving settings,…

HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible. Zafiyet…

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system…

This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally. An attacker can…

An issue was discovered in the Sametime chat feature in the Notes 11.0 – 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote…

Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri…

Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını…

Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI) Zafiyet…

A potential vulnerability in Splunk Enterprise’s implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability…