Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

1 headlines in this view

Refine the feed

Search across headline titles and summaries.

Showing 1 most recent headlines Filtered view

A pre-authenticated remote code execution vulnerability has been disclosed in dotCMS, an open-source content management system written in Java and "used by over 10,000 clients in over 70 countries around the globe, from Fortune 500 brands and mid-sized businesses." The critical flaw, tracked as CVE-2022-26352, stems from a directory traversal attack when performing file uploads, enabling an

More from The Hacker News 5 May 2022, 12:05 a.m. Actively exploited CVE-2022-26352 CVE Critical Disclosure Flaw Java Remote Code Execution Vulnerability