Microsoft Teams Multiple Severity Flaws
Security vulnerabilities in Microsoft Teams could allow an attacker to spoof link previews, leak IP addresses, and even access internal services. A total of four vulnerabilities in the video conferencing…
VMware Fixes Critical SSRF Flaw in Workspace One
VMware has addressed a critical SSRF vulnerability, tracked as CVE-2021-22054, in Workspace ONE UEM console. An attacker with network access to UEM could exploit the vulnerability to access sensitive data in…
Apache SSRF bug Exploited
Threat actors are exploiting a recently addressed server-side request forgery (SSRF) vulnerability, tracked as CVE-2021-40438, in Apache HTTP servers. This flaw can be exploited against httpd web servers that have…
VMware fixes SSRF Vulnerability
VMware has released security updates for vCenter Server after fixing arbitrary file read and SSRF vulnerabilities in the vSphere Web Client (FLEX/Flash). It's recommended that enterprises running vulnerable instances of…
Facebook SSRF Dashboard
Facebook announced to have designed a new tool, named SSRF Dashboard, that allows security researchers to search for Server-Side Request Forgery (SSRF) vulnerabilities. Server-side request forgery is a web security…
Apache Zero Day Fix Insufficient – Update Again
A patch that was released to fix a path traversal bug in Apache HTTP Server is insufficient in protecting against the vulnerability and could allow for remote code execution (RCE).…