Category: IT security News

The recent identification of a high-severity Local File Inclusion (LFI) vulnerability in the ThemeREX Addons plugin for WordPress has raised alarm in the web development community. This vulnerability, designated as CVE-2025-0682, allows authenticated attackers with contributor-level and above permissions to execute arbitrary files on the server. Published on January 25, 2025, this weakness affects all…

Understanding CVE-2024-12647 Vulnerability in Canon Printers A critical vulnerability, identified as CVE-2024-12647, has surfaced in specific Canon Small Office Multifunction Printers and Laser Printers. This issue impacts popular models like the Color imageCLASS LBP632Cdw, Color imageCLASS LBP633Cdw, and Color imageCLASS MF652Cdw, particularly those running firmware version 05.04 and earlier. Discovered on January 28, 2025, this…

A critical buffer overflow vulnerability, known as CVE-2024-12648, has emerged in certain Canon Small Office Multifunction Printers and Laser Printers. Published on January 28, 2025, this vulnerability could allow an attacker on the same network to make the devices unresponsive or even execute arbitrary code. This alarming threat includes popular models like the Satera series…

A critical buffer overflow vulnerability, known as CVE-2024-12649, has been identified in certain Canon Small Office Multifunction Printers and Laser Printers. This vulnerability could allow an attacker on the same network to exploit the device, leading to severe consequences. Affected models include the Color imageCLASS LBP632Cdw, Color imageCLASS LBP633Cdw, and Color imageCLASS MF652Cdw. If these…

Understanding the IBM Analytics Content Hub Buffer Overflow Vulnerability The IBM Analytics Content Hub Buffer Overflow Vulnerability, known as CVE-2024-39750, is a significant issue that emerged during the week of January 13, 2025. This particular vulnerability has the potential to severely compromise the integrity and confidentiality of systems that utilize IBM Analytics Content Hub. What’s…

A critical WordPress vulnerability, identified as CVE-2025-0682, has surfaced in the ThemeREX Addons plugin, which impacts versions up to 2.33.0. This threat poses a significant risk due to a Local File Inclusion (LFI) issue. The vulnerability results from manipulating the ‘type’ parameter within the ‘trxscreviews’ shortcode. Exploiting this flaw allows attackers to escalate privileges, leading…

Understanding the Vulnerability in the WordPress WPBookit Plugin The recent discovery of the CVE-2025-0357 vulnerability in the WordPress WPBookit plugin raises significant concerns among website administrators and users alike. On January 25, 2025, this flaw was identified, allowing attackers to perform arbitrary file uploads due to insufficient file type validation in the plugin’s ‘WPBProfilecontroller’ class….

The Apache FHIR IG Publisher XML External Entity Injection vulnerability, known as CVE-2024-52807, was discovered in January 2025 and poses a critical risk to users. Organizations, especially in healthcare, rely on FHIR (Fast Healthcare Interoperability Resources) for essential data transactions. However, this particular vulnerability might allow attackers to exploit the Apache FHIR IG Publisher by…

CVE-2024-54152 is a newly discovered vulnerability in Angular Expressions that poses a serious threat to data security. Identified on January 2, 2025, this vulnerability affects all versions of Angular Expressions prior to 1.4.3. With a CVSS base score of 9.3, the risk to confidentiality, integrity, and availability is extremely high. The root cause lies in…

In recent weeks, a critical vulnerability known as CVE-2024-40693 has been identified in IBM Planning Analytics, making headlines in the cybersecurity world. This serious flaw allows for Remote Code Execution (RCE) via malicious file uploads. Essentially, this means that an attacker can execute arbitrary code on a vulnerable system simply by uploading a harmful file….