Attackers Exploit miniOrange SAML Flaws to Gain WordPress Admin Access
Threat actors are actively exploiting two critical authentication bypass vulnerabilities in the Xecurify miniOrange SAML 2.0 Single Sign On plugin for WordPress.…
Tag: OpenSSL
CVE-2026-14456: OpenSSL QUIC Server Flaw Allows Unbounded Connection Queuing
OpenSSL disclosed a low-severity flaw in QUIC servers that queue incoming channels for unknown destination connection IDs without enforcing a limit, potentially…
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Okta's Red Team has disclosed a denial-of-service vulnerability in OpenSSL, dubbed HollowByte, that allows an attacker to freeze server memory using 11-byte…
CVE-2025-66199: OpenSSL TLS 1.3 Certificate Compression Heap Buffer Overflow
A low-severity vulnerability in OpenSSL's TLS 1.3 certificate compression feature allows a peer-supplied length to grow a heap buffer before validation, potentially…
CVE-2026-34183: OpenSSL QUIC PATH_CHALLENGE Unbounded Memory Growth
A moderate-severity vulnerability in OpenSSL's QUIC implementation allows unbounded memory growth via the PATH_CHALLENGE handler, leading to denial of service through memory…
OpenSSL — Cybersecurity company profile
OpenSSL was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Study of 281 Free Android VPN Apps Reveals Traffic Leaks, Unencrypted Data, and Tracking
A comprehensive study of 281 popular free Android VPN apps from the Google Play Store, conducted by researchers at the University of…
OpenSSL HollowByte Vulnerability and Fix
OpenSSL versions prior to 4.0.1, 3.6.3, 3.5.7, 3.4.6, and 3.0.21 are vulnerable to HollowByte, a denial-of-service attack that freezes server memory via…