Okta has confirmed a security vulnerability where usernames of 52 characters or more allowed account access without a password.
A Python-based scanner for identifying instances of the CUPS (Common Unix Printing System) that are vulnerable to CVE-2024-47176 and related vulnerabilities, which could lead to remote code execution. The tool sends specially crafted UDP packets to target IP ranges, setting up a server to capture callbacks from potentially vulnerable systems.
Two security vulnerabilities have been disclosed in the Mailcow open-source mail server suite that could be exploited by malicious actors to achieve arbitrary code execution on susceptible instances.