Cyber

A newly discovered improper access control vulnerability in Microsoft Partner Center could allow unauthenticated attackers to elevate privileges over a network.

Read the briefing

An improper authentication vulnerability has been identified in ProjectSend, allowing remote attackers to exploit the system and gain unauthorized access.

Read the briefing

A significant vulnerability has been identified in Oracle Agile Product Lifecycle Management, allowing unauthorized access to sensitive data.

Read the briefing

A significant authentication bypass vulnerability has been identified in Palo Alto Networks PAN-OS, allowing unauthorized access to administrative privileges.

Read the briefing

A significant OS command injection vulnerability has been identified in certain end-of-life GeoVision devices, allowing remote attackers to execute arbitrary commands.

Read the briefing

A privilege escalation vulnerability has been identified in Microsoft Windows Task Scheduler, potentially allowing local applications to access privileged functions.

Read the briefing

A newly identified privilege escalation vulnerability in the Android Framework could allow local attackers to bypass file path filters, potentially exposing sensitive directories.

Read the briefing

A serious SQL injection vulnerability has been identified in langchain-ai/langchain-community version 0.2.5, posing significant risks to data integrity and security.

Read the briefing

A critical vulnerability in CyberPanel allows remote attackers to execute arbitrary commands, impacting versions up to 2.3.7.

Read the briefing

A critical vulnerability in CyberPanel allows remote attackers to execute arbitrary commands, impacting versions up to 2.3.7.

Read the briefing

A critical missing authentication vulnerability has been identified in multiple versions of Fortinet FortiManager, allowing potential unauthorized access and execution of arbitrary commands.

Read the briefing

A critical path traversal vulnerability in Mitel MiCollab could allow unauthorized access to sensitive data, necessitating immediate attention from users and administrators.

Read the briefing