Cyber

A privilege escalation vulnerability has been identified in Microsoft Windows Task Scheduler, potentially allowing local applications to access privileged functions.

Read the briefing

A newly identified privilege escalation vulnerability in the Android Framework could allow local attackers to bypass file path filters, potentially exposing sensitive directories.

Read the briefing

A serious SQL injection vulnerability has been identified in langchain-ai/langchain-community version 0.2.5, posing significant risks to data integrity and security.

Read the briefing

A critical vulnerability in CyberPanel allows remote attackers to execute arbitrary commands, impacting versions up to 2.3.7.

Read the briefing

A critical vulnerability in CyberPanel allows remote attackers to execute arbitrary commands, impacting versions up to 2.3.7.

Read the briefing

A critical missing authentication vulnerability has been identified in multiple versions of Fortinet FortiManager, allowing potential unauthorized access and execution of arbitrary commands.

Read the briefing

A critical path traversal vulnerability in Mitel MiCollab could allow unauthorized access to sensitive data, necessitating immediate attention from users and administrators.

Read the briefing

An unspecified vulnerability has been identified in ScienceLogic SL1, affecting multiple versions and requiring immediate attention from users.

Read the briefing

A significant vulnerability has been identified in the low-level GF(2^m) elliptic curve APIs, potentially leading to severe memory issues and remote code execution.

Read the briefing

A critical use-after-free vulnerability in Mozilla Firefox and Thunderbird has been reported, allowing potential code execution by attackers. Users are urged to update immediately.

Read the briefing

A critical SQL injection vulnerability has been identified in Microsoft Configuration Manager, allowing potential unauthorized command execution.

Read the briefing

A command execution vulnerability has been identified in Synacor's Zimbra Collaboration Suite, affecting multiple versions and allowing potential unauthorized access.

Read the briefing