Cyber

A serious OS command injection vulnerability has been identified in Palo Alto Networks Expedition, potentially allowing attackers to execute arbitrary commands.

Read the briefing

A critical vulnerability affecting the Linux kernel has been addressed, focusing on the proper initialization of the grc variable.

Read the briefing

A vulnerability in the Linux kernel has been addressed, preventing potential data leakage when sending small packets.

Read the briefing

A significant privilege escalation vulnerability has been identified in VMware vCenter Server, potentially allowing unauthorized access to root privileges.

Read the briefing

A heap-based buffer overflow vulnerability has been identified in VMware vCenter Server, potentially allowing remote code execution by malicious actors.

Read the briefing

Ivanti has disclosed a critical OS command injection vulnerability in its Cloud Services Appliance, which is currently being exploited in the wild.

Read the briefing

A spoofing vulnerability in the Microsoft Windows MSHTML Platform has been identified, potentially allowing attackers to misrepresent critical information on web pages.

Read the briefing

A serious deserialization vulnerability has been identified in Veeam Backup and Replication, enabling remote code execution by unauthenticated users.

Read the briefing

A serious vulnerability in Cisco's Smart Licensing Utility could allow unauthorized remote access through static credentials, necessitating immediate attention from affected users.

Read the briefing

A SQL injection vulnerability has been identified in Progress WhatsUp Gold, potentially exposing user credentials to attackers.

Read the briefing

A new vulnerability in the Diffie-Hellman Key Agreement Protocol could allow remote attackers to exploit server resources, leading to potential denial-of-service conditions.

Read the briefing

A hardcoded credential vulnerability has been identified in SolarWinds Web Help Desk, posing significant risks to user data and internal functionality.

Read the briefing