Cyber

A significant use-after-free vulnerability in the Linux kernel's netfilter component has been discovered, allowing for potential local privilege escalation.

Read the briefing

A critical server-side request forgery vulnerability has been identified in Ivanti's Connect Secure, Policy Secure, and Neurons products, potentially allowing unauthorized access to restricted resources.

Read the briefing

A path traversal vulnerability in Jenkins CLI allows unauthorized access to sensitive files, posing a significant risk to Jenkins installations.

Read the briefing

Apple has released updates to address a critical type confusion vulnerability in WebKit, affecting various products and potentially leading to arbitrary code execution.

Read the briefing

A significant template injection vulnerability has been identified in older versions of Atlassian Confluence Data Center and Server, allowing unauthenticated remote code execution.

Read the briefing

A significant vulnerability in GitLab Community and Enterprise Editions allows password reset emails to be sent to unverified email addresses, impacting user security.

Read the briefing

A command injection vulnerability has been identified in Ivanti Connect Secure and Policy Secure, potentially allowing code execution by authenticated administrators.

Read the briefing

Apple has released updates to address a critical memory corruption vulnerability that could allow attackers to bypass Pointer Authentication in several of its products.

Read the briefing

A critical vulnerability affecting SQLite3 versions up to 3.43.0 has been identified, necessitating immediate attention from users and administrators.

Read the briefing

A use-after-free vulnerability in the Linux kernel's netfilter component has been identified, allowing for potential local privilege escalation.

Read the briefing

A critical vulnerability has been identified in Spreadsheet::ParseExcel, allowing for arbitrary code execution due to improper input validation.

Read the briefing

A heap buffer overflow vulnerability has been identified in Google Chromium's WebRTC, potentially allowing remote exploitation through crafted HTML.

Read the briefing