Cyber

Fortinet has disclosed a critical out-of-bounds write vulnerability affecting multiple versions of FortiOS and FortiProxy, potentially allowing unauthorized code execution.

Read the briefing

A critical flaw in M2Crypto has been identified, potentially allowing remote attackers to decrypt sensitive data in TLS communications.

Read the briefing

A significant use-after-free vulnerability in the Linux kernel's netfilter component has been discovered, allowing for potential local privilege escalation.

Read the briefing

A critical server-side request forgery vulnerability has been identified in Ivanti's Connect Secure, Policy Secure, and Neurons products, potentially allowing unauthorized access to restricted resources.

Read the briefing

A path traversal vulnerability in Jenkins CLI allows unauthorized access to sensitive files, posing a significant risk to Jenkins installations.

Read the briefing

Apple has released updates to address a critical type confusion vulnerability in WebKit, affecting various products and potentially leading to arbitrary code execution.

Read the briefing

A critical path traversal vulnerability has been identified in the D-Link DIR-859 router, affecting unsupported firmware versions.

Read the briefing

A significant template injection vulnerability has been identified in older versions of Atlassian Confluence Data Center and Server, allowing unauthenticated remote code execution.

Read the briefing

A significant vulnerability in GitLab Community and Enterprise Editions allows password reset emails to be sent to unverified email addresses, impacting user security.

Read the briefing

A command injection vulnerability has been identified in Ivanti Connect Secure and Policy Secure, potentially allowing code execution by authenticated administrators.

Read the briefing

A command injection vulnerability has been identified in tj-actions/changed-files, allowing potential execution of arbitrary code through manipulated filenames.

Read the briefing

Apple has released updates to address a critical memory corruption vulnerability that could allow attackers to bypass Pointer Authentication in several of its products.

Read the briefing