A recent security announcement from security researcher Serhii Boiarynov at the Zyxel EMEA team has uncovered malicious activity targeting Zyxel security appliances. Attackers are exploiting previously known vulnerabilities in the...
Mitel has issued a critical security advisory addressing a newly discovered vulnerability, CVE-2024-41713, in the MiCollab platform. This path traversal vulnerability, which carries a CVSS score of 9.8, affects the...
Progress Software has released an important security advisory addressing four newly discovered vulnerabilities in their powerful Telerik Report Server, a tool widely used for embedding reporting functionality into web, desktop,...
Open-source identity and access management platform Keycloak has released a security update to address a high-severity vulnerability that could allow low-privilege users to gain unauthorized access to administrative functions. The...
A critical vulnerability in btcd, a popular alternative implementation of the Bitcoin protocol, could have allowed malicious actors to create a hard fork of the Bitcoin blockchain at minimal cost....
A recent analysis by security researcher Zach Hanley of Horizon3.ai has uncovered a critical vulnerability, CVE-2024-9466, in Palo Alto Networks’ Expedition tool. This vulnerability, with a CVSS score of 8.2,...
Mitel, a global leader in business communications, has issued a critical security advisory concerning a high-severity SQL injection vulnerability in its MiCollab software, specifically affecting the Audio, Web, and Video...
GitLab, a leading platform for DevOps and continuous integration/continuous delivery (CI/CD), has just released crucial security updates in versions 17.4.2, 17.3.5, and 17.2.9 for both Community Edition (CE) and Enterprise...
In a recent vulnerability analysis by Michael Baer from SEC Consult Vulnerability Lab, a significant local privilege escalation vulnerability (CVE-2024-9473) was uncovered in Palo Alto Networks’ GlobalProtect MSI installer. This...
A critical security vulnerability, CVE-2024-45720 (CVSS 8.2), has been identified in Apache Subversion (SVN), a popular version control system widely used by developers to maintain source code, web pages, and...
A critical vulnerability, identified as CVE-2024-36814, has been uncovered in AdGuard Home, an open-source network-wide ad-blocking solution. The vulnerability, discovered by security researcher Jack Moran, allows authenticated attackers to read...
Schneider Electric has issued a security notification concerning a critical vulnerability in the System Monitor application of their Harmony Industrial PC Series and Pro-face PS5000 Legacy Industrial PC Series. The...
A newly discovered vulnerability, CVE-2024-47823, has been identified in Livewire, a popular full-stack framework for Laravel used to build dynamic UI components without leaving PHP. This security flaw, which received...
Palo Alto Networks recently issued a security advisory (PAN-SA-2024-0010) detailing several high-severity vulnerabilities affecting its Expedition migration tool, with CVSS scores ranging from 7.0 to 9.9. These flaws, if exploited,...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following confirmed reports of active exploitation in the wild....
Support Securityonline.info site. Thanks!
