Do Son Due to the critical severity of vulnerabilities CVE-2024-29972, CVE-2024-29973, and CVE-2024-29974, Zyxel has made patches available
Vulnerability
A security researcher has published details and proof-of-concept (PoC) code for a macOS CVE-2024-27822 vulnerability
CVE-2024-21512 stems from a Prototype Pollution vulnerability that could be exploited for remote code execution.
Tracked as CVE-2024-3584, this flaw carries a near-perfect CVSS score of 9.8, underscoring the potential for severe exploitation.
The identified flaw, cataloged as CVE-2024-5404 with a CVSS score of 9.8, affects the "Forgot Password" function of the Moneo IIoT platform
WordPress, the world's most popular CMS, is facing a wave of targeted attacks exploiting critical vulnerabilities in several plugins
CVE-2024-36104 could allow remote attackers to execute arbitrary code on affected systems, potentially leading to full system compromise
A significant security vulnerability has been uncovered in the widely-used node-ip npm package, which is designed to...
Censys observed 13,802 internet hosts exposing either a CloudGuard instance, Quantum Security, or Quantum Spark gateway
CVE-2024-3820, rated with a maximum severity score of 10 (CVSS 10), could allow attackers to inject malicious SQL code
CVE-2024-32850 with a CVSS score of 9.8 (Critical), allows attackers to execute commands remotely or gain unauthorized administrative access.
Designated as CVE-2024-35204, this vulnerability has been assigned a CVSS score of 8.4, indicating its high severity
The malware file named “.redtail” confirmed the presence of the RedTail cryptominer, previously reported by Cyber Security Associates (CSA)
A buffer overwrite vulnerability that occurs when NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module
With a CVSS score of 10, CVE-2024-5522 is classified as an SQL Injection (SQLi) vulnerability, a common yet dangerous type of attack
A critical vulnerability (CVE-2024-3273) discovered in multiple end-of-life D-Link network-attached storage (NAS) devices
TIBCO has issued a security advisory warning users of a vulnerability (CVE-2024-4407) in its Managed File Transfer Platform Server
This flaw, identified as CVE-2024-36383 and rated with a CVSS score of 9.1, could allow attackers to perform arbitrary file deletions
CVE-2024-5296 (CVSS 9.6) - This critical vulnerability allows remote attackers to bypass authentication on affected installations
CISA has issued an urgent warning regarding two actively exploited vulnerabilities affecting the Linux Kernel and Check Point Quantum Security Gateways
Security researchers at watchTowr Labs have detailed a zero-day vulnerability (CVE-2024-24919) in Check Point's Remote Access VPN appliances
A security vulnerability, identified as CVE-2024-22263, has been discovered in Spring Cloud Data Flow, a framework widely used