Vulnerability

CISA Warns of Palo Alto Networks PAN-OS Vulnerability Exploited in WildCISA Warns of Palo Alto Networks PAN-OS Vulnerability Exploited in Wild

CISA Warns of Palo Alto Networks PAN-OS Vulnerability Exploited in Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert on a critical vulnerability in Palo Alto…

4 months ago
TrueNAS CORE Vulnerability Let Attackers Execute Remote CodeTrueNAS CORE Vulnerability Let Attackers Execute Remote Code

TrueNAS CORE Vulnerability Let Attackers Execute Remote Code

Security researchers Daan Keuper, Thijs Alkemade, and Khaled Nassar from Computest Sector 7 disclosed a critical vulnerability in TrueNAS CORE,…

4 months ago
PoC Exploited Released for Oracle Weblogic Server VulnerabilityPoC Exploited Released for Oracle Weblogic Server Vulnerability

PoC Exploited Released for Oracle Weblogic Server Vulnerability

Security researchers have warned that a Proof-of-Concept (PoC) exploit has been publicly released for a critical vulnerability affecting Oracle WebLogic…

4 months ago
Microsoft Warns of Windows 11 24H2 Issue that Blocks Windows Security UpdatesMicrosoft Warns of Windows 11 24H2 Issue that Blocks Windows Security Updates

Microsoft Warns of Windows 11 24H2 Issue that Blocks Windows Security Updates

Microsoft has issued a warning about a significant issue impacting devices running Windows 11, version 24H2, that could block essential…

4 months ago
Four-Faith Industrial Routers Vulnerability Exploited in the Wild to Gain Remote AccessFour-Faith Industrial Routers Vulnerability Exploited in the Wild to Gain Remote Access

Four-Faith Industrial Routers Vulnerability Exploited in the Wild to Gain Remote Access

A significant post-authentication vulnerability affecting Four-Faith industrial routers has been actively exploited in the wild. Assigned as CVE-2024-12856, this flaw allows…

4 months ago
AT&T and Verizon Hacked – Salt Typhoon Compromised The Network For High ProfilesAT&T and Verizon Hacked – Salt Typhoon Compromised The Network For High Profiles

AT&T and Verizon Hacked – Salt Typhoon Compromised The Network For High Profiles

AT&T and Verizon Communications, two of America's largest telecommunications providers, have confirmed they were targeted by the China-linked Salt Typhoon…

4 months ago
Palo Alto Networks Vulnerability Puts Firewalls at Risk of DoS AttacksPalo Alto Networks Vulnerability Puts Firewalls at Risk of DoS Attacks

Palo Alto Networks Vulnerability Puts Firewalls at Risk of DoS Attacks

A critical vulnerability, CVE-2024-3393, has been identified in the DNS Security feature of Palo Alto Networks' PAN-OS software. This flaw…

5 months ago
Adobe Warns of ColdFusion Vulnerability Allows Attackers Read arbitrary filesAdobe Warns of ColdFusion Vulnerability Allows Attackers Read arbitrary files

Adobe Warns of ColdFusion Vulnerability Allows Attackers Read arbitrary files

Adobe has issued a critical security update for ColdFusion versions 2023 and 2021 to address a major vulnerability that could…

5 months ago
Apache Auth-Bypass Vulnerability Lets Attackers Gain Control Over HugeGraph-ServerApache Auth-Bypass Vulnerability Lets Attackers Gain Control Over HugeGraph-Server

Apache Auth-Bypass Vulnerability Lets Attackers Gain Control Over HugeGraph-Server

The Apache Software Foundation has issued a security alert regarding a critical vulnerability in Apache HugeGraph-Server. The flaw, identified as…

5 months ago
Node.js systeminformation Package Vulnerability Exposes Millions of Systems to RCE AttacksNode.js systeminformation Package Vulnerability Exposes Millions of Systems to RCE Attacks

Node.js systeminformation Package Vulnerability Exposes Millions of Systems to RCE Attacks

A critical command injection vulnerability in the popular systeminformation npm package has recently been disclosed, exposing millions of systems to potential remote…

5 months ago