Cisco addresses a critical privilege escalation bug in Meeting Management

Cisco addressed a critical flaw in its Meeting Management that could allow it to gain administrator privileges on vulnerable instances. Cisco released security updates to fix a critical flaw, tracked as CVE-2025-20156 (CVSS score of 9.9) affecting its Meeting Management. A remote, authenticated attacker can exploit the vulnerability to gain administrator privileges on affected instances. […]

CVE-2025-20156 impacts Cisco Meeting Management

thecyberthrone.in - 23/Jan 13:21

CVE-2025-20156 is a critical vulnerability within the REST API of Cisco Meeting Management. This vulnerability allows a remote, authenticated attacker...

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management

itsecuritynews.info - 23/Jan 23:36

No in-the-wild exploits … yet Cisco has pushed a patch for a critical, 9.9-rated vulnerability in its Meeting Management tool that could allow a...

CVE-2025-0065 Impacts TeamViewer Client

thecyberthrone.in - 29/Jan 12:30

Background CVE-2025-0065 is an unauthenticated privilege escalation vulnerability with a CVSS score of 7.8. This flaw is found in the...

FortiOS Authentication Bypass Vulnerability Exploited to Gain Super-Admin Access

itsecuritynews.info - 28/Jan 05:33

A critical zero-day vulnerability in Fortinet’s FortiOS and FortiProxy products tracked as CVE-2024-55591, has been actively exploited in the wild,...

Critical remote code execution bug found in Cacti framework

securityaffairs.co - 29/Jan 14:17

A critical flaw in Cacti open-source network monitoring and fault management framework that could allow remote code execution. Cacti is an...

Cisco warns of a ClamAV bug with PoC exploit

securityaffairs.co - 26/Jan 06:58

Cisco addressed a ClamAV denial-of-service (DoS) vulnerability, and experts warn of the availability of a proof-of-concept (PoC) exploit code. Cisco...

TeamViewer fixed a vulnerability in Windows client and host applications

securityaffairs.co - 30/Jan 15:29

TeamViewer has patched a high-severity privilege escalation vulnerability affecting its Windows client and host applications. TeamViewer released...

CVE-2024-55591 Exploit Code Released for FortiOS Flaw

thecyberthrone.in - 30/Jan 14:44

Cybersecurity company watchTowr Labs has released the proof-of-concept (PoC) exploit code for a severe zero-day vulnerability, CVE-2024-55591,...

VMware fixed a flaw in Avi Load Balancer

itsecuritynews.info - 29/Jan 00:15

VMware fixed a high-risk blind SQL injection vulnerability in Avi Load Balancer, allowing attackers to exploit databases via crafted queries. VMware...

TeamViewer Windows App Let Attackers Escalate Privileges to System User

itsecuritynews.info - 30/Jan 09:07

A critical security vulnerability has been identified in TeamViewer Clients for Windows, allowing attackers with local access to escalate their...

Rubriques :