Critical OpenSSL Vulnerability Allow Hackers to Launch Man-in-the-Middle Attacks

The OpenSSL Project announced a high-severity vulnerability (CVE-2024-12797) affecting versions 3.2, 3.3, and 3.4 of the widely used cryptographic library. The vulnerability, discovered by Apple Inc. in December 2024, could potentially allow man-in-the-middle (MitM) attacks on TLS and DTLS connections…

Critical OpenSSL Vulnerability Let Attackers Launch Man-in-the-Middle Attacks

itsecuritynews.info - 12/Feb 05:32

A high-severity security vulnerability (CVE-2024-12797) has been identified in OpenSSL, one of the most widely used cryptographic libraries. The flaw...

OpenSSL patched high-severity flaw CVE-2024-12797

securityaffairs.co - 11/Feb 21:33

OpenSSL patched the vulnerability CVE-2024-12797, a high-severity flaw found by Apple that enables man-in-the-middle attacks. The OpenSSL Project...

CVE-2024-12797 OpenSSL Vulnerability Patched

thecyberthrone.in - 12/Feb 04:38

CVE-2024-12797 is a critical security vulnerability discovered in OpenSSL, a widely used cryptographic library that provides secure communication over...

Rapid7 Discovers High-Severity SQL Injection Vulnerability

australiancybersecuritymagazine.com.au - 01:10

Cybersecurity company Rapid7 has discovered a high-severity SQL injection vulnerability, CVE-2025-1094, affecting the PostgreSQL interactive tool...

AMD Ryzen DLL Hijacking Vulnerability Let Attackers Execute Arbitrary Code

itsecuritynews.info - 08:31

A high-severity security vulnerability, identified as CVE-2024-21966, has been discovered in the AMD Ryzen™ Master Utility, a software tool designed...

Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks

securityaffairs.co - 09:23

Threat actors are exploiting a zero-day SQL injection vulnerability in PostgreSQL, according to researchers from cybersecurity firm Rapid7. Rapid7...

PostgreSQL Terminal Tool Injection Vulnerability Allows Remote Code Execution

itsecuritynews.info - 08:32

Researchers have uncovered a high-severity SQL injection vulnerability, CVE-2025-1094, affecting PostgreSQL’s interactive terminal tool, psql. ...

CVE-2025-1146 impacts selected CrowdStrike Falcon Sensors

thecyberthrone.in - 13/Feb 13:25

CVE-2025-1146 is a significant security vulnerability affecting CrowdStrike Falcon sensors for Linux, Falcon Kubernetes Admission Controller, and...

CVE-2024-32838 impacts Apache Fineract with SQL injection

thecyberthrone.in - 13:41

CVE-2024-32838 is a critical security vulnerability affecting Apache Fineract, a popular open-source core banking platform. This vulnerability...

SonicWall firewall exploit lets hackers hijack VPN sessions, patch now

bleepingcomputer.com - 11/Feb 15:56

Security researchers at Bishop Fox have published complete exploitation details for the CVE-2024-53704 vulnerability that allows bypassing the...

Rubriques :