Critical GitLab Bug Lets Attackers Run Pipelines as Any User

Update: PoC Exploit Released for Windows Hyper-V Zero-Day Vulnerability

itsecuritynews.info - 17/Sep 16:32

This critical flaw, actively exploited in the wild, allows attackers to elevate privileges to SYSTEM level, posing a significant risk to organizations...

CVE-2023-48788 Exploited: Researcher Details Cyberattacks on Fortinet FortiClient EMS

itsecuritynews.info - 20/Sep 11:02

Cybersecurity researchers at Darktrace have discovered cybercriminals exploiting Fortinet’s FortiClient EMS. The attackers targeted a critical...

Zero-Click Calendar Invite: Critical macOS Vulnerability Chain Uncovered

itsecuritynews.info - 17/Sep 14:32

The vulnerability, tracked as CVE-2022-46723, enables attackers to manipulate files within the macOS Calendar app environment and execute remote code...

Patch this Critical Safeguard for Privileged Passwords Authentication Bypass Flaw

itsecuritynews.info - 21/Sep 08:32

Researchers have released technical details about CVE-2024-45488, a critical authentication bypass vulnerability affecting One Identity’s Safeguard...

D-Link Fixes Critical RCE, Hardcoded Credential Flaws in WiFi 6 Routers

itsecuritynews.info - 17/Sep 12:32

D-Link has addressed critical vulnerabilities in three popular WiFi 6 router models, fixing issues that could allow remote attackers to run arbitrary...

GitLab Releases Critical Security Patch for CVE-2024-45409 (CVSS 10) Vulnerability

itsecuritynews.info - 19/Sep 10:32

GitLab has released a critical security patch for the CVE-2024-45409 vulnerability (CVSS 10). It impacts both GitLab Community Edition (CE) and...

Researcher Details Cisco Smart Licensing that Lets Attacker Control Device

itsecuritynews.info - 24/Sep 08:34

Cisco disclosed a critical vulnerability identified as CVE-2024-20439, affecting its Smart Licensing Utility. An independent researcher discovered...

Critical Vulnerability in AutoGPT Puts Over 166,000 Projects at Risk

itsecuritynews.info - 17/Sep 14:32

A critical vulnerability, CVE-2024-6091 (CVSS 9. 8), has been found in AutoGPT, a popular AI tool with over 166,000 projects at risk. The flaw allows...

HPE Patches Three Critical Security Holes in Aruba PAPI

itsecuritynews.info - 28/Sep 07:34

HPE has released patches for three critical security vulnerabilities in Aruba’s networking access points, which could allow attackers to run code on...

GitLab fixes critical vulnerability CVE-2024-45409

thecyberthrone.in - 19/Sep 14:37

GitLab has released security patches for a critical vulnerability that affects both GitLab Community Edition (CE) and Enterprise Edition (EE) that...

Rubriques :