X

Vous n'êtes pas connecté

Rubriques :

Maroc Maroc - ITSECURITYNEWS.INFO - A La Une - 05/Jul 17:04

Cisco Patches NX-OS Zero-Day Exploited by Chinese Attackers

  Cisco patched a NX-OS zero-day, identified as CVE-2024-20399 (CVSS score of 6.0), which the China-linked group Velvet Ant used to deploy previously unidentified malware as root on vulnerable switches.  The bug exists in the CLI of Cisco NX-OS Software;…

Articles similaires

Sorry! Image not available at this time

U.S. CISA adds Ivanti Endpoint Manager (EPM) flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 02/Oct 19:29

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Endpoint Manager (EPM) vulnerability to its Known Exploited Vulnerabilities...

Sorry! Image not available at this time

CISA adds Ivanti CVE-2024-7593 to its KEV Catalog

thecyberthrone.in - 25/Sep 09:35

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Ivanti Virtual Traffic Manager authentication bypass vulnerability...

Sorry! Image not available at this time

WordPress Plugin GiveWP Bug CVE-2024-8353

thecyberthrone.in - 02/Oct 01:48

A critical vulnerability has been discovered in the popular GiveWP donation plugin for WordPress, potentially allowing unauthenticated attackers to...

Sorry! Image not available at this time

WordPress Plugin GiveWP Bug CVE-2024-8353

thecyberthrone.in - 02/Oct 01:48

A critical vulnerability has been discovered in the popular GiveWP donation plugin for WordPress, potentially allowing unauthenticated attackers to...

Sorry! Image not available at this time

Thousands of Adobe Commerce e-stores hacked by exploiting the CosmicSting bug

securityaffairs.co - 03/Oct 14:36

Over 4,000 unpatched Adobe Commerce and Magento stores have been compromised by exploiting critical vulnerability CVE-2024-34102. Sansec researchers...

Sorry! Image not available at this time

PoC for critical SolarWinds Web Help Desk vulnerability released (CVE-2024-28987)

itsecuritynews.info - 25/Sep 14:32

Details about and proof-of-concept (PoC) exploit code for CVE-2024-28987, a recently patched SolarWinds Web Help Desk (WHD) vulnerability that could...

Sorry! Image not available at this time

FreeBSD flagged with a Critical Vulnerability CVE-2024-41721

thecyberthrone.in - 23/Sep 14:32

A critical vulnerability has been disclosed affecting FreeBSD’s bhyve hypervisor. If exploited, this flaw could allow malicious code execution,...

Sorry! Image not available at this time

WordPress LiteSpeed Cache plugin flaw could allow site takeover

itsecuritynews.info - 14:34

A high-severity flaw in the WordPress LiteSpeed Cache plugin could allow attackers to execute arbitrary JavaScript code under certain conditions. A...

Sorry! Image not available at this time

U.S. CISA adds Ivanti Virtual Traffic Manager flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 25/Sep 08:08

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Virtual Traffic Manager vulnerability to its Known Exploited Vulnerabilities...

Sorry! Image not available at this time

WordPress LiteSpeed Cache plugin flaw could allow site takeover

securityaffairs.co - 13:48

A high-severity flaw in the WordPress LiteSpeed Cache plugin could allow attackers to execute arbitrary JavaScript code under certain conditions. A...