CVE-2024-4577 impacts PHP and exploited in wild

CVE-2024-4577 is a critical Remote Code Execution (RCE) vulnerability affecting PHP when running in CGI mode on Windows systems with Apache. This flaw arises from the improper handling of command-line arguments passed to the PHP-CGI binary, particularly when certain Windows code pages use “Best-Fit” behavior to replace characters. Overview Exploitation Details Mitigation Measures Patch Management: […]

WordPress Plugin Vulnerability Exposes 10,000 Sites to Code Execution Attacks

itsecuritynews.info - 05/Mar 15:04

A critical security flaw in the GiveWP Donation Plugin tracked as CVE-2025-0912, has exposed over 100,000 WordPress websites to unauthenticated remote...

Windows KDC Proxy RCE Vulnerability Allows Remote Server Takeover

itsecuritynews.info - 05/Mar 06:03

A recently patched remote code execution (RCE) vulnerability in Microsoft Windows’ Key Distribution Center (KDC) Proxy implementation allows...

CVE-2025-25012 impacts Kibana

thecyberthrone.in - 07/Mar 01:12

CVE-2025-25012 is a critical vulnerability identified in Elastic Kibana, a widely used data visualization and exploration platform for Elasticsearch....

CVE-2025-0337 impacts ServiceNow

thecyberthrone.in - 14:55

CVE-2025-0337 is classified as a high-severity authorization bypass vulnerability impacting the ServiceNow Now Platform, specifically targeting the...

CVE-2025-20059 impacts Ping Identity

thecyberthrone.in - 01/Mar 13:10

CVE-2025-20059 represents a critical security vulnerability known as a Relative Path Traversal flaw, which impacts the Ping Identity PingAM Java...

CVE-2025-27364 affects MITRE Caldera

thecyberthrone.in - 01/Mar 05:01

CVE-2025-27364 is a critical Remote Code Execution (RCE) vulnerability identified in MITRE Caldera, a highly regarded cybersecurity platform used for...

U.S. CISA adds Microsoft Power Pages flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 23/Feb 15:07

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Power Pages vulnerability to its Known Exploited Vulnerabilities catalog....

CISA Warns of Microsoft Partner Center Access Control Vulnerability Exploited in Wild

itsecuritynews.info - 26/Feb 05:33

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent advisory on February 25, 2025, confirming that threat actors are...

CVE-2025-24989 added to CISA KEV

thecyberthrone.in - 22/Feb 16:28

CVE-2025-24989 is a high security vulnerability that has been added to the Known Exploited Vulnerabilities (KEV) Catalog by the Cybersecurity and...

Mirai-based botnets exploit CVE-2025-1316 zero-day in Edimax IP cameras

securityaffairs.co - 07/Mar 19:18

Mirai-based botnets are exploiting a zero-day flaw, tracked as CVE-2025-1316, in Edimax IP cameras, to achieve remote command execution. US CISA warns...

Rubriques :