CVE-2025-20059 impacts Ping Identity

CVE-2025-20059 represents a critical security vulnerability known as a Relative Path Traversal flaw, which impacts the Ping Identity PingAM Java Policy Agent. This vulnerability allows for parameter injection, enabling attackers to manipulate file paths and gain unauthorized access to protected resources, effectively bypassing policy enforcement mechanisms. Overview of CVE-2025-20059 Description Technical Mechanics Exploitation Proof of […]

CVE-2025-23363 impacts Siemens TeamCenter

thecyberthrone.in - 02/Mar 11:28

CVE-2025-23363 is a high-severity vulnerability identified in Siemens Teamcenter, a product lifecycle management (PLM) software suite used by...

LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

itsecuritynews.info - 27/Feb 06:04

A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has been patched after researchers...

CVE-2025-20111 impacts Cisco Nexus

thecyberthrone.in - 03/Mar 15:10

CVE-2025-20111 is a high-severity vulnerability identified in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus...

Critical Microsoft Bing Vulnerability Enabled Remote Code Execution Attacks

itsecuritynews.info - 20/Feb 05:32

A critical security flaw in Microsoft Bing tracked as CVE-2025-21355, allowed unauthorized attackers to execute arbitrary code remotely, posing severe...

MongoDB is affected by Twin Critical Vulnerabilities

thecyberthrone.in - 21/Feb 14:04

CVE-2025-23061: Mongoose Search Injection Vulnerability Description: CVE-2025-23061 is a critical vulnerability identified in Mongoose versions prior...

Citrix NetScaler Vulnerability Exposes Systems to Unauthorized Commands

itsecuritynews.info - 20/Feb 06:07

Cloud Software Group has raced to address a severe security flaw in its widely used NetScaler management infrastructure that could enable...

Symantec Diagnostic Tool Flaw Enables Unauthorized Privilege Escalation

itsecuritynews.info - 20/Feb 08:11

Symantec, a division of Broadcom, has released a critical security update to address a high-severity vulnerability identified in its Symantec...

Microsoft fixed actively exploited flaw in Power Pages

securityaffairs.co - 20/Feb 11:20

Microsoft addressed a privilege escalation vulnerability in Power Pages, the flaw is actively exploited in attacks. Microsoft has addressed two...

U.S. CISA adds Microsoft Power Pages flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 23/Feb 15:07

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Power Pages vulnerability to its Known Exploited Vulnerabilities catalog....

CVE-2025-27364 affects MITRE Caldera

thecyberthrone.in - 01/Mar 05:01

CVE-2025-27364 is a critical Remote Code Execution (RCE) vulnerability identified in MITRE Caldera, a highly regarded cybersecurity platform used for...

Rubriques :