CVE-2025-23419 impacts Nginx Server

CVE-2025-23419 is a security vulnerability that arises when multiple server blocks in an Nginx configuration share the same IP address and port. An attacker can exploit this vulnerability by using the session resumption feature to bypass client certificate authentication on these servers. This exploitation is possible because of the way TLS Session Tickets and SSL […]

CVE-2025-0065 Impacts TeamViewer Client

thecyberthrone.in - 29/Jan 12:30

Background CVE-2025-0065 is an unauthenticated privilege escalation vulnerability with a CVSS score of 7.8. This flaw is found in the...

CVE-2025-21293 PoC Exploit Code Released

thecyberthrone.in - 06/Feb 00:25

Vulnerability Overview CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. The vulnerability arises from...

Attackers exploit a new zero-day to hijack Fortinet firewalls

securityaffairs.co - 23:06

Fortinet warned of attacks using a now-patched zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls. Fortinet warned that...

TheCyberThrone Security Weekly Review – February 08, 2025

thecyberthrone.in - 09/Feb 12:52

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for...

CVE-2025-25064 impacts Zimbra with SQL Injection

thecyberthrone.in - 10/Feb 16:03

CVE-2025-25064 is a critical security vulnerability identified in Zimbra Collaboration software, a widely used email and collaboration platform. This...

VMware fixes CVE-2025-22217 in Avi Load Balancer

thecyberthrone.in - 29/Jan 00:56

Background CVE-2025-22217 is a critical vulnerability identified in VMware’s Avi Load Balancer, which is an unauthenticated blind SQL injection...

CISA Warns of Trimble Cityworks RCE Vulnerability Exploited to Hack IIS Servers

itsecuritynews.info - 08/Feb 04:09

The CISA has issued a warning regarding a critical remote code execution (RCE) vulnerability affecting Trimble Cityworks, a popular software solution...

SonicWall firewall exploit lets hackers hijack VPN sessions, patch now

bleepingcomputer.com - 15:56

Security researchers at Bishop Fox have published complete exploitation details for the CVE-2024-53704 vulnerability that allows bypassing the...

CVE-2024-56161 impacts AMD SEV-SNP Microcode

thecyberthrone.in - 06/Feb 12:37

Background CVE-2024-56161 is an improper signature verification vulnerability found in the AMD CPU ROM microcode patch loader. This vulnerability...

CVE-2025-23114 Impacts Veeam Backup

thecyberthrone.in - 05/Feb 14:07

CVE-2025-23114 is a critical vulnerability identified in the Veeam Updater component used across various Veeam backup and replication products. This...

Rubriques :