CVE-2025-23419 impacts Nginx Server

CVE-2025-23419 is a security vulnerability that arises when multiple server blocks in an Nginx configuration share the same IP address and port. An attacker can exploit this vulnerability by using the session resumption feature to bypass client certificate authentication on these servers. This exploitation is possible because of the way TLS Session Tickets and SSL […]

CVE-2025-0065 Impacts TeamViewer Client

thecyberthrone.in - 29/Jan 12:30

Background CVE-2025-0065 is an unauthenticated privilege escalation vulnerability with a CVSS score of 7.8. This flaw is found in the...

CVE-2025-21293 PoC Exploit Code Released

thecyberthrone.in - 06/Feb 00:25

Vulnerability Overview CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. The vulnerability arises from...

Attackers exploit a new zero-day to hijack Fortinet firewalls

securityaffairs.co - 23:06

Fortinet warned of attacks using a now-patched zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls. Fortinet warned that...

CVE-2024-24472 impacts Fortinet Producrs

thecyberthrone.in - 12:43

CVE-2024-24472 is a critical security vulnerability identified in Fortinet products, specifically FortiOS and FortiProxy. This vulnerability poses a...

TheCyberThrone Security Weekly Review – February 08, 2025

thecyberthrone.in - 09/Feb 12:52

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for...

CVE-2025-25064 impacts Zimbra with SQL Injection

thecyberthrone.in - 10/Feb 16:03

CVE-2025-25064 is a critical security vulnerability identified in Zimbra Collaboration software, a widely used email and collaboration platform. This...

VMware fixes CVE-2025-22217 in Avi Load Balancer

thecyberthrone.in - 29/Jan 00:56

Background CVE-2025-22217 is a critical vulnerability identified in VMware’s Avi Load Balancer, which is an unauthenticated blind SQL injection...

CVE-2024-38657 impacts Ivanti Connect Secure and Policy Secure

thecyberthrone.in - 07:38

CVE-2024-38657 is a critical security vulnerability identified in Ivanti Connect Secure and Ivanti Policy Secure. This vulnerability has significant...

CISA Warns of Trimble Cityworks RCE Vulnerability Exploited to Hack IIS Servers

itsecuritynews.info - 08/Feb 04:09

The CISA has issued a warning regarding a critical remote code execution (RCE) vulnerability affecting Trimble Cityworks, a popular software solution...

SonicWall firewall exploit lets hackers hijack VPN sessions, patch now

bleepingcomputer.com - 15:56

Security researchers at Bishop Fox have published complete exploitation details for the CVE-2024-53704 vulnerability that allows bypassing the...

Rubriques :