CVE-2025-23419 impacts Nginx Server

CVE-2025-23419 is a security vulnerability that arises when multiple server blocks in an Nginx configuration share the same IP address and port. An attacker can exploit this vulnerability by using the session resumption feature to bypass client certificate authentication on these servers. This exploitation is possible because of the way TLS Session Tickets and SSL […]

CVE-2025-0108 impacts PaloAlto PAN-OS

thecyberthrone.in - 14:52

CVE-2025-0108 is a high-severity vulnerability affecting Palo Alto Networks PAN-OS software. Description CVE-2025-0108 is an authentication bypass...

CVE-2024-53704 impacts SonicWall

thecyberthrone.in - 01:02

CVE-2024-53704 is a high-severity security vulnerability identified in SonicWall products, specifically within the SSLVPN authentication mechanism....

CVE-2025-21293 PoC Exploit Code Released

thecyberthrone.in - 06/Feb 00:25

Vulnerability Overview CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. The vulnerability arises from...

Attackers exploit a new zero-day to hijack Fortinet firewalls

securityaffairs.co - 11/Feb 23:06

Fortinet warned of attacks using a now-patched zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls. Fortinet warned that...

CVE-2024-24472 impacts Fortinet Producrs

thecyberthrone.in - 12/Feb 12:43

CVE-2024-24472 is a critical security vulnerability identified in Fortinet products, specifically FortiOS and FortiProxy. This vulnerability poses a...

TheCyberThrone Security Weekly Review – February 08, 2025

thecyberthrone.in - 09/Feb 12:52

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for...

PAN-OS authentication bypass hole plugged, PoC is public (CVE-2025-0108)

itsecuritynews.info - 11:31

Palo Alto Networks has fixed a high-severity authentication bypass vulnerability (CVE-2025-0108) in the management web interface of its next-gen...

CVE-2025-25064 impacts Zimbra with SQL Injection

thecyberthrone.in - 10/Feb 16:03

CVE-2025-25064 is a critical security vulnerability identified in Zimbra Collaboration software, a widely used email and collaboration platform. This...

CVE-2024-38657 impacts Ivanti Connect Secure and Policy Secure

thecyberthrone.in - 12/Feb 07:38

CVE-2024-38657 is a critical security vulnerability identified in Ivanti Connect Secure and Ivanti Policy Secure. This vulnerability has significant...

CVE-2025-1146 impacts selected CrowdStrike Falcon Sensors

thecyberthrone.in - 13:25

CVE-2025-1146 is a significant security vulnerability affecting CrowdStrike Falcon sensors for Linux, Falcon Kubernetes Admission Controller, and...

Rubriques :