CVE-2025-24503 impacts Symantec PAM

CVE-2025-24503 is a critical security vulnerability affecting Privileged Access Manager (PAM) solutions, specifically those provided by Symantec. This vulnerability, if exploited, can have severe consequences for organizations relying on PAM to secure their sensitive information and privileged accounts. Description CVE-2025-24503 is a Cross-Site Request Forgery (CSRF) vulnerability. CSRF is an attack that tricks an authenticated […]

CVE-2025-23114 Impacts Veeam Backup

thecyberthrone.in - 05/Feb 14:07

CVE-2025-23114 is a critical vulnerability identified in the Veeam Updater component used across various Veeam backup and replication products. This...

CVE-2024-55591 Exploit Code Released for FortiOS Flaw

thecyberthrone.in - 30/Jan 14:44

Cybersecurity company watchTowr Labs has released the proof-of-concept (PoC) exploit code for a severe zero-day vulnerability, CVE-2024-55591,...

Apple fixed the first actively exploited zero-day of 2025

securityaffairs.co - 27/Jan 21:58

Apple addressed the first zero-day vulnerability of 2025, which is actively exploited in attacks in the wild aimed at iPhone users. Apple released...

CISA Warns of Trimble Cityworks RCE Vulnerability Exploited to Hack IIS Servers

itsecuritynews.info - 08/Feb 04:09

The CISA has issued a warning regarding a critical remote code execution (RCE) vulnerability affecting Trimble Cityworks, a popular software solution...

CVE-2025-25064 impacts Zimbra with SQL Injection

thecyberthrone.in - 16:03

CVE-2025-25064 is a critical security vulnerability identified in Zimbra Collaboration software, a widely used email and collaboration platform. This...

CVE-2024-53104 Linux Kernel Flaw Added to CISA’s KEV Catalog

thecyberthrone.in - 06/Feb 05:53

On February 5, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-53104 to its Known Exploited Vulnerabilities (KEV)...

VMware Aria Vulnerabilities Addressed

thecyberthrone.in - 31/Jan 12:19

VMware Security Advisory VMSA-2025-0003 addresses multiple vulnerabilities identified in VMware Aria Operations for Logs and VMware Aria Operations....

Apache James Denial-of-Service Vulnerabilities

thecyberthrone.in - 08/Feb 13:22

The Apache James Mail Server has recently been identified as vulnerable to two distinct Denial-of-Service (DoS) attacks, tracked as CVE-2024-45626 and...

Week in review: Apple 0-day used to target iPhones, DeepSeek’s popularity exploited by scammers

itsecuritynews.info - 02/Feb 09:02

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Apple zero-day vulnerability exploited to target...

Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More

itsecuritynews.info - 28/Jan 04:33

Apple has released software updates to address several security flaws across its portfolio, including a zero-day vulnerability that it said has been...

Rubriques :