CVE-2025-1240 impacts WinZip with a RCE

CVE-2025-1240 is a critical security vulnerability affecting the popular file compression software WinZip. This vulnerability presents significant risks to users by allowing remote attackers to execute arbitrary code on affected installations. Nature of the Vulnerability CVE-2025-1240 is a Remote Code Execution (RCE) vulnerability caused by improper validation of user-supplied data when parsing 7Z files. The […]

PostgreSQL Terminal Tool Injection Vulnerability Allows Remote Code Execution

itsecuritynews.info - 14/Feb 08:32

Researchers have uncovered a high-severity SQL injection vulnerability, CVE-2025-1094, affecting PostgreSQL’s interactive terminal tool, psql. ...

CISA Warns of Trimble Cityworks RCE Vulnerability Exploited to Hack IIS Servers

itsecuritynews.info - 08/Feb 04:09

The CISA has issued a warning regarding a critical remote code execution (RCE) vulnerability affecting Trimble Cityworks, a popular software solution...

Critical Ivanti CSA Vulnerability Allows Attackers Remote Code Execution to Gain Restricted Access

itsecuritynews.info - 12/Feb 06:11

A critical vulnerability has been discovered in the Ivanti Cloud Services Application (CSA), potentially allowing attackers to execute remote code and...

30,000 WordPress Sites Exposed to Exploitation via File Upload Vulnerability

itsecuritynews.info - 13/Feb 13:05

A critical security vulnerability in the “Security & Malware scan by CleanTalk” plugin has left over 30,000 WordPress websites exposed to...

CVE-2025-1126 impacts Lexmark Print Management Client

thecyberthrone.in - 16:36

CVE-2025-1126 is a significant security vulnerability affecting the Lexmark Print Management Client. This vulnerability presents severe risks to...

AMD Ryzen DLL Hijacking Vulnerability Let Attackers Execute Arbitrary Code

itsecuritynews.info - 14/Feb 08:31

A high-severity security vulnerability, identified as CVE-2024-21966, has been discovered in the AMD Ryzen™ Master Utility, a software tool designed...

Google Patched Linux Kernel RCE Vulnerability In Android Allow Attackers Gain Read/Write Access

itsecuritynews.info - 04/Feb 12:31

Google has released its February 2025 Android Security Bulletin, which addresses 47 vulnerabilities impacting Android devices. A notable issue is a...

CVE-2025-23114 Impacts Veeam Backup

thecyberthrone.in - 05/Feb 14:07

CVE-2025-23114 is a critical vulnerability identified in the Veeam Updater component used across various Veeam backup and replication products. This...

Unpatched Marvel Game RCE Exploit Could Let Hackers Take Over PCs & PS5s

itsecuritynews.info - 10/Feb 04:02

A critical security vulnerability has been discovered in the popular online game Marvel Rivals, raising alarms about the potential for hackers to...

Over 12,000 KerioControl firewalls exposed to exploited RCE flaw

bleepingcomputer.com - 10/Feb 23:58

Over twelve thousand GFI KerioControl firewall instances are exposed to a critical remote code execution vulnerability tracked as CVE-2024-52875....

Rubriques :