CVE-2024-49415 : Samsung Android devices Impacted

CVE-2024-49415 is a critical vulnerability found in Samsung devices running Android versions 12, 13, and 14. This vulnerability was discovered by researchers from Google Project Zero, a team dedicated to identifying and reporting zero-day vulnerabilities. The issue resides in the libsaped.so library and allows remote attackers to execute arbitrary code on affected devices. Technical Details […]

CVE-2025-23006 impacts SonicWall SMA 1000 Series

thecyberthrone.in - 24/Jan 01:34

CVE-2025-23006 is a critical pre-authentication deserialization of untrusted data vulnerability identified in SonicWall’s Secure Mobile Access...

CVE-2025-0107 PoC Exploit Code Released for PaloAlto Flaw

thecyberthrone.in - 19/Jan 00:56

Background: CVE-2025-0107 is a critical OS command injection vulnerability discovered in Palo Alto Networks’ Expedition Tool, version 1.2.101...

Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners

securityaffairs.co - 14/Jan 10:23

A critical vulnerability in Aviatrix Controller is actively exploited to deploy backdoors and cryptocurrency miners in the wild. A security researcher...

New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344)

itsecuritynews.info - 16/Jan 10:34

ESET researchers have identified a vulnerability (CVE-2024-7344) impacting most UEFI-based systems, which allows attackers to bypass UEFI Secure Boot....

CVE-2024-53691: PoC Exploit Code Release for QNAP Flaw

thecyberthrone.in - 20/Jan 01:12

CVE-2024-53691 is a severe remote code execution (RCE) vulnerability discovered in QNAP NAS devices. Recently, security researcher c411e released a...

PANdora Box Vulnerabilities in PaloAlto Firewalls

thecyberthrone.in - 25/Jan 01:25

Overview of PANdora’s Box PANdora’s Box is a term used to describe a series of critical vulnerabilities identified in various models of...

Kubernetes Cluster RCE Vulnerability Let Attacker Takeover All Windows Nodes

itsecuritynews.info - 04:06

A critical vulnerability in Kubernetes, designated as CVE-2024-9042, has been discovered, enabling attackers to execute remote code with SYSTEM...

CVE-2025-0411 impacts 7-Zip with Code Execution

thecyberthrone.in - 21/Jan 13:27

Background of CVE-2025-0411 CVE-2025-0411 is a security flaw identified in 7-Zip, a widely-used open-source file archiver. This vulnerability allows...

CVE-2024-12398 impacts Zyxel Devices

thecyberthrone.in - 14/Jan 13:14

CVE-2024-12398 is a critical vulnerability discovered in the web management interface of certain Zyxel devices. This vulnerability allows an...

Vulnerability Summary for the Week of January 20, 2025

itsecuritynews.info - 18:36

High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info aEnrich Technology–a+HRD The a+HRD from aEnrich...

Rubriques :