Ivanti fixes Critical Security Vulnerabilities in EPM

Ivanti has recently addressed multiple critical and high-severity vulnerabilities in its Endpoint Manager (EPM) software. These vulnerabilities could allow unauthorized access, remote code execution, privilege escalation, and sensitive information leaks. Here is an in-depth examination of the details, impacts, and mitigation strategies for these vulnerabilities. Vulnerability Details Critical Vulnerabilities CVE-2024-10811: Absolute Path Traversal CVE-2024-13161: Absolute […]

VMware Aria Operations Vulnerabilities Let Attackers Perform Admin Operations

itsecuritynews.info - 31/Jan 08:15

Broadcom has addressed multiple vulnerabilities in its VMware Aria Operations for Logs and VMware Aria Operations products. These vulnerabilities,...

CVE-2025-23114 Impacts Veeam Backup

thecyberthrone.in - 14:07

CVE-2025-23114 is a critical vulnerability identified in the Veeam Updater component used across various Veeam backup and replication products. This...

VMware Aria Vulnerabilities Addressed

thecyberthrone.in - 31/Jan 12:19

VMware Security Advisory VMSA-2025-0003 addresses multiple vulnerabilities identified in VMware Aria Operations for Logs and VMware Aria Operations....

PHP Voyager flaws lead to RCE

thecyberthrone.in - 31/Jan 02:20

Three critical vulnerabilities have been disclosed in the open-source PHP package Voyager, a widely used tool for managing Laravel applications. These...

CISA Warns on Contec CM8000 having a Backdoor

thecyberthrone.in - 03/Feb 12:54

The Contec CM8000 patient monitor has been identified as having critical vulnerabilities, specifically backdoor functionalities, which pose...

TeamViewer fixed a vulnerability in Windows client and host applications

securityaffairs.co - 30/Jan 15:29

TeamViewer has patched a high-severity privilege escalation vulnerability affecting its Windows client and host applications. TeamViewer released...

PoC Exploit Released for Active Directory Domain Services Privilege Escalation Vulnerability

itsecuritynews.info - 04/Feb 04:32

A proof-of-concept (PoC) exploit code has been released for CVE-2025-21293, a critical Active Directory Domain Services Elevation of Privilege...

CVE-2024-53104 Linux Kernel Flaw Added to CISA’s KEV Catalog

thecyberthrone.in - 05:53

On February 5, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-53104 to its Known Exploited Vulnerabilities (KEV)...

VMware fixes CVE-2025-22217 in Avi Load Balancer

thecyberthrone.in - 29/Jan 00:56

Background CVE-2025-22217 is a critical vulnerability identified in VMware’s Avi Load Balancer, which is an unauthenticated blind SQL injection...

CVE-2025-24480 impacts Rockwell Automation

thecyberthrone.in - 02/Feb 01:03

CVE-2025-24480 is a critical vulnerability that has been identified in FactoryTalk View Machine Edition, a widely used industrial automation software...

Rubriques :