X

Vous n'êtes pas connecté

Rubriques :

Maroc Maroc - THECYBERTHRONE.IN - A La Une - 18/01/2025 15:10

CVE-2024-7344 impacts UEFI based systems

CVE-2024-7344 is a critical vulnerability affecting UEFI-based systems. It was discovered by researchers at ESET and involves a bypass of the UEFI Secure Boot mechanism, allowing untrusted code to run during system boot, posing a significant security risk. Key Highlights: Technical Details: Resolution: Implications: Future Considerations: Conclusion: The discovery of CVE-2024-7344 highlights the need for […]

Articles similaires

Sorry! Image not available at this time

Critical SandboxJS Vulnerability Allows Remote Host Takeover – PoC Released

itsecuritynews.info - 11/Feb 17:18

A severe sandbox escape vulnerability has been discovered in the JavaScript library, enabling attackers to execute arbitrary code on host systems. The...

Sorry! Image not available at this time

Ingress-NGINX Flaw Enables Arbitrary Code Execution Attacks

itsecuritynews.info - 04/Feb 07:02

A high-severity vulnerability has been discovered in the Kubernetes ingress-nginx controller, allowing attackers to execute arbitrary code and...

Sorry! Image not available at this time

Critical SQL Injection in FortiClientEMS: CVE-2026-21643

thecyberthrone.in - 12/Feb 01:03

CVE-2026-21643 is a critical SQL injection vulnerability affecting Fortinet FortiClientEMS version 7.4.4, enabling unauthenticated attackers to...

Sorry! Image not available at this time

Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423)

itsecuritynews.info - 06/Feb 11:12

For the third time in two weeks, CISA added a vulnerability (CVE-2026-24423) affecting SmarterTools’ SmarterMail email and collaboration server to...

Sorry! Image not available at this time

Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423)

itsecuritynews.info - 06/Feb 11:12

For the third time in two weeks, CISA added a vulnerability (CVE-2026-24423) affecting SmarterTools’ SmarterMail email and collaboration server to...

Sorry! Image not available at this time

Critical Vulnerability in Next-Mdx-Remote Allows Arbitrary Code Execution in React Server-Side Rendering

itsecuritynews.info - 13/Feb 08:20

Security advisory HCSEC-2026-01 revealed a critical vulnerability in the next-mdx-remote library that allows attackers to execute arbitrary code on...

Sorry! Image not available at this time

BeyondTrust Remote Support Critical Vulnerability- CVE-2026-1731

thecyberthrone.in - 10/Feb 02:29

Vulnerability Summary Technical Details Impact Exploitability Mitigation / Remediation Summary CVE-2026-1731 is a critical remote code execution...

Sorry! Image not available at this time

BeyondTrust Remote Access Products 0-Day Vulnerability Allows Remote Code Execution

itsecuritynews.info - 07/Feb 11:18

BeyondTrust has disclosed a critical pre-authentication remote code execution vulnerability affecting its Remote Support (RS) and Privileged Remote...

Sorry! Image not available at this time

Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized Access

itsecuritynews.info - 05:32

The Langchain development team has released a critical security update for the @langchain/community package to address a Server-Side Request Forgery...

Sorry! Image not available at this time

Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized Access

itsecuritynews.info - 05:32

The Langchain development team has released a critical security update for the @langchain/community package to address a Server-Side Request Forgery...

Les derniers communiqués