CVE-2025-20156 impacts Cisco Meeting Management

CVE-2025-20156 is a critical vulnerability within the REST API of Cisco Meeting Management. This vulnerability allows a remote, authenticated attacker with low privileges to elevate their access rights to the administrator level on an affected device. The root cause of this flaw is insufficient authorization checks within the REST API, meaning proper authorization is not […]

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management

itsecuritynews.info - 23/Jan 23:36

No in-the-wild exploits … yet Cisco has pushed a patch for a critical, 9.9-rated vulnerability in its Meeting Management tool that could allow a...

CVE-2025-0065 Impacts TeamViewer Client

thecyberthrone.in - 29/Jan 12:30

Background CVE-2025-0065 is an unauthenticated privilege escalation vulnerability with a CVSS score of 7.8. This flaw is found in the...

Cisco addressed two critical flaws in its Identity Services Engine (ISE)

securityaffairs.co - 15:42

Cisco addressed critical flaws in Identity Services Engine, preventing privilege escalation and system configuration changes. Cisco addressed multiple...

CVE-2025-21293 PoC Exploit Code Released

thecyberthrone.in - 00:25

Vulnerability Overview CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. The vulnerability arises from...

Kubernetes Cluster RCE Vulnerability Let Attacker Takeover All Windows Nodes

itsecuritynews.info - 26/Jan 04:06

A critical vulnerability in Kubernetes, designated as CVE-2024-9042, has been discovered, enabling attackers to execute remote code with SYSTEM...

Critical remote code execution bug found in Cacti framework

securityaffairs.co - 29/Jan 14:17

A critical flaw in Cacti open-source network monitoring and fault management framework that could allow remote code execution. Cacti is an...

Cisco warns of a ClamAV bug with PoC exploit

securityaffairs.co - 26/Jan 06:58

Cisco addressed a ClamAV denial-of-service (DoS) vulnerability, and experts warn of the availability of a proof-of-concept (PoC) exploit code. Cisco...

VMware fixes CVE-2025-22217 in Avi Load Balancer

thecyberthrone.in - 29/Jan 00:56

Background CVE-2025-22217 is a critical vulnerability identified in VMware’s Avi Load Balancer, which is an unauthenticated blind SQL injection...

CVE-2024-53104 Linux Kernel Flaw Added to CISA’s KEV Catalog

thecyberthrone.in - 05:53

On February 5, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-53104 to its Known Exploited Vulnerabilities (KEV)...

CISA adds jQuery CVE-2020-11023 to KEV Catalog

thecyberthrone.in - 24/Jan 04:01

CVE-2020-11023 is a significant security flaw within jQuery, a widely used JavaScript library. The vulnerability is categorized as a persistent...

Rubriques :