CVE-2025-20156 impacts Cisco Meeting Management

CVE-2025-20156 is a critical vulnerability within the REST API of Cisco Meeting Management. This vulnerability allows a remote, authenticated attacker with low privileges to elevate their access rights to the administrator level on an affected device. The root cause of this flaw is insufficient authorization checks within the REST API, meaning proper authorization is not […]

Cisco addresses a critical privilege escalation bug in Meeting Management

securityaffairs.co - 23/Jan 08:17

Cisco addressed a critical flaw in its Meeting Management that could allow it to gain administrator privileges on vulnerable instances. Cisco released...

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management

itsecuritynews.info - 23/Jan 23:36

No in-the-wild exploits … yet Cisco has pushed a patch for a critical, 9.9-rated vulnerability in its Meeting Management tool that could allow a...

CVE-2025-0065 Impacts TeamViewer Client

thecyberthrone.in - 29/Jan 12:30

Background CVE-2025-0065 is an unauthenticated privilege escalation vulnerability with a CVSS score of 7.8. This flaw is found in the...

Kubernetes Cluster RCE Vulnerability Let Attacker Takeover All Windows Nodes

itsecuritynews.info - 26/Jan 04:06

A critical vulnerability in Kubernetes, designated as CVE-2024-9042, has been discovered, enabling attackers to execute remote code with SYSTEM...

Critical remote code execution bug found in Cacti framework

securityaffairs.co - 29/Jan 14:17

A critical flaw in Cacti open-source network monitoring and fault management framework that could allow remote code execution. Cacti is an...

Cisco warns of a ClamAV bug with PoC exploit

securityaffairs.co - 26/Jan 06:58

Cisco addressed a ClamAV denial-of-service (DoS) vulnerability, and experts warn of the availability of a proof-of-concept (PoC) exploit code. Cisco...

VMware fixes CVE-2025-22217 in Avi Load Balancer

thecyberthrone.in - 29/Jan 00:56

Background CVE-2025-22217 is a critical vulnerability identified in VMware’s Avi Load Balancer, which is an unauthenticated blind SQL injection...

CISA adds jQuery CVE-2020-11023 to KEV Catalog

thecyberthrone.in - 24/Jan 04:01

CVE-2020-11023 is a significant security flaw within jQuery, a widely used JavaScript library. The vulnerability is categorized as a persistent...

TeamViewer Windows App Let Attackers Escalate Privileges to System User

itsecuritynews.info - 09:07

A critical security vulnerability has been identified in TeamViewer Clients for Windows, allowing attackers with local access to escalate their...

CVE-2025-0411 impacts 7-Zip with Code Execution

thecyberthrone.in - 21/Jan 13:27

Background of CVE-2025-0411 CVE-2025-0411 is a security flaw identified in 7-Zip, a widely-used open-source file archiver. This vulnerability allows...

Rubriques :