CVE-2025-0314 impacts GitLab

CVE-2025-0314 is a high-severity cross-site scripting (XSS) vulnerability identified in GitLab, a widely used platform for version control, CI/CD, and DevOps. This vulnerability enables attackers to inject malicious scripts into GitLab instances by exploiting improper rendering of certain file types. The vulnerability poses significant risks, including session hijacking, data theft, and unauthorized control over affected […]

LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

itsecuritynews.info - 27/Feb 06:04

A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has been patched after researchers...

GitLab Vulnerabilities Allow Attackers to Bypass Security and Run Arbitrary Scripts

itsecuritynews.info - 27/Feb 06:31

GitLab has urgently released security updates to address multiple high-severity vulnerabilities in its platform that could allow attackers to bypass...

Citrix NetScaler Vulnerability Exposes Systems to Unauthorized Commands

itsecuritynews.info - 20/Feb 06:07

Cloud Software Group has raced to address a severe security flaw in its widely used NetScaler management infrastructure that could enable...

CVE-2025-23363 impacts Siemens TeamCenter

thecyberthrone.in - 02/Mar 11:28

CVE-2025-23363 is a high-severity vulnerability identified in Siemens Teamcenter, a product lifecycle management (PLM) software suite used by...

CVE-2025-25012 impacts Kibana

thecyberthrone.in - 01:12

CVE-2025-25012 is a critical vulnerability identified in Elastic Kibana, a widely used data visualization and exploration platform for Elasticsearch....

Cisco Nexus Switch Vulnerability Allows Attackers to Cause DoS

itsecuritynews.info - 27/Feb 05:32

Cisco Systems has disclosed a high-severity vulnerability (CVE-2025-20111) in its Nexus 3000 and 9000 Series Switches operating in standalone NX-OS...

Symantec Diagnostic Tool Flaw Enables Unauthorized Privilege Escalation

itsecuritynews.info - 20/Feb 08:11

Symantec, a division of Broadcom, has released a critical security update to address a high-severity vulnerability identified in its Symantec...

Citrix addressed NetScaler console privilege escalation flaw

securityaffairs.co - 20/Feb 10:46

Citrix addressed a high-severity privilege escalation vulnerability impacting NetScaler Console and NetScaler Agent under certain conditions. Citrix...

CVE-2025-20059 impacts Ping Identity

thecyberthrone.in - 01/Mar 13:10

CVE-2025-20059 represents a critical security vulnerability known as a Relative Path Traversal flaw, which impacts the Ping Identity PingAM Java...

CISA Warns of Microsoft Partner Center Access Control Vulnerability Exploited in Wild

itsecuritynews.info - 26/Feb 05:33

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent advisory on February 25, 2025, confirming that threat actors are...

Rubriques :