X

Vous n'êtes pas connecté

Maroc Maroc - THECYBERTHRONE.IN - A La Une - 22/Aug 01:19

Spring Security fixes CVE-2024-38810

A high-severity flaw has been discovered in Spring Security, potentially allowing unauthorized access to sensitive data within affected applications. Spring Security’s powerful method security features allow developers to control access to application methods using annotations like @PreAuthorize and @PostAuthorize. The vulnerability tracked as CVE-2024-38810 reveals a significant flaw: when objects are wrapped using @AuthorizeReturnObject or the AuthorizationAdvisorProxyFactory […]

Articles similaires

Sorry! Image not available at this time

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Sorry! Image not available at this time

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Sorry! Image not available at this time

Google fixes CVE-2024-43093 in Android OS

thecyberthrone.in - 16:55

Google has come with a warning about a vulnerability in the Android OS that is actively exploited in the wild. The vulnerability tracked as...

Sorry! Image not available at this time

Progress fixes Critical vulnerability in Whatsup Gold

thecyberthrone.in - 28/Oct 14:31

Progress Software has disclosed a critical vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to...

Sorry! Image not available at this time

Apache Lucene fixes CVE-2024-43383

thecyberthrone.in - 02/Nov 04:02

Apache Lucene.NET, an open-source search library has been discovered having a security flaw that could allow attackers to remotely execute malicious...

Sorry! Image not available at this time

Android flaw CVE-2024-43093 may be under limited, targeted exploitation

securityaffairs.co - 08:51

Google warned that a vulnerability, tracked as CVE-2024-43093, in the Android OS is actively exploited in the wild. Threat actors are actively...

Sorry! Image not available at this time

Fortinet warns of new critical FortiManager flaw used in zero-day attacks

bleepingcomputer.com - 23/Oct 15:05

Fortinet publicly disclosed today a critical FortiManager API vulnerability, tracked as CVE-2024-47575, that was exploited in zero-day attacks to...

Sorry! Image not available at this time

Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite

itsecuritynews.info - 25/Oct 14:34

A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges. The...

Sorry! Image not available at this time

Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite

itsecuritynews.info - 25/Oct 14:34

A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges. The...

Sorry! Image not available at this time

Squid Proxy has a DoS Vulnerability CVE-2024-45802

thecyberthrone.in - 30/Oct 06:47

The SQUID project has released patches for a high-severity  DoS  vulnerability in Squid. This vulnerability, tracked as CVE-2024-45802 with...

Les derniers communiqués

  • Aucun élément