GitHub fixes several vulnerabilities including CVE-2024-6800

GitHub has addressed several vulnerabilities in GitHub Enterprise Server (GHES) that could have allowed attackers to gain unauthorized access and manipulate repositories. The most critical vulnerability is tracked as CVE-2024-6800 with a CVSSv4 score of 9.5, resided in GHES’s SAML authentication mechanism and could be exploited by an attacker with direct network access to forge […]

TheCyberThrone CyberSecurity Newsletter Top 5 Articles – October, 2024

thecyberthrone.in - 01/Nov 02:18

Welcome to TheCyberThrone cybersecurity month in review will be posted covering the important security happenings . This review is for the month...

Progress fixes Critical vulnerability in Whatsup Gold

thecyberthrone.in - 28/Oct 14:31

Progress Software has disclosed a critical vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to...

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Google fixes CVE-2024-43093 in Android OS

thecyberthrone.in - 16:55

Google has come with a warning about a vulnerability in the Android OS that is actively exploited in the wild. The vulnerability tracked as...

Siemens fixes Critical Vulnerability CVE-2024-47901

thecyberthrone.in - 27/Oct 16:50

Siemens has released patches for multiple vulnerabilities in its InterMesh wireless alarm reporting system that could allow an unauthenticated, remote...

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

U.S. CISA adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 24/Oct 05:19

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog. The U.S....

Android flaw CVE-2024-43093 may be under limited, targeted exploitation

securityaffairs.co - 08:51

Google warned that a vulnerability, tracked as CVE-2024-43093, in the Android OS is actively exploited in the wild. Threat actors are actively...

Google fixes CVE-2024-10487 and CVE-2024-10488 in latest Chrome version

thecyberthrone.in - 30/Oct 08:20

Google has released updates to address two vulnerabilities in the Chrome browser that could potentially allow attackers to take control of...

Rubriques :