Spring Framework Vulnerability CVE-2024-38816 fixed

A high severity vulnerability has been discovered in the Spring Framework, that allows attackers to gain unauthorized access to sensitive files on the server, posing a significant risk of data breaches and system compromise. The vulnerability tracked as CVE-2024-38816 with a CVSS score of 7.5 lies in handling the static resources served through the functional […]

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Apache Lucene fixes CVE-2024-43383

thecyberthrone.in - 02/Nov 04:02

Apache Lucene.NET, an open-source search library has been discovered having a security flaw that could allow attackers to remotely execute malicious...

Squid Proxy has a DoS Vulnerability CVE-2024-45802

thecyberthrone.in - 30/Oct 06:47

The SQUID project has released patches for a high-severity DoS vulnerability in Squid. This vulnerability, tracked as CVE-2024-45802 with...

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Google fixes CVE-2024-43093 in Android OS

thecyberthrone.in - 05/Nov 16:55

Google has come with a warning about a vulnerability in the Android OS that is actively exploited in the wild. The vulnerability tracked as...

PSAUX Ransomware exploits CyberPanel Vulnerabilities

thecyberthrone.in - 30/Oct 13:39

The PSAUX ransomware has seen exploiting CyberPanel vulnerabilities affects versions 2.3.6 and 2.3.7 and permits unauthenticated attackers to gain...

Veeam Fixes CVE-2024-40715 with a hotfix release

thecyberthrone.in - 07/Nov 13:58

Veeam has released a patch for a vulnerability impacting Veeam Backup Enterprise Manager. that is vulnerable to Man-in-the-Middle (MITM)...

Critical bug in Cisco UWRB access points allows attackers to run commands as root

itsecuritynews.info - 07/Nov 07:39

Cisco fixed a critical flaw in URWB access points, allowing attackers to run root commands, compromising industrial wireless automation security....

Android flaw CVE-2024-43093 may be under limited, targeted exploitation

securityaffairs.co - 05/Nov 08:51

Google warned that a vulnerability, tracked as CVE-2024-43093, in the Android OS is actively exploited in the wild. Threat actors are actively...

Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418)

itsecuritynews.info - 07/Nov 09:36

Cisco has fixed a critical command injection vulnerability (CVE-2024-20418) affecting its Ultra-Reliable Wireless Backhaul (URWB) Access Points that...

Rubriques :