Citrix Workspace vulnerabilities fixed

Cloud Software Group has disclosed two vulnerabilities affecting Citrix Workspace app for Windows that could allow a malicious actor with low-level access to escalate their privileges to the highest level (SYSTEM), potentially taking complete control of a compromised system. Vulnerability Details: Affected Versions: Security researcher Sandro Poppi responsibly disclosed these vulnerabilities and worked with Cloud […]

Siemens fixes Critical Vulnerability CVE-2024-47901

thecyberthrone.in - 27/Oct 16:50

Siemens has released patches for multiple vulnerabilities in its InterMesh wireless alarm reporting system that could allow an unauthenticated, remote...

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Apache Lucene fixes CVE-2024-43383

thecyberthrone.in - 02/Nov 04:02

Apache Lucene.NET, an open-source search library has been discovered having a security flaw that could allow attackers to remotely execute malicious...

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Cisco Patches Critical Vulnerability in Industrial Networking Solution

itsecuritynews.info - 07/Nov 12:32

A critical vulnerability in Cisco Unified Industrial Wireless software could allow remote, unauthenticated attackers to inject commands with root...

SonicWall Vulnerability exploited by Fog and Akira Ransomware

thecyberthrone.in - 30/Oct 02:24

Sonicwall SSL VPN vulnerability tracked as CVE-2024-40766 has been exploited in the recent cyberattacks involving Akira and Fog ransomware. Initial...

Google fixes CVE-2024-10487 and CVE-2024-10488 in latest Chrome version

thecyberthrone.in - 30/Oct 08:20

Google has released updates to address two vulnerabilities in the Chrome browser that could potentially allow attackers to take control of...

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

itsecuritynews.info - 04/Nov 15:11

Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence (AI) framework that could be exploited by a...

Cisco bug lets hackers run commands as root on UWRB access points

bleepingcomputer.com - 06/Nov 19:34

Cisco has fixed a maximum severity vulnerability that allows attackers to run commands with root privileges on vulnerable Ultra-Reliable Wireless...

PSAUX Ransomware exploits CyberPanel Vulnerabilities

thecyberthrone.in - 30/Oct 13:39

The PSAUX ransomware has seen exploiting CyberPanel vulnerabilities affects versions 2.3.6 and 2.3.7 and permits unauthenticated attackers to gain...

Rubriques :