Docker Desktop bugs CVE-2024-8695 and CVE-2024-8696 fixed

Docker Desktop has been found to have two critical security vulnerabilities that could enable remote code execution (RCE) attacks. The vulnerabilities, tracked as CVE-2024-8695 with a CVSSv4 score of 9.0, and CVE-2024-8696 with a CVSSv4 score of 8.9, were discovered in Docker Desktop versions prior to 4.34.2. They stem from the way Docker Desktop handles extension descriptions, changelogs, […]

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Microsoft SharePoint RCE bug exploited to breach corporate network

bleepingcomputer.com - 02/Nov 15:19

A recently disclosed Microsoft SharePoint remote code execution (RCE) vulnerability tracked as CVE-2024-38094 is being exploited to gain initial...

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

PSAUX Ransomware exploits CyberPanel Vulnerabilities

thecyberthrone.in - 30/Oct 13:39

The PSAUX ransomware has seen exploiting CyberPanel vulnerabilities affects versions 2.3.6 and 2.3.7 and permits unauthenticated attackers to gain...

Siemens fixes Critical Vulnerability CVE-2024-47901

thecyberthrone.in - 27/Oct 16:50

Siemens has released patches for multiple vulnerabilities in its InterMesh wireless alarm reporting system that could allow an unauthenticated, remote...

Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices

securityaffairs.co - 06/Nov 09:09

Synology addressed a critical vulnerability in DiskStation and BeePhotos NAS devices that could lead to remote code execution. Taiwanese vendor...

Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems

itsecuritynews.info - 07/Nov 08:36

Cisco has released security updates to address a maximum severity security flaw impacting Ultra-Reliable Wireless Backhaul (URWB) Access Points that...

Apache Lucene fixes CVE-2024-43383

thecyberthrone.in - 02/Nov 04:02

Apache Lucene.NET, an open-source search library has been discovered having a security flaw that could allow attackers to remotely execute malicious...

The CyberThrone most exploited vulnerabilities review – October 26, 2024

thecyberthrone.in - 28/Oct 11:53

Welcome to TheCyberThrone most exploited vulnerabilities review. This review is for the weeks ending Saturday, October 26, 2024. Fortinet...

Critical bug in Cisco UWRB access points allows attackers to run commands as root

securityaffairs.co - 07/Nov 06:17

Cisco fixed a critical flaw in URWB access points, allowing attackers to run root commands, compromising industrial wireless automation security....

Rubriques :