Apache Tomcat fixes CVE-2024-50379 and CVE-2024-54677

The Apache Software Foundation has released patches to mitigate two newly discovered vulnerabilities in Apache Tomcat, an extensively used open-source web server and servlet container. These vulnerabilities could potentially jeopardize systems and compromise sensitive data, highlighting the importance of timely updates and security measures. CVE-2024-50379: Remote Code Execution (RCE) This vulnerability arises in the default […]

Apache Superset 4.1.0 released with bug fixes

thecyberthrone.in - 11/Dec 13:20

The Apache Software Foundation has announced the release of Apache Superset 4.1.0 with several bug fixes that could potentially allow attackers to...

Sophos fixes Triple Critical Vulnerabilities in its Firewall

thecyberthrone.in - 20/Dec 17:05

Sophos released patches for three critical security vulnerabilities in their widely-used network security tool, Sophos Firewall that posed significant...

Fortinet fixes several vulnerabilities including CVE-2023-34990

thecyberthrone.in - 19/Dec 15:33

Fortinet has released patches for vulnerabilities affecting its popular products, including FortiClient VPN, FortiManager, and FortiWLM. These flaws...

CISA KEV Catalog Update Part IV – December 2024

thecyberthrone.in - 17/Dec 01:45

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation....

CISA adds Cleo Vulnerability CVE-2024-50623 to KEV Catalog

thecyberthrone.in - 14/Dec 03:39

The US CISA adds Cleo vulnerability to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation reported. Security...

Dell fixes CVE-2024-37143 and CVE-2024-38144 vulnerabilities

thecyberthrone.in - 16/Dec 14:23

Dell has recently released security updates to address multiple vulnerabilities affecting several of its enterprise products, including PowerFlex,...

Mauri Ransomware Leverages Apache ActiveMQ Vulnerability to Deploy CoinMiners

itsecuritynews.info - 10/Dec 07:37

The Apache ActiveMQ server is vulnerable to remote code execution (CVE-2023-46604), where attackers can exploit this vulnerability by manipulating...

Threat actors are attempting to exploit Apache Struts vulnerability CVE-2024-53677

securityaffairs.co - 18/Dec 20:20

Researchers warn that threat actors are attempting to exploit a recently disclosed Apache Struts vulnerability CVE-2024-53677. Researchers warn that...

CISA KEV Catalog Update Part V – December 2024

thecyberthrone.in - 19/Dec 02:44

The US CISA has added the following vulnerabilities to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation...

Exploit Code for Apache Struts CVE-2024-53677 released

thecyberthrone.in - 18/Dec 13:13

The proof-of-concept (PoC) exploit code for the critical Apache Struts vulnerability, designated as CVE-2024-53677, has been released. This...

Rubriques :