CVE-2024-45387 Critical Bug in Apache Traffic Control

CVE-2024-45387 represents a significant security concern within the Traffic Ops component of Apache Traffic Control, specifically impacting versions The heart of this vulnerability is an SQL injection flaw. Essentially, it allows a privileged user—such as those with roles like admin, federation, operations, portal, or steering—to execute arbitrary SQL commands. This is achieved by sending a […]

Google Released PoC for CVE-2025-0110 PAN OS Flaw

thecyberthrone.in - 23/Feb 14:25

Google’s Project Zero and Mandiant cybersecurity teams have jointly released a proof-of-concept (PoC) exploit for a significant security...

PoC Exploit Released for F5 BIG-IP Command Injection Vulnerability

itsecuritynews.info - 24/Feb 05:32

Security researchers have disclosed critical details about CVE-2025-20029, a command injection vulnerability in F5’s BIG-IP Traffic Management...

Google Released PoC Exploit For Palo Alto Firewall Command Injection Vulnerability

itsecuritynews.info - 21/Feb 05:11

Google’s Project Zero and Mandiant cybersecurity teams have jointly published a proof-of-concept (PoC) exploit for a high-severity command injection...

Citrix NetScaler Vulnerability Exposes Systems to Unauthorized Commands

itsecuritynews.info - 20/Feb 06:07

Cloud Software Group has raced to address a severe security flaw in its widely used NetScaler management infrastructure that could enable...

Windows KDC Proxy RCE Vulnerability Allows Remote Server Takeover

itsecuritynews.info - 05/Mar 06:03

A recently patched remote code execution (RCE) vulnerability in Microsoft Windows’ Key Distribution Center (KDC) Proxy implementation allows...

Critical Microsoft Bing Vulnerability Enabled Remote Code Execution Attacks

itsecuritynews.info - 20/Feb 05:32

A critical security flaw in Microsoft Bing tracked as CVE-2025-21355, allowed unauthorized attackers to execute arbitrary code remotely, posing severe...

LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

itsecuritynews.info - 27/Feb 06:04

A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has been patched after researchers...

Elastic patches critical Kibana flaw allowing code execution

securityaffairs.co - 21:35

Elastic fixed a critical flaw in the Kibana data visualization dashboard software for Elasticsearch that could lead to arbitrary code execution....

CVE-2025-27364 affects MITRE Caldera

thecyberthrone.in - 01/Mar 05:01

CVE-2025-27364 is a critical Remote Code Execution (RCE) vulnerability identified in MITRE Caldera, a highly regarded cybersecurity platform used for...

Symantec Diagnostic Tool Flaw Enables Unauthorized Privilege Escalation

itsecuritynews.info - 20/Feb 08:11

Symantec, a division of Broadcom, has released a critical security update to address a high-severity vulnerability identified in its Symantec...

Rubriques :