CVE-2024-52046 Impacts Apache Mina

CVE-2024-52046 is a critical security vulnerability found in the Apache MINA library. This vulnerability is located within the ObjectSerializationDecoder component, which uses Java’s native serialization mechanisms to decode incoming serialized data. The core issue is the absence of robust security checks and validation during the deserialization process, allowing attackers to craft malicious serialized data that […]

LangGraph Deserialization Flaw Enables Execution of Malicious Python Code

itsecuritynews.info - 10/Nov 07:04

A critical remote code execution vulnerability has been discovered in LangGraph’s checkpoint serialization library, affecting versions before 3.0....

LangGraph Deserialization Flaw Enables Execution of Malicious Python Code

itsecuritynews.info - 10/Nov 07:04

A critical remote code execution vulnerability has been discovered in LangGraph’s checkpoint serialization library, affecting versions before 3.0....

Cisco Catalyst Center Vulnerability Let Attackers Escalate Priveleges

itsecuritynews.info - 15/Nov 16:09

A serious security flaw in Cisco Catalyst Center Virtual Appliance has been discovered that allows attackers with low-level access to gain full...

Cisco Catalyst Center Vulnerability Let Attackers Escalate Priveleges

itsecuritynews.info - 15/Nov 16:09

A serious security flaw in Cisco Catalyst Center Virtual Appliance has been discovered that allows attackers with low-level access to gain full...

Critical Dell Data Lakehouse Vulnerability Let Remote Attacker Escalate Privileges

itsecuritynews.info - 13/Nov 10:04

Dell Technologies has disclosed a critical security vulnerability in its Data Lakehouse platform that could allow remote attackers to escalate...

WatchGuard Firebox Flaw Allows Attackers to Gain Unauthorized SSH Access

itsecuritynews.info - 11/Nov 09:34

A security vulnerability has been discovered in WatchGuard Firebox devices that could allow attackers to bypass authentication mechanisms and gain...

SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely

itsecuritynews.info - 07:34

SonicWall has disclosed a critical stack-based buffer overflow vulnerability in its SonicOS SSLVPN service. That allows remote unauthenticated...

SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely

itsecuritynews.info - 07:34

SonicWall has disclosed a critical stack-based buffer overflow vulnerability in its SonicOS SSLVPN service. That allows remote unauthenticated...

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

itsecuritynews.info - 15/Nov 17:08

The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers...

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

itsecuritynews.info - 15/Nov 17:08

The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers...

Rubriques :

CVE-2024-52046 Impacts Apache Mina

Articles similaires

LangGraph Deserialization Flaw Enables Execution of Malicious Python Code

LangGraph Deserialization Flaw Enables Execution of Malicious Python Code

Cisco Catalyst Center Vulnerability Let Attackers Escalate Priveleges

Cisco Catalyst Center Vulnerability Let Attackers Escalate Priveleges

Critical Dell Data Lakehouse Vulnerability Let Remote Attacker Escalate Privileges

WatchGuard Firebox Flaw Allows Attackers to Gain Unauthorized SSH Access

SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely

SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Les derniers communiqués