CVE-2024-52046 Impacts Apache Mina

CVE-2024-52046 is a critical security vulnerability found in the Apache MINA library. This vulnerability is located within the ObjectSerializationDecoder component, which uses Java’s native serialization mechanisms to decode incoming serialized data. The core issue is the absence of robust security checks and validation during the deserialization process, allowing attackers to craft malicious serialized data that […]

CVE-2024-43441Impacts Apache HugeGraph

thecyberthrone.in - 26/12/2024 03:41

CVE-2024-43441 is a critical vulnerability that impacts Apache HugeGraph-Server. This vulnerability allows attackers to bypass authentication...

Nuclei flaw allows signature bypass and code execution

securityaffairs.co - 05/Jan 19:06

A vulnerability in Nuclei, an open-source vulnerability scanner, could allow attackers to bypass signature checks and execute malicious code. A...

CVE-2024-56512 impacts Apache NiFi

thecyberthrone.in - 30/12/2024 11:35

CVE-2024-56512 is a security vulnerability identified in Apache NiFi, specifically affecting versions 1.10.0 through 2.0.0. This vulnerability is due...

TheCyberThrone Security Weekly Review – January 04, 2025

thecyberthrone.in - 05/Jan 12:47

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the week ending...

CVE-2024-45387 Critical Bug in Apache Traffic Control

thecyberthrone.in - 25/12/2024 15:00

CVE-2024-45387 represents a significant security concern within the Traffic Ops component of Apache Traffic Control, specifically impacting versions...

CVE-2024-10957: UpdraftPlus WordPress Plugin Vulnerability

thecyberthrone.in - 09:17

CVE-2024-10957 is a high-severity vulnerability affecting the UpdraftPlus: WP Backup & Migration Plugin for WordPress. This vulnerability, present...

CVE-2024-23945 Impacts Apache Hive and Spark

thecyberthrone.in - 25/12/2024 17:11

Apache Hive and Apache Spark have been impacted by a vulnerability CVE-2024-23945 with a CVSS score of 8.7.This vulnerability specifically targets the...

CVE-2024-43405 Vulnerability in Nuclei

thecyberthrone.in - 02:07

CVE-2024-43405 is a high severity vulnerability identified in Nuclei, a widely used open-source vulnerability scanner. This vulnerability, affecting...

Apache fixed a critical SQL Injection in Apache Traffic Control

securityaffairs.co - 26/12/2024 00:43

Apache Software Foundation (ASF) addressed a critical SQL Injection vulnerability, tracked as CVE-2024-45387, in Apache Traffic Control. The Apache...

CVE-2024-21182: Oracle WebLogic Server Flaw Exploit Code Released

thecyberthrone.in - 31/12/2024 07:32

CVE-2024-21182 is a high-severity vulnerability identified in Oracle WebLogic Server. This security flaw affects specific versions of the software,...

Rubriques :