X

Vous n'êtes pas connecté

Maroc Maroc - THECYBERTHRONE.IN - A La Une - 26/12/2024 13:00

CVE-2024-52046 Impacts Apache Mina

CVE-2024-52046 is a critical security vulnerability found in the Apache MINA library. This vulnerability is located within the ObjectSerializationDecoder component, which uses Java’s native serialization mechanisms to decode incoming serialized data. The core issue is the absence of robust security checks and validation during the deserialization process, allowing attackers to craft malicious serialized data that […]

Articles similaires

Sorry! Image not available at this time

Critical Apache Struts 2 Flaw Could Let Attackers Steal Sensitive Data

itsecuritynews.info - 10:03

A newly disclosed vulnerability in Apache Struts 2’s XWork component could expose sensitive data and open the door to denial‑of‑service and...

Sorry! Image not available at this time

Critical Apache Struts 2 Flaw Could Let Attackers Steal Sensitive Data

itsecuritynews.info - 10:03

A newly disclosed vulnerability in Apache Struts 2’s XWork component could expose sensitive data and open the door to denial‑of‑service and...

Sorry! Image not available at this time

LangChain Security Issue Puts AI Application Data at Risk

itsecuritynews.info - 18:06

  A critical security vulnerability has been identified in LangChain’s core library that could allow attackers to extract sensitive system data...

Sorry! Image not available at this time

LangChain Security Issue Puts AI Application Data at Risk

itsecuritynews.info - 18:06

  A critical security vulnerability has been identified in LangChain’s core library that could allow attackers to extract sensitive system data...

Sorry! Image not available at this time

Critical MongoDB Flaw Allows Unauthenticated Memory Data Leaks

itsecuritynews.info - 13:04

  A critical security flaw in MongoDB could allow unauthenticated attackers to extract sensitive data directly from server memory, prompting urgent...

Sorry! Image not available at this time

Critical MongoDB Flaw Allows Unauthenticated Memory Data Leaks

itsecuritynews.info - 13:04

  A critical security flaw in MongoDB could allow unauthenticated attackers to extract sensitive data directly from server memory, prompting urgent...

Sorry! Image not available at this time

MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs

securityaffairs.co - 31/12/2025 08:22

MongoBleed (CVE-2025-14847) lets attackers remotely leak memory from unpatched MongoDB servers using zlib compression, without authentication. A...

Sorry! Image not available at this time

MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs

securityaffairs.co - 31/12/2025 08:22

MongoBleed (CVE-2025-14847) lets attackers remotely leak memory from unpatched MongoDB servers using zlib compression, without authentication. A...

Sorry! Image not available at this time

Critical IBM API Connect Vulnerability Let Attackers Bypass Logins

itsecuritynews.info - 31/12/2025 14:31

A critical security alert regarding a severe vulnerability in the IBM API Connect platform that could allow remote attackers to bypass authentication...

Sorry! Image not available at this time

OWASP CRS Vulnerability Enables Charset Validation Bypass

itsecuritynews.info - 09/Jan 17:32

A newly disclosed vulnerability in the OWASP Core Rule Set (CRS) allows attackers to bypass charset validation in web application firewalls (WAFs),...