CVE-2024-52046 Impacts Apache Mina

CVE-2024-52046 is a critical security vulnerability found in the Apache MINA library. This vulnerability is located within the ObjectSerializationDecoder component, which uses Java’s native serialization mechanisms to decode incoming serialized data. The core issue is the absence of robust security checks and validation during the deserialization process, allowing attackers to craft malicious serialized data that […]

LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

itsecuritynews.info - 27/Feb 06:04

A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has been patched after researchers...

CISA Warns of Oracle Agile Vulnerability Exploited in the Wild

itsecuritynews.info - 25/Feb 03:39

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory regarding CVE-2024-20953, a high-severity deserialization...

Citrix NetScaler Vulnerability Exposes Systems to Unauthorized Commands

itsecuritynews.info - 20/Feb 06:07

Cloud Software Group has raced to address a severe security flaw in its widely used NetScaler management infrastructure that could enable...

GitLab Vulnerabilities Allow Attackers to Bypass Security and Run Arbitrary Scripts

itsecuritynews.info - 27/Feb 06:31

GitLab has urgently released security updates to address multiple high-severity vulnerabilities in its platform that could allow attackers to bypass...

CVE-2025-20059 impacts Ping Identity

thecyberthrone.in - 01/Mar 13:10

CVE-2025-20059 represents a critical security vulnerability known as a Relative Path Traversal flaw, which impacts the Ping Identity PingAM Java...

MongoDB is affected by Twin Critical Vulnerabilities

thecyberthrone.in - 21/Feb 14:04

CVE-2025-23061: Mongoose Search Injection Vulnerability Description: CVE-2025-23061 is a critical vulnerability identified in Mongoose versions prior...

Citrix addressed NetScaler console privilege escalation flaw

securityaffairs.co - 20/Feb 10:46

Citrix addressed a high-severity privilege escalation vulnerability impacting NetScaler Console and NetScaler Agent under certain conditions. Citrix...

CISA adds Oracle PLM and Adobe ColdFusion flaws to its KEV

thecyberthrone.in - 24/Feb 16:57

The Cybersecurity and Infrastructure Security Agency (CISA) has recently added two significant vulnerabilities to its Known Exploited Vulnerabilities...

Nagios XI Flaw Exposes User Details and Emails to Unauthenticated Attackers”

itsecuritynews.info - 21/Feb 14:32

A security vulnerability in Nagios XI 2024R1.2.2, tracked as CVE-2024-54961, has been disclosed, allowing unauthenticated attackers to retrieve...

Critical Microsoft Bing Vulnerability Enabled Remote Code Execution Attacks

itsecuritynews.info - 20/Feb 05:32

A critical security flaw in Microsoft Bing tracked as CVE-2025-21355, allowed unauthorized attackers to execute arbitrary code remotely, posing severe...

Rubriques :