Exploit Code released for Apache Traffic Control Flaw CVE-2024-45387

What is CVE-2024-45387? CVE-2024-45387 is a critical vulnerability identified in Apache Traffic Control, specifically affecting the Traffic Ops module in versions 8.0.0 to 8.0.1. The nature of this vulnerability is an SQL injection flaw, which allows an attacker to inject and execute arbitrary SQL commands against the backend database. How Does the Exploit Work? The […]

CVE-2024-45387 Critical Bug in Apache Traffic Control

thecyberthrone.in - 25/12/2024 15:00

CVE-2024-45387 represents a significant security concern within the Traffic Ops component of Apache Traffic Control, specifically impacting versions...

Apache fixed a critical SQL Injection in Apache Traffic Control

securityaffairs.co - 26/12/2024 00:43

Apache Software Foundation (ASF) addressed a critical SQL Injection vulnerability, tracked as CVE-2024-45387, in Apache Traffic Control. The Apache...

CVE-2024-12108: Progress WhatsUp Gold Vulnerability

thecyberthrone.in - 02/Jan 13:59

CVE-2024-12108 with a CVSS score of 9.6 is a critical security vulnerability affecting WhatsUp Gold, a network monitoring software developed by...

LDAPNightmare, a PoC exploit targets Windows LDAP flaw CVE-2024-49113

securityaffairs.co - 03/Jan 09:42

Experts warn of a new PoC exploit, LDAPNightmare, that targets a Windows LDAP flaw (CVE-2024-49113), causing crashes & reboots. The vulnerability...

CVE-2024-56512 impacts Apache NiFi

thecyberthrone.in - 30/12/2024 11:35

CVE-2024-56512 is a security vulnerability identified in Apache NiFi, specifically affecting versions 1.10.0 through 2.0.0. This vulnerability is due...

TheCyberThrone Security Weekly Review – January 04, 2025

thecyberthrone.in - 05/Jan 12:47

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the week ending...

CVE-2024-3393 DoS Vulnerability in Palo Alto PAN-OS

thecyberthrone.in - 27/12/2024 22:42

CVE-2024-3393 is a high-severity Denial of Service (DoS) vulnerability discovered in the DNS Security feature of Palo Alto Networks’ PAN-OS...

CVE-2024-12987 affecting DrayTek Routers

thecyberthrone.in - 01/Jan 09:58

CVE-2024-12987 is a critical security vulnerability identified in the DrayTek Vigor2960 and Vigor300B routers, specifically affecting firmware version...

CVE-2024-11944: TrueNAS CORE has Severe Directory Traversal Flaw

thecyberthrone.in - 04/Jan 05:23

CVE-2024-11944 is a vulnerability identified in iXsystems TrueNAS CORE. This vulnerability is classified as a Directory Traversal and Remote Code...

DrayTek Devices Vulnerability Let Attackers Arbitrary Commands Remotely

itsecuritynews.info - 01/Jan 14:04

The DrayTek Gateway devices, more specifically the Vigor2960 and Vigor300B models, are susceptible to a critical command injection vulnerability. ...

Rubriques :