Broadcom, the parent company of VMware, has issued a security advisory warning users of VMware Aria Automation about a SQL injection vulnerability (CVE-2024-22280) that could allow authenticated attackers to manipulate databases and potentially gain...
Juniper Networks has issued a security advisory, disclosing a high-severity vulnerability (CVE-2024-39565) in its Junos OS. This flaw affects a wide range of versions and could allow an unauthenticated attacker to execute remote commands...
Security researchers have identified a vulnerability in the RADIUS protocol, a cornerstone of modern network infrastructure. This flaw permits an attacker to access network devices and services without the need to guess passwords. The...
Experts at Bishop Fox have identified several vulnerabilities in the Wi-Fi controller of the Traeger Grill D2 smart grill, which allows for remote management of cooking meat and vegetables via a mobile device. The...
Citrix has released a security advisory warning of two vulnerabilities (CVE-2024-6286 and CVE-2024-6151) affecting the Citrix Workspace app for Windows and the Virtual Delivery Agent for Windows. Both vulnerabilities carry a CVSSv4 score of...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about three critical security vulnerabilities currently being exploited by threat actors. These vulnerabilities affect a wide range of systems, including web...
Experts at Cyble report that hackers have discovered a method to bypass Microsoft SmartScreen’s protection to disseminate malware onto user devices. The vulnerability in SmartScreen allows infiltration through Windows Defender and compromises the devices....
Experts at Uptycs have discovered a new variant of the Mallox ransomware, specifically designed for Linux systems. This malicious software encrypts victims’ data, rendering it inaccessible until a ransom is paid. The attackers utilize...
The popular online gaming platform Roblox has reported a data breach, shocking its numerous users. The company has informed players of the incident, which has led to the disclosure of sensitive information, including email...
In Gogs, a popular self-hosted open-source Git repository service, four unresolved vulnerabilities have been discovered, three of which are critical. These vulnerabilities could allow an authenticated attacker to compromise vulnerable instances, steal or destroy...
A security researcher has published a proof-of-concept (PoC) targeting a recently patched high-severity CVE-2024-37081 vulnerability in the VMware vCenter Server. With a CVSS score of 7.8, this vulnerability, rooted in the misconfiguration of sudo...
Cisco Systems has disclosed that over 40 of its products are affected by the vulnerability “CVE-2024-6387” in the server component of OpenSSH. The number of affected products may increase. CVE-2024-6387, also known as “regreSSHion”...
