vulnerability

Apache OFBiz team patches critical RCE vulnerability (CVE-2024-45195)

September 6, 2024

For the fourth time in the last five months, Apache OFBiz users have been advised to upgrade their installations to fix a critical flaw (CVE-2024-45195) that could lead to …

Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261)

September 3, 2024

Zyxel has patched a myriad of vulnerabilities in its various networking devices, including a critical one (CVE-2024-7261) that may allow unauthenticated attackers to execute …

Critical Fortra FileCatalyst Workflow vulnerability patched (CVE-2024-6633)

August 28, 2024

Organizations using Fortra’s FileCatalyst Workflow are urged to upgrade their instances, so that attackers can’t access an internal HSQL database by exploiting …

SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766)

August 26, 2024

SonicWall has patched a critical vulnerability (CVE-2024-40766) in its next-gen firewalls that could allow remote attackers unauthorized access to resources and, in specific …

Another critical SolarWinds Web Help Desk bug fixed (CVE-2024-28987)

August 23, 2024

A week after SolarWinds released a fix for a critical code-injection-to-RCE vulnerability (CVE-2024-28986) in Web Help Desk (WHD), another patch for another critical flaw …

Critical GitHub Enterprise Server auth bypass flaw fixed (CVE-2024-6800)

August 22, 2024

A critical vulnerability (CVE-2024-6800) affecting all currently supported versions of GitHub Enterprise Server (GHES) may allow attackers to gain unrestricted access to the …

0-day in Windows driver exploited by North Korean hackers to deliver rootkit (CVE-2024-38193)

August 20, 2024

CVE-2024-38193, an actively exploited zero-day that Microsoft patched earlier this month, has been leveraged by North Korean hackers to install a rootkit on targets’ …

Vulnerabilities in Microsoft macOS apps may give attackers access to microphone, camera

August 20, 2024

Vulnerabilities in popular Microsoft apps for macOS can be abused by attackers to record video and audio clips, take pictures, access and exfiltrate data and send emails, …

Stolen, locked payment cards can be used with digital wallet apps

August 19, 2024

Fraudsters can add stolen payment cards to digital wallet apps and continue making online purchases even after victims report the card stolen and the bank replaces it, …

Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986)

August 15, 2024

SolarWinds has fixed a critical vulnerability (CVE-2024-28986) in its Web Help Desk (WHD) solution that may allow attackers to run commands on the host machine. “While …

Critical 1Password flaws may allow hackers to snatch your passwords (CVE-2024-42219, CVE-2024-42218)

August 9, 2024

Two vulnerabilities (CVE-2024-42219, CVE-2024-42218) affecting the macOS version of the popular 1Password password manager could allow malware to steal secrets stored in the …

“0.0.0.0-Day” vulnerability affects Chrome, Safari and Firefox