Cyber

An improper access control vulnerability in Adobe ColdFusion could allow unauthorized file system access, impacting sensitive data security.

Read the briefing

A new privilege escalation vulnerability in the Microsoft Windows Error Reporting Service could allow local attackers to gain SYSTEM privileges.

Read the briefing

A SQL injection vulnerability has been identified in Fortinet FortiClient EMS, affecting multiple versions and allowing unauthorized code execution.

Read the briefing

A critical authentication bypass vulnerability has been identified in JetBrains TeamCity, allowing unauthorized admin actions.

Read the briefing

A critical vulnerability in the Linux kernel has been addressed, preventing potential null pointer dereference issues that could affect system stability.

Read the briefing

A path traversal vulnerability has been identified in ConnectWise ScreenConnect, potentially allowing remote code execution and data exposure.

Read the briefing

A severe OS command injection vulnerability has been identified in Progress Kemp LoadMaster, allowing remote attackers to execute arbitrary commands.

Read the briefing

A significant authentication bypass vulnerability has been identified in ConnectWise ScreenConnect, potentially exposing sensitive information and systems.

Read the briefing

A newly identified vulnerability in Microsoft Outlook allows attackers to bypass security measures, posing significant risks to users of 365 apps.

Read the briefing

A new privilege escalation vulnerability has been identified in Microsoft Exchange Server, posing significant risks to affected systems.

Read the briefing

Fortinet has disclosed a critical out-of-bounds write vulnerability affecting multiple versions of FortiOS and FortiProxy, potentially allowing unauthorized code execution.

Read the briefing

A critical flaw in M2Crypto has been identified, potentially allowing remote attackers to decrypt sensitive data in TLS communications.

Read the briefing