A serious OS command injection vulnerability has been discovered in Progress Kemp LoadMaster, potentially allowing unauthorized remote access to the system.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
A significant authentication bypass vulnerability has been identified in ConnectWise ScreenConnect, potentially exposing sensitive data and systems to unauthorized access.
A new vulnerability in Microsoft Outlook has been identified, allowing attackers to bypass security measures, impacting users of 365 apps.
A newly identified privilege escalation vulnerability in Microsoft Exchange Server poses significant risks, allowing unauthorized access and control within affected systems.
A serious out-of-bounds write vulnerability has been identified in multiple versions of Fortinet FortiOS and FortiProxy, potentially allowing attackers to execute unauthorized code.
A significant flaw in M2Crypto has been discovered, potentially allowing attackers to decrypt sensitive TLS communications.
A serious use-after-free vulnerability in the Linux kernel's netfilter component has been identified, allowing for potential local privilege escalation.
A significant server-side request forgery (SSRF) vulnerability has been identified in Ivanti Connect Secure, Policy Secure, and Neurons, potentially exposing sensitive resources to unauthorized access.
A serious path traversal vulnerability in Jenkins CLI has been identified, allowing unauthorized access to sensitive files on the Jenkins controller.
A serious template injection vulnerability has been identified in older versions of Atlassian Confluence Data Center and Server, allowing potential remote code execution by unauthenticated attackers.
Research · Jan 12, 2024
Critical Access Control Vulnerability Discovered in GitLab Editions
A serious improper access control vulnerability has been identified in GitLab Community and Enterprise Editions, affecting multiple versions and potentially compromising user account security.
A newly discovered command injection vulnerability affects Ivanti Connect Secure and Policy Secure, potentially allowing unauthorized code execution by authenticated administrators.