A serious command injection vulnerability has been identified in BeyondTrust's Privileged Remote Access and Remote Support products, posing significant risks to users.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
Research · Dec 13, 2024
Cleo Products Expose Unauthenticated File Upload Vulnerability
Cleo has identified a critical unauthenticated file upload vulnerability affecting multiple products, which could lead to serious security risks.
A heap-based buffer overflow vulnerability in the Microsoft Windows Common Log File System driver has been identified, allowing local attackers to escalate privileges.
A significant vulnerability in the Linux kernel's netfilter component has been addressed, enhancing the security of systems relying on this core technology.
A critical out-of-bounds write vulnerability in the Linux kernel has been addressed, enhancing the security of systems running Debian Linux.
A significant vulnerability in Microsoft Partner Center has been identified, allowing unauthenticated attackers to elevate privileges, posing a serious security risk.
An improper authentication vulnerability in ProjectSend prior to version r1720 allows unauthorized access, enabling attackers to manipulate application configurations.
A significant vulnerability has been identified in Oracle Agile Product Lifecycle Management, allowing unauthorized access to sensitive data.
A serious authentication bypass vulnerability in Palo Alto Networks PAN-OS allows unauthorized access to the management interface, posing significant security risks.
Research · Nov 14, 2024
Critical OS Command Injection Vulnerability in GeoVision Devices
A serious OS command injection vulnerability has been identified in certain end-of-life GeoVision devices, allowing remote attackers to execute arbitrary commands.
A new privilege escalation vulnerability has been discovered in Microsoft Windows Task Scheduler, potentially allowing unauthorized access to sensitive functions.
A significant privilege escalation vulnerability has been identified in the Android Framework, potentially allowing unauthorized access to sensitive directories.