Search Results

A proof-of-concept exploit has been published for CVE-2024-53704, which affects SonicWall NGFWs

Three advisories cover vulnerabilities and weaknesses in Ivanti Cloud Services Application (CSA), Ivanti Neurons for MDM, Ivanti Connect Secure, Policy Secure, and Secure Access Client.

Attack chain using CVE-2025-0108 and CVE-2025-0111 has been observed in the wild

CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728 can be exploited in a chain to allow full compromise of a SimpleHelp server

API authentication bypass vulnerability CVE-2025-21589 affects Session Smart Router, Conductor, and WAN Assurance Managed Routers

One of the 13 high impact advisories addresses the command injection vulnerability CVE-2025-20029, which could lead to arbitrary system command execution

Successful exploitation of CVE-2025-1001 could allow an attacker to perform a machine-in-the-middle attack (MITM)

CVE-2025-20206 could allow an attacker to execute arbitrary code with system privileges

Scheduled updates for Microsoft products, including security updates for 57 vulnerabilities, of which six are reported as exploited

Security updates include remediation for exploited vulnerability CVE-2025-24201, which affects iOS, iPadOS, and macOS 

Advisory addresses three security vulnerabilities that could result in DoS, RCE, or partially reading arbitrary files

Vulnerabilities could allow an attacker to escalate privileges, modify data, or execute arbitrary commands 

Sixteen vulnerabilities have been seen in products including Avalanche, Connect Secure, Secure Access, and EPM

Six advisories are included in the semi-annual Cisco Adaptive Security Appliance Software (ASA), Firepower Management Center (FMC) Software, and Firepower Threat Defense (FTD) Software Security Advisory bundled publication

Security update addresses an exploited type confusion vulnerability in Google Chrome

Proof-of-concept exploit code released for RCE vulnerability CVE-2024-21683

Active exploitation of Check Point security gateway devices

Linux kernel contains a vulnerability that could allow an attacker to achieve local privilege escalation

Successful exploitation of CVE-2024-1275 could lead to data compromise, resulting in impact and/or delay in patient care

Successful exploitation of CVE-2024-1275 could lead to data compromise, resulting in impact and/or delay in patient care