Alerts

Google has released an updated Chrome version 122.0.6261.57/.58 for Windows and 122.0.6261.57 for Mac and Linux. The addressed vulnerabilities could allow the remote attacker to bypass securityrestrictions, or execute arbitrary code and gain access to the affected system by pesuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: 1. Google […]

Mozilla has released an updated Firefox version 123, and Firefox ESR version 115.8 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to conduct spoofing attacks, cause DNS cache poisoning, perform denial of service attacks, bypass security restrictions, or execute arbitrary code, and gain access to the affected systems by persuading the

Tenable has released a security update to fix multiple vulnerabilities in Tenable Security Center 6.2.1 with Patch SC-202312.1, and earlier. The addressed vulnerabilities could allow the authenticated remote attacker to perform HTML redirection attacks or execute arbitrary code and gain access to the affected system. Sample of the addressed vulnerabilities: Tenable Security Center Command Injection

Palo Alto has released security updates to address several vulnerabilities affecting multiple PAN-OS versions. The addressed vulnerabilities could allow the attacker to perform cross-site scripting (XSS) attacks, bypass security restrictions, or execute arbitrary code, and gain access to the affected products. Sample of the addressed vulnerabilities: 1. PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the

F5 has released security updates to address several vulnerabilities in multiple F5 products. The addressed vulnerabilities could allow the authenticated remote attacker to perform denial of service attacks, manipulate data, view, add, modify, or delete information in the back-end database, obtain sensitive information, bypass security restrictions, execute arbitrary commands, and gain access to the affected

Intel has released security updates to address several vulnerabilities in multiple Intel products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, or perform denial-of-service attacks on the affected products. Samples of the addressed vulnerabilities: 1. Intel DSA Software Privilege Escalation Vulnerability (CVE-2023-39425): CVSS: 8.8 Attack Vector: Local Attack Complexity:

Microsoft has released an updated Microsoft Edge Stable Channel (121.0.2277.112) and Microsoft Edge Extended Stable Channel (120.0.2210.175) to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code to gain access or cause a buffer overflow into the affected system by persuading the victim to visit a specially crafted website.

SonicWall has released security updates to fix several vulnerabilities across multiple SonicWall products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, execute arbitrary code, cause a buffer overflow, or gain access by sending a specially crafted request to the affected products. Sample of the addressed vulnerabilities: 1. SonicWall SonicOS Security Bypass Vulnerability

Veeam has released a security update to fix several vulnerabilities across multiple Veeam products. The addressed vulnerabilities could allow the remote authenticated attacker to obtain sensitive information, such as plans from other scopes, or obtain the service account’s NTLM hash and use this information to launch further attacks against the affected system. The addressed vulnerabilities:

Tenable has released a security update to fix several vulnerabilities in Nessus with stable version 10.7.0. The addressed vulnerabilities could allow the authenticated remote attacker to conduct cross-site scripting attacks, execute arbitrary scripts, scan DB content, manipulate data, and view, add, modify, or delete information on the affectedsystem. The addressed vulnerabilities: 1. Tenable Nessus SQL