Alerts

Apache has released a security update to address a vulnerability in multiple versions of Apache Tomcat. The addressed vulnerability could allow the remote attacker to obtain sensitive information caused by the leaking of unrelated request bodies in the default error page by sending a specially crafted request to the affected system. Apache Tomcat Information Disclosure […]

MOVEit Transfer has released a security update to address a vulnerability in multiple versions of Progress MOVEit Transfer. The addressed vulnerability could allow the remote attacker to perform a denial of service attack on the affected system by sending a specially crafted request via a parameter in HTTPS transactions. Progress MOVEit Transfer Denial of Service

Microsoft has released an updated Microsoft Edge version 120.0.2210.144 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to gain elevated privileges, perform denial of service attacks, bypass security restrictions, execute arbitrary code, and gain access to the affected system by persuading the victim to openspecially crafted content. Sample of the addressed vulnerabilities:

Google has released an updated Chrome version 120.0.6099.234 for Mac, 120.0.6099.224 for Linux, and version 120.0.6099.224/225 for Windows. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google Chrome Code

Citrix has released security updates to address several vulnerabilities across multiple products. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code, conduct cross-site scripting attacks, perform denial of service attacks, or gain access to the affected system. Sample of the addressed vulnerabilities: 1. Citrix NetScaler ADC and NetScaler Gateway Denial of Service

Paessler has released a security update to fix a vulnerability in PRTG Network Monitor 23.4.90.1299 and earlier versions. The addressed vulnerability could allow the remote attacker to perform cross-site scripting attacks, inject arbitrary scripts, and bypass the authentication on the affected systems by persuading the PRTG user with an active session to visit a specially

Atlassian has released security updates to address several vulnerabilities across multiple products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform denial of service attacks, or execute arbitrary code and gain access to the affected system. Sample of the addressed vulnerabilities: Confluence Data Center and Server Remote Code Execution Vulnerability (CVE-2024-21674): CVSS:

Linux has released security updates to fix multiple vulnerabilities in AsyncSSH and OpenSSH. The addressed vulnerabilities could allow the remote attacker to launch a man-inthe-middle attack and strip an arbitrary number of messages after the initial key exchange, obtain sensitive information, or bypass security restrictions on the system by sending a specially crafted request to

Cisco has released security updates to fix several vulnerabilities in multiple Cisco products. The addressed vulnerabilities could allow the attacker to upload arbitrary files, gain elevated privileges to root, trigger cross-site scripting attacks, manipulate data by sending specially crafted SQL statements, or execute arbitrary commands and gain access to the affected products. Sample of the

Google has released an updated Chrome version 120.0.6099.216/217 for Windows and 120.0.6099.216 for Mac and Linux. The addressed vulnerability could allow the remote attacker to bypass security restrictions caused by insufficient data validation in Extensions of the affected system by persuading the victim to visit a specially crafted website. Google Chrome Security Bypass Vulnerability (CVE-2024-0333):

Intel has released security updates to address several vulnerabilities in multiple Intel products The severity of the addressed vulnerabilities could allow the local authenticated attacker to gain elevated privileges or perform denial-of-service attacks on the affected products. Samples of the addressed vulnerabilities: 1. Intel NUC BIOS Firmware Privilege Escalation (CVE-2023-42429): CVSS: 7.5 Attack Vector: Local

Fortinet has released security updates to fix multiple vulnerabilities across several products. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions, escalate privilege, obtain sensitive information, perform denial of service attacks, or execute code and gain access to the affected products. Sample of the addressed vulnerabilities: FortiOS & FortiProxy Improper Authorization for

SAP has released security updates to address several vulnerabilities affecting multiple products. SAP has released a patch that fixes several vulnerabilities affecting multiple SAP products such as SAP Application Interface Framework, SAP S/4HANA Finance, SAP Web Dispatcher, SAP NetWeaver Application Server ABAP, and ABAP Platform. The attacker could exploit some of these vulnerabilities to bypass