Alerts

Palo Alto has released security updates to address multiple vulnerabilities affecting PAN-OS and Cortex XSOAR. The addressed vulnerabilities could allow the attacker to perform cross-site scripting (XSS) attacks, obtain sensitive information or execute arbitrary code, and gain elevated privileges to the affected products. Sample of the addressed vulnerabilities: 1. PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability […]

IBM has released a security update to fix a vulnerability in IBM Financial Transaction Manager for SWIFT Services version 3.2.4. The addressed vulnerability could allow the remote attacker to modify the sending address and the message type of a business transaction. However, these elements of FIN messages are assumed to be immutable in the Message

Google has released an updated Chrome version 120.0.6099.129/130 for Windows, and 120.0.6099.129 for Mac and Linux to fix a zero-day vulnerability. The addressed vulnerability could allow the remote attacker to execute a buffer overflow attack, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website.

Mozilla has released an updated Firefox version 121, and Firefox ESR version 115.6 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: 1.

Microsoft has released an updated Microsoft Edge version 120.0.2210.77 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions or execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: 1. Microsoft Edge Code

Ivanti has released security updates to fix multiple vulnerabilities across Ivanti Connect Secure and Ivanti Policy Secure. The addressed vulnerabilities could allow the attacker to gain access, gain elevated privileges, or perform a denial of service attack on the affected systems. Sample of the addressed vulnerabilities: 1. Ivanti Connect Secure Denial of Service Vulnerability (CVE-2023-39340):

Google has released an updated Chrome version 120.0.6099.109/110 for Windows, and 120.0.6099.109 for Mac and Linux to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google

Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed one zero-day vulnerability. Microsoft has fixed (34) vulnerabilities, with (4) classified as critical as they could allow the attacker to perform remote code execution and spoofing attacks on theaffected products. December’s Patch Tuesday was released to fix security

Google has released an updated Chrome version 120.0.6099.62/.63 for Windows, and 120.0.6099.62 for Mac and Linux to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the

SolarWinds has released a security update to fix a vulnerability in SolarWinds platform. The addressed vulnerability could allow the attackers with low-privileged accounts to launch SQL injection attacks and then they could view, add, modify, or delete the data on the vulnerable system. SQL Injection Remote Code Execution Vulnerability (CVE-2023-40056): CVSS: 8 Attack Vector: Adjacent

IBM has released security updates to fix multiple vulnerabilities in IBM Db2 versions 10.5.0.x, 11.1.4.x, and 11.5.x. The addressed vulnerabilities could allow the remote attacker to cause a denial of service attack or gain elevated privileges by executing routines that they shouldn’t have access to on the vulnerable system. Sample of the addressed vulnerabilities: 1.

Apple has released security updates to address multiple vulnerabilities across macOS Monterey, Ventura, Sonoma and Safari. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, execute arbitrary code, and gain access to the affected systems by persuading the victim to visit a specially crafted website. The addressed vulnerabilities: 1. Apple Safari, and