Alerts

Aruba has released security updatesto fix several vulnerabilities affecting multiple Aruba products. The addressed vulnerabilities could allow the attacker to manipulate data to view, add, modify, delete, or execute arbitrary commands/codes and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. HPE Aruba Authenticated Remote Code Execution in AOS Web-based Management Interface

Microsoft has released an updated version of Microsoft Edge “132.0.2957.115” and a version of Microsoft Edge Update Setup “1.3.195.43” to address multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, or gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft

Google has released an updated Chrome version “132.0.6834.83/84” for Windows and Mac and “132.0.6834.83” for Linux. The addressed vulnerabilities could allow the remote attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, or gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Privilege Escalation Vulnerability (CVE-2025-0443): CVSS: 8.8

Zoom has released security updates to fix several vulnerabilities across multiple Zoom products. obtain sensitive information, or perform denial-of-service attacks on the affected systems. Sample of the addressed Vulnerabilities: 1. Zoom Apps Privilege Escalation Vulnerability (CVE-2025-0147): CVSS: 8.8 Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Consequences: Gain Privileges 2. Zoom

Aruba has released security updates to fix multiple vulnerabilities affecting Aruba Networking 501 Wireless Client and Aruba CX 10000 Switch Series. The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary commands and gain access to the affected products. Sample of the addressed vulnerabilities: HPE Aruba Networking 501 Wireless Client Bridge

Juniper has released security updates to fix several vulnerabilities affecting multiple Juniper Networks products. The addressed vulnerabilities could allow the attacker to obtain sensitive information or perform denial of service attacks to the affected products. Sample of the addressed vulnerabilities: 1. Juniper Networks Junos OS and Junos OS Evolved Denial of Service Vulnerability (CVE-2025-21599): CVSS:

Mozilla has released an updated Firefox version 134, Firefox ESR versions 128.6, and 115.19 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to perform spoofing attacks, gain elevated privileges, bypass security restrictions or execute arbitrary code and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Mozilla Firefox Memory

Google has released an updated Chrome version “131.0.6778.264/.265” for Windows and Mac and “131.0.6778.264” for Linux. The addressed vulnerability could allow the remote attacker to execute arbitrary code to gain access to the affected system by persuading the victim to visit a specially crafted website. Google Chrome Code Execution Vulnerability (CVE-2025-0291): CVSS: 8.8 Attack Vector:

SonicWall has released security updates to fix multiple vulnerabilities affecting SonicOS and SonicWALL SSL-VPN. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, obtain sensitive information, gain elevated privileges, conduct server-side request forgery attacks, or execute arbitrary code and gain access to the affected systems. Sample of the addressed vulnerabilities: 1.

Palo Alto has released a security update to fix a vulnerability affecting Palo Alto PAN-OS software. The addressed vulnerability could allow the remote attacker to perform denial of service attacks caused by sending a malicious packet through the data plane of the firewall that reboots the firewall, also repeated attempts to trigger this condition will

Apache has released security updates to address a vulnerability affecting multiple versions of Apache Tomcat. The addressed vulnerability could allow the remote attacker to execute arbitrary code, bypass intended file system access controls, and gain access to the affected systems. Apache Tomcat Code Execution Vulnerability (CVE-2024-56337): CVSS: 8.1 Attack Vector: Network Attack Complexity: High Privileges

Adobe has released a security update to fix a vulnerability in Adobe ColdFusion versions 2023.11 and 2021.17. The addressed vulnerability could allow the remote attacker to access files or directories outside the restricted directory set by the application. This could lead to the disclosure of sensitive information or the manipulation of system data. Adobe ColdFusion