cybersecurity vulnerability disclosure

From Security Week – Call Records of Millions Exposed by Verizon App Vulnerability

[[{"value":"A patch has been released for a serious information disclosure vulnerability affecting a Verizon call filtering application. The post Call Records of Millions Exposed by Verizon App Vulnerability appeared first…

shaikh Saqib April 4, 2025

News

From The Hacker News – NetApp SnapCenter Flaw Could Let Users Gain Remote Admin Access on Plug-In Systems

A critical security flaw has been disclosed in NetApp SnapCenter that, if successfully exploited, could allow privilege escalation. SnapCenter is an enterprise-focused software that's used to manage data protection across applications, databases, virtual machines, and file systems, offering the ability to backup, restore, and clone data resources. The vulnerability, tracked as

shaikh Saqib March 27, 2025

News

From Cyber Security News – Wazuh Open Source SIEM Vulnerability Allows Malicious Code Execution Remotely

Cybersecurity researchers have disclosed a critical remote code execution vulnerability (CVE-2025-24016) affecting Wazuh, a widely-used open-source security information and event management (SIEM) platform. The vulnerability, which carries a severe CVSS…

shaikh Saqib March 17, 2025

News

From Cyber Security News – Manage Engine Analytics Vulnerability Allows User Account Takeover

A high-severity authentication vulnerability in ManageEngine Analytics Plus on-premise installations has been identified, potentially allowing malicious actors to gain unauthorized access to Active Directory (AD) authenticated user accounts. The vulnerability,…

shaikh Saqib March 17, 2025

News

From Cyber Security News – Bitdefender Warns of Multiple Vulnerabilities That Let Attackers Execute MITM Attack

Bitdefender has disclosed two critical vulnerabilities affecting its BOX v1 device that could allow network-adjacent attackers to execute Man-in-the-Middle (MITM) attacks, potentially leading to remote code execution. The vulnerabilities, assigned…

shaikh Saqib March 13, 2025

News

From Cyber Security News – Google Released PoC Exploit For Palo Alto Firewall Command Injection Vulnerability

Google’s Project Zero and Mandiant cybersecurity teams have jointly published a proof-of-concept (PoC) exploit for a high-severity command injection vulnerability in Palo Alto Networks’ PAN-OS OpenConfig plugin. Tracked as CVE-2025-0110,…

shaikh Saqib February 21, 2025

News

From Security Week – Google Pays Out $55,000 Bug Bounty for Chrome Vulnerability

[[{"value":"Google has released a Chrome 133 update to address four high-severity vulnerabilities reported by external researchers. The post Google Pays Out $55,000 Bug Bounty for Chrome Vulnerability appeared first on…

shaikh Saqib February 13, 2025

News

From Cyber Security News – Remote Desktop Manager Vulnerabilities Let Attackers Intercept Encrypted Communications

Devolutions have disclosed critical vulnerabilities in its Remote Desktop Manager (RDM) software, which could allow attackers to intercept and modify encrypted communications through man-in-the-middle (MITM) attacks. These flaws stem from…

shaikh Saqib February 12, 2025