infrastructure security

News

From Cyber Security News – Critical Vulnerability in Wazuh Server Enables Remote Attackers to Execute Malicious Code

A critical remote code execution (RCE) vulnerability has been discovered in the Wazuh server, a popular open-source security platform used for threat detection and compliance monitoring. Identified as CVE-2025-24016, this flaw allows attackers with API access to execute arbitrary Python…

shaikh Saqib
March 3, 2025

News

From Cyber Security News – Nagios XI Vulnerability Allows Unauthenticated Users to View Other User Details & Email

A significant security vulnerability (CVE-2024-54961) has been identified in Nagios XI 2024R1.2.2, enabling unauthenticated attackers to retrieve sensitive user information, including usernames and email addresses. This flaw, classified as an information disclosure vulnerability (CWE-200), exposes organizational user directories to potential…

shaikh Saqib
February 24, 2025