Cisco has released a security update to fix two vulnerabilities across multiple products. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions or execute arbitrary code to manipulate file upload parameters and enable path traversal, this can lead to uploading a malicious file used to perform a remote code execution attack on […]
Cisco Security Update – 13 December 2023 Read More »
Apple has released security updates to address multiple vulnerabilities across macOS Monterey, Ventura, Sonoma and Safari. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, obtain sensitive information, execute arbitrary code, and gain access to the affected systems by persuading the victim to visit a specially crafted website. Sample of
Apple Security Updates – 12 December 2023 Read More »
Microsoft has released the latest Microsoft Edge Stable Channel (Version 120.0.2210.61) to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code, bypass security, gain elevated privileges, or disclose sensitive information on the affected system. Sample of the addressed vulnerabilities: Microsoft Edge (Chromium-based) Elevation of Privilege (CVE-2023-35618): CVSS: 9.6 Attack
Microsoft Edge Security Update – 10 December 2023 Read More »
Atlassian has released security updates to address several vulnerabilities across multiple products. The addressed vulnerabilities could allow the remote attacker to conduct denial of service attacks, obtain sensitive information, or execute arbitrary code, and gain access to the affected products. Sample of the addressed vulnerabilities: 1. Atlassian Assets Discovery Remote Code Execution (CVE-2023-22523): CVSS: 9.8
Atlassian Security Updates – 06 December 2023 Read More »
Google has released an updated Chrome version 120.0.6099.62/.63 for Windows, and 120.0.6099.62 for Mac and Linux to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the
Google Chrome Security Update – 06 December 2023 Read More »
Tenable has released a security update to fix multiple vulnerabilities in Tenable’s third-party components (OpenSSL, HandlebarsJS, jquery-file-upload) across Nessus Network Monitor 6.3.0 and earlier versions. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, execute arbitrary code, and gain access to the affected system by sending a specially crafted request. Sample of
Tenable Security Update – 04 December 2023 Read More »
SolarWinds has released a security update to fix a vulnerability in SolarWinds platform. The addressed vulnerability could allow the attackers with low-privileged accounts to launch SQL injection attacks and then they could view, add, modify, or delete the data on the vulnerable system. SQL Injection Remote Code Execution Vulnerability (CVE-2023-40056): CVSS: 8 Attack Vector: Adjacent
SolarWinds Security Update – 04 December 2023 Read More »
IBM has released security updates to fix multiple vulnerabilities in IBM Db2 versions 10.5.0.x, 11.1.4.x, and 11.5.x. The addressed vulnerabilities could allow the remote attacker to cause a denial of service attack or gain elevated privileges by executing routines that they shouldn’t have access to on the vulnerable system. Sample of the addressed vulnerabilities: 1.
IBM DB2 Security Updates – 04 December 2023 Read More »
Apple has released security updates to address multiple vulnerabilities across macOS Monterey, Ventura, Sonoma and Safari. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, execute arbitrary code, and gain access to the affected systems by persuading the victim to visit a specially crafted website. The addressed vulnerabilities: 1. Apple Safari, and
Apple Security Updates – 03 December 2023 Read More »
VMware has released a security update to address a critical vulnerability in the VMware Cloud Director Appliance (VCD Appliance). The addressed vulnerability could allow the remote attacker to bypass login restrictions when authenticating on port 22 (SSH) or port 5480 (appliance management console) to the affected system. VMware Cloud Director Appliance Security Bypass (CVE-2023-34060): CVSS:
VMware Security Update – 03 December 2023 Read More »
Microsoft has released an updated Microsoft Edge Stable version (119.0.2151.97) and an Extended Stable version (118.0.2088.122) to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Microsoft Edge
Microsoft Edge Security Update – 30 November 2023 Read More »
ache has released security updates to address several vulnerabilities in Apache Tomcat versions prior to 9.0.83. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, conduct denial of service attacks, bypass web application firewall protection, conduct XSS attacks, and gain access to the affected system by sendinga specially crafted HTTP(S) trailer header.
Apache Security Updates – 29 November 2023 Read More »
Google has released an update Chrome version 119.0.6045.199/.200 for Windows,and 119.0.6045.199 for Mac and Linux to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code on the system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google Chrome Code Execution Vulnerability (CVE-2023-6351):
Google Chrome Security Update – 29 November 2023 Read More »
Trellix has released a security update to fix a vulnerability in Trellix Application and Change Control ePO extension “8.3.8.x” and earlier versions. The addressed vulnerability could allow the remote attacker to access the “Inventory” section of the ePO extension and upload a specially crafted GTI reputation file. This flaw is only applicable to on-premises ePO
Trellix Security Update – 28 November 2023 Read More »
Referring to EG-FinCIRT report ID 36/2023 “LockBit V3.0 Ransomware”, Security researchers detected that LockBit V3.0 ransomware operation has increased its activity recently against Middle Eastern organizations. LockBit v3.0 is a Windows ransomware program written in C programming language. It operates as a ransomware-as-a-service (RaaS) model, meaning it is available for use by different affiliates. The
LockBit V3.0 Ransomware Updated – 27 November 2023 Read More »
Citrix has released security recommendations for a critical vulnerability that affects customer-managed NetScaler ADC and NetScaler Gateway. Referring to report 253/2023 “Citrix Security Updates – 11 October 2023”, Security researchers revealed that CVE-2023-4966 has been under active exploitation and Citrix encourages administrators after upgrading to remove any active or persistent sessions. Citrix NetScaler ADC and
Citrix Security Recommendations – 22 November 2023 Read More »
Mozilla has released an updated Firefox version 120, and Firefox ESR version 115.5 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, perform a denial of service attack, bypass security restrictions, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a
Mozilla FireFox Security Updates – 22 November 2023 Read More »
Splunk has released a security update to fix multiple vulnerabilities across several Splunk products. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code, perform cross-site scripting attacks, or gain access to the affected systems. Sample of the addressed vulnerabilities: Splunk Enterprise Code Execution Vulnerability (CVE-2023-46214): CVSS: 8.0 Attack Vector: Network Attack Complexity:
Splunk Security Update – 20 November 2023 Read More »
Tenable has released security updates to fix two vulnerabilities across multiple Tenable Nessus versions. The addressed vulnerabilities could allow the remote attacker with administrator privileges to overwrite arbitrary files on the remote host, which could lead to a denial of service condition. Sample of the addressed vulnerabilities: Tenable Nessus Denial of Service Vulnerability (CVE-2023-6062): CVSS:
Tenable Security Updates – 19 November 2023 Read More »
Cisco has released security updates to fix multiple vulnerabilities across several products. The addressed vulnerabilities could allow the attacker to bypass security, perform cross-site scripting attacks, gain elevated privileges, or trigger denial of services attacks on the affected products. Sample of the addressed vulnerabilities: 1. Cisco Identity Services Engine Security Bypass (CVE-2023-20272): CVSS: 6.7 Attack
Cisco Security Updates – 16 November 2023 Read More »
