The vulnerability of Fortinet’s CSFD software products allows a perpetrator to execute arbitrary code or commands.

The vulnerability of Fortinet’s CSFD software products relates to the bypassing of authentication processes. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands using brute-force attacks...

CVE-2025-23128

CVE-2025-23128 is rejected/not used per the description.

BELL-CVE-2024-53230

Bulletin has no description...

CVE-2024-56720 bpf, sockmap: Several fixes to bpf_msg_pop_data

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpfmsgpopdata Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft, we should putpage 2. if len == 0, return early is better 3. pop the entire skmsg last == msg-sg.size should be supported 4. Fix fo...

BELL-CVE-2024-53240

Bulletin has no description...

CGA-RW85-MFF2-3RFH

Bulletin has no description...

CGA-973V-PFGW-GFCX

Bulletin has no description...

Malware Exploits Trusted Avast Anti-Rootkit Driver to Disable Security Software

Malware exploits legitimate Avast anti-rootkit driver to disable security software. Trellix researchers uncover the attack and provide mitigation steps...

DLA-3964-1 intel-microcode - security update

Bulletin has no description...

CVE-2024-52598 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview

2FAuth is a web app to manage Two-Factor Authentication 2FA accounts and generate their security codes. Two interconnected vulnerabilities exist in version 5.4.1 a SSRF and URI validation bypass issue. The endpoint at POST /api/v1/twofaccounts/preview allows setting a remote URI to retrieve the...

CGA-33W4-HVVH-47P7

Bulletin has no description...

CGA-RHV5-5M67-PQWR

Bulletin has no description...

Ivanti Secure Access Client Elevation of Privilege Vulnerability

Ivanti Secure Access Client is a security software client from Ivanti that is primarily used to enable remote secure access. An elevation of privilege vulnerability exists in Ivanti Secure Access Client that stems from insufficient authentication and can be exploited by an attacker to elevate its...

BELL-CVE-2024-50221

Bulletin has no description...

CGA-F4V6-8G9Q-CVHM

Bulletin has no description...

CGA-2CPV-9JWJ-W4W9

Bulletin has no description...

CGA-W75H-3XWW-57CC

Bulletin has no description...

CGA-PQH3-8CVQ-H5J9

Bulletin has no description...

CLSA-2024-1730910356 Update of nss

update to CKBI 2.69 from NSS 3.103 - updated certificates: - Certificate "OISTE WISeKey Global Root GC CA" - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma Chambers of...

Warning: Hackers could take over your email account by stealing cookies, even if you have MFA

The Federal Bureau of Investigation FBI has issued a warning that cybercriminals are taking over email accounts via stolen session cookies, allowing them to bypass the multi-factor authentication MFA a user has set up. Here's how it works. Most of us don’t think twice about checking the “Remember...