io.netty Netty Disclosure

The vulnerability of the io.netty package: The netty-codec-http network programming framework in Netty is related to deficiencies in the system’s controlled zones. Exploiting this vulnerability can allow attackers to disclose protected information...

Hazelcast data analysis platform Auth Bypass

The vulnerability of the Hazelcast data analysis platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions remotely...

talagent Component Information Disclosure

The vulnerability of the talagent component in the Mac OS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Koko Authentication Bypass

The vulnerability of the Koko component of the JumpServer security audit system relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...

Zoom Video Conferencing Privilege Escalation

The vulnerability of Zoom’s video conferencing software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges...

SolarWinds and its CISO accused of misleading investors before major cyberattack

The Securities and Exchange Commission SEC has announced charges against software company SolarWinds Corporation and its chief information security officer CISO, Timothy G. Brown, for “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.” In 202...

Windows Named Pipe File System Privilege Escalation

The vulnerability of the Named Pipe File System component in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Microsoft Visual Studio Privilege Escalation

The vulnerability of the Microsoft Visual Studio software development tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

GitLab Access Control Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

HTML objects XSS

The vulnerability of HTML objects in software tools for managing identities and access control is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Visual Studio Privilege Escalation

The vulnerability of the Microsoft Visual Studio software development tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Node.js crypto.setEngine() Bypass

The vulnerability of the crypto.setEngine method in the Node.js software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

Microsoft Edge Privilege Escalation

The vulnerability of Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

SAP NetWeaver AS ABAP Authentication Bypass Privilege Escalation

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms is related to deficiencies in the authentication process due to incorrect processing of user information via RFC messages, thereby compromising the security between SAP systems. Exploiting this vulnerability...

Windows Installer Privilege Escalation

The vulnerability of Windows operating system installers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Windows GDI Privilege Escalation

The vulnerability of the Windows GDI component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ksmbd module interception

The vulnerability of the ksmbd module in Linux operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to intercept an ongoing session...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...