Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

Note: CISA will update this Alert with more information as it becomes available. Updated Feb. 15, 2024: On Feb. 14, 2024, Ivanti released new software updates for Ivanti Connect Secure and Ivanti Policy Secure. Review Ivanti's updated KB articlelink is external for more information. End of Feb. 1...

Alt-N WebAdmin 2.0.x USER Parameter Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/8024/info Alt-N WebAdmin is prone to a buffer overflow condition. This is due to insufficient bounds checking on the USER parameter. Successful exploitation could result in code execution with SYSTEM level privileges. /...

PyroCMS 1.1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................PyroCMS 1.1.0 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://pyrocms.com/ Vendor Contact Date.....3/11/2011 Disclosure...