Aggregator

SolarWinds fixed critical RCE CVE-2024-28991 in Access Rights Manager

Security Affairs
1 year 6 months ago
SolarWinds addressed a critical remote code execution vulnerability, tracked as CVE-2024-28991, in Access Rights Manager. SolarWinds released security updates to address a critical-severity remote code execution vulnerability, tracked as CVE-2024-28991 (CVSS score of 9.0), in SolarWinds Access Rights Manager (ARM) The flaw is a deserialization of untrusted data remote code execution vulnerability that impacts ARM 2024.3 […]
Pierluigi Paganini

Spring Framework Vulnerability Let Attackers obtain Any Files from the System

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 year 6 months ago

A newly discovered vulnerability in the Spring Framework has been identified, potentially allowing attackers to access any file on the system. This vulnerability tracked as CVE-2024-38816, affects applications using the functional web frameworks WebMvc.fn or WebFlux.fn. It is classified as a path traversal vulnerability and poses a high risk to affected systems. CVE-2024-38816-The Vulnerability The […]

The post Spring Framework Vulnerability Let Attackers obtain Any Files from the System appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Apple dismisses lawsuit against surveillance firm NSO Group due to risk of threat intelligence exposure

Security Affairs
1 year 6 months ago
Apple drops its lawsuit against commercial spyware vendor NSO Group, due to the risk of “threat intelligence” information exposure. Apple is seeking to drop its lawsuit against Israeli spyware company NSO Group, citing the risk of “threat intelligence” information exposure. Apple wants to dismiss its lawsuit against NSO Group due to three key developments. First, […]
Pierluigi Paganini

Managed ad