July 2024 – Page 6 – TheCyberThrone

Exim Vulnerability affects 1.5 Million Email Servers -CVE-2024-39929

Security researchers have uncovered a bug affecting nearly 1.5 million email servers and are vulnerable to attacks that can deliver executable attachments to user accounts, security researchers said. The vulnerability…

PravinKarthik July 13, 2024

ServiceNow Fixes Critical Vulnerabilities -CVE-2024-4879 and CVE-2024-5217

ServiceNow, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024-4879, CVE-2024-5217, and CVE-2024-5178, affect various versions of the Now…

PravinKarthik July 12, 2024

CloudSorcerer APT Group Detailed Out

Security researchers have detailed about a new advanced persistent threat group that’s targeting Russian government entities in geopolitical-linked hacking campaign. The APT dubbed as CloudSorcerer, uses a sophisticated cyber espionage…

PravinKarthik July 12, 2024

Palo Alto fixes Missing Authentication Bug -CVE-2024-5910

Palo Alto has released a patch for 5 bugs, including a critical bug in which missing authentication issues could lead to a complete takeover. The vulnerability tracked as CVE-2024-5910 with…

PravinKarthik July 12, 2024

Gitlab Fixes Critical Vulnerability -CVE-2024-6385

GitLab disclosed several critical vulnerabilities affecting various versions of their Community Edition (CE) and Enterprise Edition (EE) products. The most severe of these, CVE-2024-6385, carries a CVSS score of 9.6…

PravinKarthik July 11, 2024

CISA KEV Update Part I – July 2024

The U.S. CISA added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2024-23692 with a CVSS score of 9.8 is a template injection vulnerability that impacts Rejetto HTTP File Server,…

PravinKarthik July 11, 2024

Apache fixes CloudStack Vulnerabilities – CVE-2024-38346 and CVE-2024-39864

The Apache Software Foundation has released patches for two critical vulnerabilities affecting the widely used open-source cloud computing platform, Apache CloudStack. These vulnerabilities pose a significant risk to organizations utilizing…

PravinKarthik July 10, 2024

Citrix Security Advisory July 2024

Citrix has released a security advisory to address vulnerabilities discovered in their widely-used NetScaler products. The vulnerabilities, tracked as CVE-2024-6235 and CVE-2024-6236, could allow unauthorized access to sensitive information and…

PravinKarthik July 10, 2024