November 27, 2024 – TheCyberThrone

QNAP fixes Vulnerabilities in QuRouter and Note Station 3

QNAP has addressed multiple vulnerabilities in several NAS devices include Photo Station, AI Core, QuLog Center, Media Streaming Add-on, QTS and QuTS hero. The two command injection vulnerabilities in QuRouter 2.4.x, tracked as CVE-2024-48860 with a CVSS…

PravinKarthik November 27, 2024

Gitlab fixes multiple vulnerabilities including CVE-2024-8114

GitLab has released patches to address multiple vulnerabilities affecting its Community Edition (CE) and Enterprise Edition (EE) products. Versions 17.6.1, 17.5.3, and 17.4.5 could allow privilege escalation, denial of service…

PravinKarthik November 27, 2024

VMware fixes multiple vulnerabilities in Aria Product

VMware has released patches to address multiple vulnerabilities affecting its Aria Operations product. The first vulnerability identified as CVE-2024-38830 with a CVSS score of 7.8 , could allow a malicious…

PravinKarthik November 27, 2024

Russian RomCom exploiting twin bugs

Security researchers at ESET have uncovered an attack chain that exploitis multiple vulnerabilities to deploy the RomCom backdoor without requiring any user interaction. RomCom, also known as Tropical Scorpius or…

PravinKarthik November 27, 2024