November 2024 – Page 5 – TheCyberThrone

CISA KEV Catalog Update Part IV- November 2024

The U.S. CISA added the following vulnerabilities to its Known Exploited Vulnerabilities catalog CVE-2024-1212 with a CVSS score of 10 and CWE-78, is a Progress Kemp LoadMaster OS command injection issue…

PravinKarthik November 19, 2024

POC Exploit Released for Fortinet Bug CVE-2024-47575

Security researcher Sina Kheirkhah from watchTowr recently published technical details and a PoC exploit for a critical zero-day vulnerability in critical flaw in FortiManager and FortiAnalyzer devices, that allows remote,…

PravinKarthik November 18, 2024

Zoho Patched CVE-2024-49574 Manage Engine Bug

Zoho has released a security update addressing a critical SQL injection vulnerability in its ADAudit Plus software that allowed an attacker with authenticated access to the system to execute arbitrary…

PravinKarthik November 18, 2024

Apache Airflow addresses CVE-2024-45784

Apache Airflow has been affected by a high seviert vulnerability that could expose sensitive configuration data, potentially compromising system security. The vulnerability, tracked as CVE-2024-45784 with a CVSS score of…

PravinKarthik November 17, 2024

Gootloader luring victims with Bengal Cats

Sophos researchers have detailed a malware campaign targeting users searching Google for the legality of Bengal cats in Australia. The campaign leverages Google search engine to distribute a malicious payload…

PravinKarthik November 17, 2024

Security NewsLetter

The CyberThrone most exploited vulnerabilities review – November 16, 2024

Welcome to TheCyberThrone most exploited vulnerabilities review. This review is for the weeks ending Saturday, November 16, 2024. FortiNet FortiManager The vulnerability tracked as CVE-2024-23113, with a CVSS score of 9.8 and part…

PravinKarthik November 17, 2024

PostgreSQL fixes CVE-2024-10979

Security researchers have discovered that a vulnerability in PostgreSQL has the potential to compromise the security of countless databases worldwide This vulnerability is tracked as CVE-2024-10979, with a CVSS score…

PravinKarthik November 16, 2024