January 23, 2025 – TheCyberThrone

CVE-2025-0314 impacts GitLab

CVE-2025-0314 is a high-severity cross-site scripting (XSS) vulnerability identified in GitLab, a widely used platform for version control, CI/CD, and DevOps. This vulnerability enables attackers to inject malicious scripts into…

PravinKarthik January 23, 2025

CVE-2025-20156 impacts Cisco Meeting Management

CVE-2025-20156 is a critical vulnerability within the REST API of Cisco Meeting Management. This vulnerability allows a remote, authenticated attacker with low privileges to elevate their access rights to the…

PravinKarthik January 23, 2025

Chinese Plushdaemon APT targets SouthKorea

Background PlushDaemon is a China-aligned Advanced Persistent Threat (APT) group, active since at least 2019. Known for its sophisticated cyber-espionage operations, this group targets various high-profile entities across multiple sectors.…

PravinKarthik January 23, 2025