PravinKarthik

CISA adds multiple vulnerabilities to its KEV catalog

The U.S. CISA has added 4 vulnerabilities to it'd Known Exploited Vulnerabilities Catalog (KEV) belongs to Dahua, Microsoft, and Linux products based on the mass exploitation CVE-2022-0185 Linux Kernel Heap-Based…

PravinKarthik August 22, 2024

Google fixes ninth Zeroday CVE-2024-7971 in Chrome

Google released an emergency security update to address a Chrome zero-day vulnerability, tracked as CVE-2024-7971, that is actively exploited. The vulnerability is a type confusion issue that resides in Chrome’s V8 JavaScript…

PravinKarthik August 22, 2024

Spring Security fixes CVE-2024-38810

A high-severity flaw has been discovered in Spring Security, potentially allowing unauthorized access to sensitive data within affected applications. Spring Security’s powerful method security features allow developers to control access…

PravinKarthik August 22, 2024

Atlassian fixes CVE-2024-21689 vulnerability in Bamboo

Atlassian has issued a patch for a high severity vulnerability in its Bamboo Data Center and Server products, which is a Remote Code Execution. The vulnerability tracked as CVE-2024-21689 with…

PravinKarthik August 21, 2024

Toyota suffers a major databreach with 240GB of data leaked

Toyota has suffered a data breach in which a massive 240GB trove of sensitive information was stolen and leaked, exposing data on employees, customers, financial records, and network infrastructure The…

PravinKarthik August 21, 2024

Microsoft Flaw CVE-2024-38193 exploited by Lazarus Group

During this month patch Tuesday, microsoft addressed nearly 90 flaws, some of which have already been exploited by hackers. One specific vulnerability, CVE-2024-38193 with a CVSS score of 7.8, is…

PravinKarthik August 20, 2024

F5 fixes NGINX and BIG-IP Vulnerabilities

F5 has recently released security advisories addressing vulnerabilities in its products. These vulnerabilities, if exploited, could lead to denial-of-service (DoS) attacks and unauthorized access, disruptions and data breaches NGINX Plus…

PravinKarthik August 20, 2024

CISA adds Jenkins bug CVE-2024-23897 to its KEV Catalog

The U.S. CISA added a Jenkins Command Line Interface (CLI) Path Traversal vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. Jenkins has addressed the vulnerability tracked as CVE-2024-23897, with a…

PravinKarthik August 20, 2024