Vulnerabilities
Critical Vulnerability Discovered in Jira Service Management Server and Data Center
TheCISO -
A critical security vulnerability has been discovered in Jira Service Management Server and Data Center, which has been assigned the CVE identifier CVE-2023-22501 and...
F5 BIG-IP Vulnerability: A Threat to System Stability
TheCISO -
F5 Networks, a cybersecurity company, has issued a warning regarding a high-severity format string vulnerability in BIG-IP.
This vulnerability has the potential to cause...
Binwalk Security Tool Vulnerable to Path Traversal Attack
TheCISO -
Binwalk, a popular Linux-based security analysis tool, is facing a security threat due to a path traversal vulnerability that could lead to remote code...
Most Organizations Still Vulnerable To The Log4j Vulnerability
A study examining the scope and impact of the recent Log4j vulnerability has been conducted by Tenable and the results are extremely interesting.
According to...
“OK Google”, Patch A New Zero-Day Vulnerability
Yet another Chrome "zero-day" vulnerability was patched by Google, the 8th for 2022.
The tech giant released security updates to address a new zero-day vulnerability...
Google Pixel Phone Lock Bypass
TheCISO -
Security researcher David Schütz, discovered a vulnerability that could allow an attacker to unlock any Google Pixel phone without knowing its passcode! This finding...
CSRF Vulnerability Discovered in Plesk API
TheCISO -
Plesk is a very popular administration tool for web hosting and data center providers. Users usually use its web interface to administer their websites...
Critical Vulnerabilities Affecting Citrix Gateway and ADC
TheCISO -
Critical vulnerabilities have been discovered in Citrix Gateway and Citrix ADC which can allow an attacker to gain unauthorized access, perform remote desktop takeover...
Public Exploit is Available for NSX-V, VMware Urges Customers to Upgrade
TheCISO -
The critical vulnerability for NSX Data Center for vSphere(NSX-V) tracked as CVE-2021-39144 can be exploited to provide remote code execution to attackers.
Public exploit is...
Apple patches its ninth vulnerability for this year
TheCISO -
Since the start of 2022, Apple has addressed nine vulnerabilities with the latest one affecting iOS and iPadOS.
This Monday, Apple rolled out updates to...
How to Detect and Fix the “Text4Shell” Vulnerability
TheCISO -
What is Text4Shell
Similar to the Spring4Shell and Log4Shell vulnerabilities, Text4Shell is a new vulnerability reporter by Alvaro Munoz, in the Apache Commons Text library....
New WatchGuard vulnerabilities could lead to appliance takeover
Ambisonics security engineer Charles Fol published an article last week, where he explains how he discovered 5 vulnerabilities and built 8 exploits to gain...
