Two memory safety vulnerabilities in WatchGuard and Panda Security products could lead to code execution with System privileges.
The post Vulnerabilities in WatchGuard, Panda Security Products Lead to Code Execution appeared first on SecurityWeek.
Critical Jenkins Vulnerability Leads to Remote Code Execution
A critical vulnerability in Jenkins’ built-in CLI allows remote attackers to obtain cryptographic keys and execute arbitrary code.
The post Critical Jenkins Vulnerability Leads to Remote Code Execution appeared first on SecurityWeek.
Thousands of GitLab Instances Unpatched Against Critical Password Reset Bug
Over 5,000 GitLab servers have yet to be patched against CVE-2023-7028, a critical password reset vulnerability.
The post Thousands of GitLab Instances Unpatched Against Critical Password Reset Bug appeared first on SecurityWeek.
Vulnerabilities in Lamassu Bitcoin ATMs Can Allow Hackers to Drain Wallets
Hackers could exploit Lamassu Douro ATM vulnerabilities to take over devices, steal bitcoin from users.
The post Vulnerabilities in Lamassu Bitcoin ATMs Can Allow Hackers to Drain Wallets appeared first on SecurityWeek.
Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure
The Atlassian Confluence vulnerability CVE-2023-22527 is being exploited in the wild just days after it was disclosed.
The post Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure appeared first on SecurityWeek.
Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks
Seven vulnerabilities found in Rapid SCADA could be exploited to gain access to sensitive industrial systems, but they remain unpatched.
The post Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks appeared first on SecurityWeek.
GitHub Rotates Credentials in Response to Vulnerability
GitHub rotates credentials and releases patches after being alerted of a vulnerability affecting GitHub.com and GitHub Enterprise Server.
The post GitHub Rotates Credentials in Response to Vulnerability appeared first on SecurityWeek.
Remote Code Execution Vulnerability Found in Opera File Sharing Feature
A vulnerability in Opera browser’s file sharing feature My Flow could be exploited for remote code execution.
The post Remote Code Execution Vulnerability Found in Opera File Sharing Feature appeared first on SecurityWeek.
VMware Urges Customers to Patch Critical Aria Automation Vulnerability
Aria Automation is affected by a critical vulnerability that could be exploited to gain access to remote organizations and workflows.
The post VMware Urges Customers to Patch Critical Aria Automation Vulnerability appeared first on SecurityWeek.
GitLab Patches Critical Password Reset Vulnerability
GitLab has resolved a critical authentication vulnerability allowing attackers to hijack password reset emails.
The post GitLab Patches Critical Password Reset Vulnerability appeared first on SecurityWeek.
