A critical zero-day vulnerability (CVE-2025-0282) has been discovered in Ivanti Connect Secure, allowing remote code execution through stack-based buffer overflow. Affecting multiple Ivanti products including Connect Secure, Policy Secure, and Neurons for ZTA gateways, the flaw carries a 9...
A critical vulnerability (CVE-2024-52875) in GFI KerioControl firewall versions 9.2.5-9.4.5 is being actively exploited, allowing one-click remote code execution through CRLF injection. The flaw enables attackers to steal admin credentials and upload malicious files, with nearly 24,000 exp...
A critical Apache Struts vulnerability (CVE-2024-53677) with a CVSS score of 9.5 is under active exploitation, enabling remote code execution through file upload manipulation. The flaw affects multiple Struts versions from 2.0.0 to 6.3.0.2 and allows path traversal attacks, potentially lea...
Critical security vulnerabilities discovered in Palo Alto Networks GlobalProtect and SonicWall SMA100 NetExtender VPN clients could allow remote code execution attacks. The flaws affect Windows, macOS, and Linux users, with SonicWall's vulnerability rated more severe at CVSS 7.1. While no ...
Veeam patches two critical vulnerabilities in Service Provider Console (VSPC), including a severe remote code execution flaw (CVE-2024-42448, CVSS 9.9) and a security leak vulnerability (CVE-2024-42449, CVSS 7.1). Users must upgrade to version 8.1.0.21999 to protect against potential attac...
