authentication bypass Archives

PAN-PAN-PAN-OS: Palo Alto Firewalls Under Attack (Again)

Richi Jennings | February 20, 2025 | attack chain, Attack Chains, authentication bypass, Authentication bypass flaw, CVE-2024-9474, CVE-2025-0108, CVE-2025-0111, firewall, Firewall Exploit, firewall security, Palo Alto Networks, Palo Alto Networks PAN-OS, PAN-OS, PAN-OS Vulnerability, php, SB Blogwatch

Time to Declare an Emergency? Scrotes chain three flaws to take full control—seems pretty easy ...

Security Boulevard

Fortinet OS & FortiProxy Authentication Bypass Vulnerability (CVE-2024-55591) Notification

NSFOCUS | January 15, 2025 | authentication bypass, Blog, CVE-2024-55591, Emergency Response, FortiOS & FortiProxy

Overview Recently, NSFOCUS CERT detected that Fortinet has issued a security notification and fixed the identity authentication bypass vulnerability in FortiOS and FortiProxy (CVE-2024-55591). Unauthenticated attackers can bypass system identity authentication by ...

NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

Critical ADOdb Vulnerabilities Fixed in Ubuntu

Rohan Timalsina | June 26, 2024 | ADOdb PHP, ADOdb vulnerabilities, authentication bypass, Cross-Site Scripting (XSS) Attacks, Extended Lifecycle Support, Linux & Open Source News, security patches, security vulnerabilites, SQL injection attacks, Ubuntu 16.04, Ubuntu 16.04 End of Life, Ubuntu 18.04, Ubuntu 18.04 End of Life, Ubuntu 18.04 security vulnerabilities, Ubuntu 20.04, Ubuntu 22.04, Ubuntu Security Fixes, Ubuntu Security Updates

Multiple vulnerabilities have been addressed in ADOdb, a PHP database abstraction layer library. These vulnerabilities could cause severe security issues, such as SQL injection attacks, cross-site scripting (XSS) attacks, and authentication bypasses ...

TuxCare

GitHub Server Flaw Causes Critical Authentication Bypass

Recent developments have highlighted a critical security flaw in GitHub Enterprise Server, underscoring the importance of proactive measures to ensure the integrity of code hosting platforms. Let’s have a look at the ...

TuxCare

CISA Adds JetBrains TeamCity Vulnerability To KEV Catalog

Wajahat Raja | March 18, 2024 | authentication bypass, Business Resilience, CVE-2024-27198, CVE-2024-27199, Cyber Threats, Cybersecurity News, Endpoint security, JetBrains TeamCity, patch management, risk mitigation, Software Security, Vulnerability Management

The US Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical JetBrains TeamCity vulnerability, emphasizing the urgent need for users to take preventive measures. The recently discovered flaw has been added ...

TuxCare

ScreenConnect Authentication Bypass demo

ScreenConnect Authentication Bypass (CVE-2024-1709 & CVE-2024-1708)

Deepak Kumar Choudhary | February 26, 2024 | authentication bypass, Remote Code Execution, security bulletin

Uncover critical security flaws in ConnectWise ScreenConnect (CVE-2024-1709 & CVE-2024-1708) posing remote code execution risks. Actively exploited in the wild. The post ScreenConnect Authentication Bypass (CVE-2024-1709 & CVE-2024-1708) appeared first on Indusface ...

Indusface

Shield Your Device: Mitigating Bluetooth Vulnerability Risks

In the ever-evolving landscape of cybersecurity, a significant Bluetooth security flaw has emerged, posing a threat to devices operating on Android, Linux, macOS, and iOS. Tracked as CVE-2023-45866, this flaw allows threat ...

TuxCare

‘BrutePrint’ Unlocks Android Phones — Chinese Researchers

Or, at least, OLDER phones: SPI/TEE MITM FAIL ...

Security Boulevard

Apple Fixes MacOS High Sierra Root Access Vulnerability

Lucian Constantin | November 29, 2017 | Amazon S3, Apple, authentication bypass, blank password, cloud leak, credential validation failure, Data leak, INSCOM, macOS High Sierra, misconfiguration, nsa, Red Disk, root access, root password, storage bucket, third-party vendor, virtual appliance, vulnerability

Apple has released an emergency fix for an embarrassing vulnerability that allowed people to access the highest privileges account on Mac computers without a password. The vulnerability was disclosed by a user ...