Cyber alerts

76 results

January 2025

Published Tuesday 14 January 2025 (03:22) (updated 14 January 2025)

SAP Releases January 2025 Updates

Updates address two critical vulnerabilities which could lead to information disclosure or privilege escalation, and fourteen others affecting multiple products

CC-4602 High

Published Thursday 9 January 2025 (11:30) (updated 9 January 2025)

Active Exploitation of Zero-Day Vulnerability in Ivanti Connect Secure, Policy Secure, and Neurons for ZTA Gateways

CVE-2025-0282 could allow an unauthenticated attacker to achieve RCE and is under active exploitation. Patches also fix CVE-2025-0283 which could be exploited to allow a local attacker to escalate their privileges.

CC-4601 Medium

Published Wednesday 8 January 2025 (03:20) (updated 10 January 2025)

Multiple Vulnerabilities in SonicOS

SonicWall releases security update to address four vulnerabilities in SonicOS

CC-4600 Medium

Published Tuesday 7 January 2025 (03:44) (updated 7 January 2025)

Multiple Vulnerabilities in Redis

Security updates fix two vulnerabilities that could lead to RCE and denial-of-service

CC-4599 Medium

Published Friday 3 January 2025 (02:35) (updated 3 January 2025)

Proof-of-Concept Exploit Released for CVE-2024-40725 in Apache HTTP Server

CVE-2024-40725 could lead to source code disclosure of local scripts running on the server

CC-4598 Medium

Published Friday 3 January 2025 (01:29) (updated 3 January 2025)

Proof-of-Concept Exploit Released for Vulnerability CVE-2024-49113 in Microsoft Windows LDAP

Security researchers have published a PoC for DoS vulnerability CVE-2024-49113 and additional information on their attempts to exploit RCE vulnerability CVE-2024-49112