Security Advisories

Vulnerability Description This advisory addresses a false positive identified by Nessus regarding CVE-2024-41110 in CTERA Portal. According to the security advisory, CVE-2024-41110 involves an authorization (AuthZ) bypass and privilege escalati...

Vulnerability Description A vulnerability has been identified in the CTERA Edge Filer user interface, involving a Cross-site Request Forgery (CSRF) attack vector that allows privilege escalation. The likelihood of exploiting this vulnerability...

Vulnerability Description An unauthenticated Remote Code Execution (RCE) vulnerability has been discovered in OpenSSH’s server (sshd), affecting glibc-based Linux systems. This critical vulnerability, designated CVE-2024-6387...

Vulnerability Description A vulnerability has been identified in the CTERA Edge Filer administrative interface that allows authenticated users to escalate their privileges. This vulnerability has been assessed by CTERA to hav...

Vulnerability Description CVE-2021-44142 is a privilege escalation vulnerability that allows remote attackers to execute arbitrary code on affected installations of Samba. Access as a user that has write access to a file's e...

Vulnerability Description A memory corruption vulnerability has been found in polkit’s pkexec, a SUID-root program that is installed by default on every major Linux distribution. This easily exploited vulnerability allows an...

The information in this article is correct as of December 16th 2021. Apache Log4j2 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled L...

Vulnerability Description The Dirty Pipe vulnerability in the Linux kernel has been around since version 5.8 and is tracked as CVE-2022-0847. This flaw discovered by Max Kellermann, abuses how the Kernel manages pages in pip...

Vulnerability Description A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WA...