-
TheCyberThrone CyberSecurity Newsletter Top 5 Articles – January 2025
TheCyberThrone CyberSecurity Newsletter Top 5 Articles – January 2025 Welcome to TheCyberThrone cybersecurity month in review will be posted covering the important security happenings . This review is for the month ending January 2025Subscribers favorite #1Exploit Code … Read more Published Date: Feb 01, 2025 (1 day, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2024-55591 CVE-2024-52046…
-
CVE-2025-24480 impacts Rockwell Automation
CVE-2025-24480 impacts Rockwell Automation CVE-2025-24480 is a critical vulnerability that has been identified in FactoryTalk View Machine Edition, a widely used industrial automation software from Rockwell Automation. This vulnerability is pa … Read more Published Date: Feb 02, 2025 (1 day, 7 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-24480 CVE-2024-54677 CVE-2024-50379 Go to Source
-
BeyondTrust Zero-Day Breach Exposes 17 SaaS Customers via Compromised API Key
BeyondTrust Zero-Day Breach Exposes 17 SaaS Customers via Compromised API Key BeyondTrust has revealed it completed an investigation into a recent cybersecurity incident that targeted some of the company’s Remote Support SaaS instances by making use of a compromised API key. Th … Read more Published Date: Feb 01, 2025 (2 days, 1 hour ago) Vulnerabilities has…
-
CVE-2024-53296 – Dell PowerProtect DD Stack-based Buffer Overflow Vulnerability
CVE ID : CVE-2024-53296 Published : Feb. 1, 2025, 4:15 a.m. | 1 hour, 11 minutes ago Description : Dell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. Severity: 2.7 |…
-
CVE-2024-51534 – Dell PowerProtect DD Path Traversal Vulnerability
CVE ID : CVE-2024-51534 Published : Feb. 1, 2025, 4:15 a.m. | 1 hour, 11 minutes ago Description : Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged could potentially exploit this vulnerability to gain unauthorized overwrite of OS files stored on the server filesystem. Exploitation…
-
CVE-2024-13547 – aThemes Addons for Elementor Stored Cross-Site Scripting (XSS)
CVE ID : CVE-2024-13547 Published : Feb. 1, 2025, 4:15 a.m. | 1 hour, 11 minutes ago Description : The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it…
-
CVE-2024-13651 – WordPress RapidLoad Unauthorized Data Modification Remote Code Execution Vulnerability
CVE ID : CVE-2024-13651 Published : Feb. 1, 2025, 4:15 a.m. | 1 hour, 11 minutes ago Description : The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_deactivate() function in all versions up to, and including, 2.4.4. This makes it…
-
CVE-2024-13343 – WooCommerce Customers Manager Privilege Escalation Vulnerability
CVE ID : CVE-2024-13343 Published : Feb. 1, 2025, 4:15 a.m. | 1 hour, 11 minutes ago Description : The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_assign_new_roles() function in all versions up to, and including, 31.3. This makes it possible for authenticated attackers, with…
-
CVE-2024-12184 – Cimatti WordPress Contact Forms Remote File Disclosure
CVE ID : CVE-2024-12184 Published : Feb. 1, 2025, 4:15 a.m. | 1 hour, 11 minutes ago Description : The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and including, 1.9.4. This makes it possible…
-
CVE-2024-12620 – Oracle of Animations Unauthorized Data Modification Vulnerability
CVE ID : CVE-2024-12620 Published : Feb. 1, 2025, 4:15 a.m. | 1 hour, 11 minutes ago Description : The AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ‘agl_json’ AJAX action in all versions up to, and…