Tag: Patch Management
cPanel bug lets one mailbox account seize the whole server
One cPanel account with mail rights could reach root on a shared server before this week's fix.
ConnectWise patches a ScreenConnect flaw that let sessions move files
ConnectWise closed a ScreenConnect gap that let live sessions move and run files without consent.
GitLab patches a 10.0 file-read flaw as scanning begins within hours
Two GitLab flaws, one a perfect 10.0, drew automated probes within hours of the patch.
CISA gives agencies until Saturday to patch three exploited flaws
Three exploited networking flaws now carry a three-day federal patch deadline.
HPE fixes 34 ArubaOS-CX flaws led by a 9.8 RCE cluster
HPE's AOS-CX updates close 34 CVEs including a 9.8-rated unauthenticated RCE cluster.
Broadcom patch closes twin VM escape bugs with no workaround
Broadcom's 26H1u1 update closes two guest-to-host escape bugs with no workarounds available.
Exploited Rails flaw lets attackers read secrets and run code
VulnCheck says KindaRails2Shell is under attack roughly a month after patches shipped.
Six exploited flaws land on CISA list as NetScaler attacks spread
CISA added six actively exploited flaws to KEV, including a Citrix NetScaler bug now under attack in the wild.