A security flaw has been discovered in Broadcom VMware vCenter software. This is called a path traversal vulnerability, a type of weakness that lets an unauthorized user bypass normal access rules to reach parts of the system they would not normally be allowed to access.
If a threat actor has network access to a vCenter instance, they could ...
Continue reading
A security vulnerability has been identified in Microsoft's Internet Key Exchange (IKE) Service Extensions, a component used to set up secure, encrypted connections for networked systems and services. The flaw is categorized as a "double free" vulnerability, a type of memory error that can cause systems to crash or behave unexpectedly.If exploited ...
Continue reading
A security flaw has been found in MLflow, a tool many hosting clients use to manage machine learning projects on their accounts. This is a server-side request forgery vulnerability, a type of issue that lets bad actors trick the MLflow software into sending requests to private, internal parts of your hosting environment or cloud metadata services ...
Continue reading
A security vulnerability has been discovered in TrueConf Server, a platform commonly used for video conferencing and team communication. The flaw is caused by a missing authentication check for a critical, high-risk function of the software.This issue means that any unauthorized person who can connect to the service’s port 4307/TCP over a ...
Continue reading
