A security flaw has been identified in Microsoft SharePoint, a widely used platform that many organizations rely on to store work files, share content with teams, and collaborate on projects.The issue is categorized as a weak authentication vulnerability. This means an unauthorized person could potentially bypass a built-in security check for the ...
Continue reading
A security vulnerability has been identified in Broadcom's VMware vCenter software, a platform used by many organizations to manage virtual server infrastructure. This is a path traversal flaw, a type of issue that lets an attacker bypass standard access controls for the system.If a threat actor has network access to your vCenter instance, they ...
Continue reading
A security vulnerability has been identified in Microsoft's Internet Key Exchange (IKE) Service Extensions, a Windows system component. The flaw is a memory handling error called a "double free" that disrupts the service's normal operation.If exploited by a remote attacker, this vulnerability could allow them to run unauthorized malicious code on ...
Continue reading
A security issue has been found in MLflow, a tool many users run on their hosting accounts to manage machine learning workflows for their websites or applications. This flaw is a server-side request forgery vulnerability, which lets bad actors manipulate the MLflow tool to send requests to internal systems or cloud metadata services that are ...
Continue reading