Palo Alto PAN-OS GlobalProtect Command Injection (CVE-2024-3400)
CVE-2024-3400 is an unauthenticated command injection in Palo Alto Networks PAN-OS GlobalProtect gateway feature. Attac…
Latest Posts
PHP CGI Argument Injection Remote Code Execution (CVE-2024-4577)
CVE-2024-4577 is a critical argument injection flaw in PHP when running as CGI on Windows (also relevant on some Linux+…
OpenSSL Buffer Overread in CMS Password Decryption (CVE-2024-9143)
CVE-2024-9143 is a buffer overread in OpenSSL's CMS Authenticated Enveloped Data decryption path. Applications call…
xz/liblzma Supply-Chain Backdoor (CVE-2024-3094) — Critical Linux Vulnerability
CVE-2024-3094 is a malicious backdoor inserted into upstream xz / liblzma tarballs (versions 5.6.0 and 5.6.1 ). On syste…