Oracle has released security update to address vulnerabilities in tomcat. Exploitation of these vulnerabilities may allow an attacker to cause a denial service condition. Users and administrators are encouraged to review Oracle Linux Security Advisory and apply necessary updates.
Read More »Current Activities
TZCERT-SU-24-0532 (WordPress Security Update)
Wordfence has released security updates to address vulnerabilities in Email Log, HT Mega, YITH WooCommerce Ajax Search and Pie Register. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Wordfence Security Advisories email-log, ht-mega, yith-woocommerce-ajax-search and pie-register and …
Read More »Critical Authentication Bypass Vulnerability in The GitHub Enterprise Server (CVE-2024-4985)
Advisory No: TZCERT/SA/2024/05/23 Date of First Release: 23rd May 2024 Source: GitHub Software Affected: GitHub Enterprise Server (GHES) prior to Version 3.13.0 Overview: GitHub Enterprise Servers (GHES) prior to version 3.13.0 is affected by a critical authentication bypass vulnerability. The vulnerability allows an unauthorized access to the instance without requiring …
Read More »TZCERT-SU-24-0531 (Cisco Security Update)
Cisco has released security updates to address a security vulnerability in Cisco OpenDNS service. Exploitation of this vulnerability may allow an attacker to cause denial of service condition to an affected system. Users and Administrators are encouraged to review Cisco Security Advisory and apply necessary updates.
Read More »TZCERT-SU-24-0530 (Mageia Security Update)
Mageia has released security updates to address vulnerabilities in its multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators are encouraged to review Mageia Security Advisories dated 21st May 2024 and apply necessary updates.
Read More »