Latest articles
SOCRadar
What Do You Need to Know About the Linux XZ Utils Vulnerability, CVE-2024-3094?
[Update] August 13, 2025: New research from Binarly reveals that Docker images containing the CVE-2024-3094 backdoor are still publicly available, highlighting ongoing supply chain risks. Read under the subheading “XZ…
SOCRadar
Cisco Fixes Numerous DoS Vulnerabilities in IOS, IOS XE, and Access Point Software
Cisco recently addressed multiple Denial-of-Service (DoS) vulnerabilities across its product range, including Cisco IOS, IOS XE, and Access Point software. CISA has issued an alert emphasizing the severity of these vulnerabilities, urging…
SOCRadar
High-Severity Vulnerability in Popular WordPress Plugin ‘File Manager’ Could Lead to CSRF Attacks (CVE-2024-1538)
A high-severity security vulnerability, identified as CVE-2024-1538, has recently come to light in the widely used File Manager plugin for WordPress. Its exploitation poses a significant risk of Cross-Site Request…
SOCRadar
OpenVPN Fixed Multiple Vulnerabilities on Windows Version: Risk of Privilege Escalation, Remote Access
OpenVPN, with the release of a new version, addressed severe security vulnerabilities, specifically impacting the Windows platform. These vulnerabilities could cause system crashes and privilege escalation, and allow remote attackers…
SOCRadar
Critical SQL Injection Vulnerability in PgJDBC Affects Atlassian Bamboo Data Center and Server (CVE-2024-1597)
Atlassian recently patched a critical vulnerability and 24 high-severity vulnerabilities, which were disclosed in the March 19 2024 Security Bulletin. Importantly, the critical vulnerability, identified as CVE-2024-1597, affects the Atlassian…
SOCRadar
Critical RCEs: Ivanti Standalone Sentry (CVE-2023-41724), Neurons for ITSM (CVE-2023-46808), Telerik Report Server (CVE-2024-1800)
[Update] March 22, 2024: “CISA Warns for the Vulnerabilities in Ivanti Standalone Sentry and Neurons for ITSM” Ivanti has fixed critical vulnerabilities that could lead to code execution, including one…
SOCRadar
Critical RCE Vulnerability in Fortra FileCatalyst Workflow Threatens File Transfer Security (CVE-2024-25153)
Fortra FileCatalyst Workflow, a trusted enterprise file transfer solution, is under severe threat due to the disclosure of a critical Remote Code Execution (RCE) vulnerability. The vulnerability, CVE-2024-25153 (CVSS: 9.8), poses significant risks…
SOCRadar
Critical Update for Spring Framework: CVE-2024-22259 Exposes Applications to Open Redirect, SSRF Attacks
Spring Framework faces a critical security challenge with the emergence of CVE-2024-22259. This vulnerability poses significant risks to systems utilizing the Spring Framework, potentially exposing them to open redirect and Server-Side Request…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action