Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
flipboard.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Welcome to Flipboard on Mastodon. A place for our community of curators and enthusiasts to inform and inspire each other. If you'd like to join please request an invitation via the sign-up page.

Administered by:

Server stats:

1.2K
active users

flipboard.social: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.5

#advisory

12 posts6 participants0 posts today
Public
BeyondMachines :verified:

Multiple vulnerabilities reportd in Optigo Networks Visual BACnet Tools, one critical
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesMultiple vulnerabilities reportd in Optigo Networks Visual BACnet Tools, one criticalOptigo Networks has patched three high-severity security vulnerabilities in their Visual BACnet and Visual Networks Capture Tool products (version 3.1.2rc11), including an authentication bypass vulnerability (CVE-2025-2080, CVSS 9.3) that exposes web management services and two hard-coded security constant issues (CVE-2025-2079 and CVE-2025-2081, both CVSS 8.7) that could allow attackers to generate valid JWT sessions and impersonate web services.
Public
CEngg Shreekant Patil

𝐒𝐡𝐫𝐞𝐞𝐤𝐚𝐧𝐭 𝐏𝐚𝐭𝐢𝐥 𝐀𝐩𝐩𝐨𝐢𝐧𝐭𝐞𝐝 𝐂𝐨𝐦𝐦𝐢𝐭𝐭𝐞𝐞 𝐂𝐡𝐚𝐢𝐫𝐦𝐚𝐧 𝐟𝐨𝐫 𝐒𝐤𝐢𝐥𝐥 𝐚𝐧𝐝 𝐒𝐭𝐚𝐫𝐭𝐮𝐩 𝐂𝐨𝐦𝐦𝐢𝐭𝐭𝐞𝐞 𝐚𝐭 𝐍𝐈𝐌𝐀 𝐍𝐚𝐬𝐡𝐢𝐤
medium.com/p/shreekant-patil-a

Medium · Shreekant Patil Appointed Committee Chairman for Skill and Startup Committee at NIMA NashikBy CEngg. Shreekant Patil
#NIMANashik#ShreekantPatil#Chairman
Public
BeyondMachines :verified:

Critical authentication bypass vulnerability reported in Apache Pinot
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesCritical authentication bypass vulnerability reported in Apache PinotA critical authentication bypass vulnerability (CVE-2024-56325, CVSS 9.8) has been discovered in Apache Pinot versions before 1.3.0, allowing unauthenticated attackers to bypass authentication controls potentially gaining unauthorized access to internal APIs, configuration files, and code execution interfaces. Administrators are strongly advised to immediately upgrade all Pinot components, restrict access to administrative endpoints, disable unnecessary functions, and isolate Pinot clusters from public networks.
Public
BeyondMachines :verified:

Commvault developers warn of critical flaw, urge immediate patching
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesCommvault developers warn of critical flaw, urge immediate patchingA critical vulnerability in multiple versions of Commvault's backup software affecting both Linux and Windows platforms (versions 11.20.0-11.36.44) allows attackers to create and execute webshells on Commvault web servers, potentially establishing backdoor access to compromised systems. Commvault has released patched versions (11.20.216, 11.28.140, 11.32.87, and 11.36.45). Administrators are strongly urged to immediately update both CommServe and Web Servers.
Public
BeyondMachines :verified:

VMware patches multiple actively exploited vulnerabilities, at least one critical
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesVMware patches multiple actively exploited vulnerabilities, at least one criticalBroadcom has released security updates to address three actively exploited zero-day vulnerabilities affecting multiple VMware products CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226. The vulnerabilities impact VMware ESXi, Workstation, Fusion, Cloud Foundation, and Telco Cloud Platform products. They were reported by the Microsoft Threat Intelligence Center and have no workarounds available.
Public
BeyondMachines :verified:

Google releases March 2025 Android security update, fixes two actively exploited flaws
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesGoogle releases March 2025 Android security update, fixes two actively exploited flawsGoogle's March 2025 Android Security Bulletin addresses 43 vulnerabilities, including two actively exploited flaws: CVE-2024-43093 and CVE-2024-50302. The update also patches 10 critical-severity vulnerabilities affecting the Android System component. Pixel users receive immediate security patches, the rest when the phone vendor releases their version of the patch.
ExploreLive feeds
About