Tag: Code Injection vulnerability

CISA Warns of Actively Exploited Brocade, Commvault, and Qualitia Active! Mail Vulnerabilities (CVE-2025-1976, CVE-2025-3928, and CVE-2025-42599)

Posted by Author Diksha Ojha on Posted on

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned users about three high-severity vulnerabilities impacting Broadcom Brocade Fabric OS, Commvault Web server, and Qualitia Active! Mail. CISA added the vulnerabilities to its Known Exploited Vulnerabilities Catalog, urging users to patch them before May 19, 2025.

Apple Arbitrary Code Injection Vulnerability (CVE-2021-30869)

Posted by Author Diksha Ojha on Posted on

Apple provided security fixes to address a zero-day vulnerability on Thursday. The attackers have used it in the wild to break into iPhones and Macs running older versions of iOS and macOS. Apple has also provided patches for a previously patched security flaw exploited by NSO Group’s Pegasus surveillance tool to target iPhone users.  CVE-2021-30869 is a zero-day vulnerability. This is a type-confusion hole in Apple’s … Continue reading “Apple Arbitrary Code Injection Vulnerability (CVE-2021-30869)”