Category Archives: Advisories

ServiceNow Improper Input Validation Vulnerability (CVE-2024-4879)

Read Time:44 Second

What is the vulnerability?A critical input validation vulnerability (CVE-2024–4879) is identified in ServiceNow’s Now platform hosted in Vancouver and Washington DC, exploiting this vulnerability could lead to potential data breaches and unauthorized system access. Threat actors may weaponize proof-of-concept (PoC) exploits which are publicly available. CISA added CVE-2024–4879 to its Known Exploited Vulnerabilities (KEV) Catalog on July 29, 2024.What is the recommended Mitigation?ServiceNow has released updates for the affected instances. CVE-2024-4879 – Jelly Template Injection Vulnerability in ServiceNow UI Macros – SecurityWhat FortiGuard Coverage is available?FortiGuard Labs recommends users to apply the patches released by the vendor immediately to secure their systems.FortiGuard Intrusion Prevention Service (IPS) protection is currently being investigated to defend against exploitation of CVE-2024-4879.The FortiGuard Incident Response team can be engaged to help with any suspected compromise.

Read More

APPLE-SA-07-29-2024-9 visionOS 1.3

Read Time:24 Second

Posted by Apple Product Security via Fulldisclosure on Jul 29

APPLE-SA-07-29-2024-9 visionOS 1.3

visionOS 1.3 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT214123.

Apple maintains a Security Releases page at
https://support.apple.com/HT201222 which lists recent
software updates with security advisories.

Apple Neural Engine
Available for: Apple Vision Pro
Impact: A local attacker may be able to cause unexpected system shutdown…

Read More

APPLE-SA-07-29-2024-8 tvOS 17.6

Read Time:24 Second

Posted by Apple Product Security via Fulldisclosure on Jul 29

APPLE-SA-07-29-2024-8 tvOS 17.6

tvOS 17.6 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT214122.

Apple maintains a Security Releases page at
https://support.apple.com/HT201222 which lists recent
software updates with security advisories.

AppleMobileFileIntegrity
Available for: Apple TV HD and Apple TV 4K (all models)
Impact: An app may be able to bypass Privacy…

Read More

APPLE-SA-07-29-2024-7 watchOS 10.6

Read Time:24 Second

Posted by Apple Product Security via Fulldisclosure on Jul 29

APPLE-SA-07-29-2024-7 watchOS 10.6

watchOS 10.6 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT214124.

Apple maintains a Security Releases page at
https://support.apple.com/HT201222 which lists recent
software updates with security advisories.

AppleMobileFileIntegrity
Available for: Apple Watch Series 4 and later
Impact: An app may be able to bypass Privacy preferences…

Read More