NVD disclosure day

Published threat advisories for January 9, 2025

CVE-2024-54724

PHPYun Code Execution Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

PHPYun, a talent management system, has a critical vulnerability allowing unauthorized code execution and arbitrary file writing through restricted actions. If reachable, this could lead to significant system compromise. Confirming the presence and exposure of this system in your environment is important due to the pot

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2024-53704

SonicWall SonicOS SSLVPN Authentication Bypass Risk.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

An Improper Authentication vulnerability in SonicWall SonicOS SSLVPN allows remote attackers to bypass authentication. This could lead to unauthorized access to systems and data. The issue carries a critical severity rating. Organizations should identify affected assets and implement vendor-provided mitigations.

NVD modified: NVD date unavailable • CISA KEV