InfoSecBulletin Cybersecurity for mankind
Bitdefender fixed a serious vulnerability (CVE-2024-4177, CVSS 8.1) in its GravityZone Console On-Premise product. This flaw, found by security researcher Nicolas Verdier (n1nj4sec), could enable attackers to carry out server-side request forgery (SSRF) attacks, possibly resulting in unauthorized access and data breaches.
GravityZone Console is a security management platform by Bitdefender. It helps monitor and manage security across different endpoints, networks, and cloud environments. The vulnerability affects on-premise versions of GravityZone Console before version 6.38.1-2.
Microsoft Patches Four Critical Azure and Power Apps Vulns
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
SonicWall Patches 3 Flaws in SMA 100 Devices
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day
Hacker exploited Samsung MagicINFO 9 Server RCE flaw
CISA adds Langflow flaw to its KEV catalog
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition
The problem is a flaw in the host whitelist parser of the proxy service. An attacker could exploit this flaw to manipulate server requests, causing unintended actions or leaking sensitive information. These vulnerabilities are very dangerous as they can bypass security controls and allow unauthorized access to internal systems.
Bitdefender has fixed the issue with an automatic update to version 6.38.1-2 of the GravityZone Console On-Premise. Users with affected versions should update to avoid potential risks from this vulnerability.
