Aug 25, 2025

Started

• Closed✓Patched

  Git: Link Following Vulnerability

  Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files. Added to CISA KEV on 2025-08-25.

  Git·Closed Aug 25, 2025·updated Aug 25, 2025

• Closed✓Patched

  Citrix Session Recording: 2 exploited vulnerabilities (CVE-2024-8068, CVE-2024-8069)

  CVE-2024-8068: Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain. CVE-2024-8069: Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server. Added to CISA KEV on 2025-08-25.

  Citrix Session Recording·Closed Aug 25, 2025·updated Aug 25, 2025