Tag: cve
-
Leaked Wallpaper Vulnerability Exposes Windows Users to Privilege Escalation Attacks
A newly discovered vulnerability in Windows File Explorer has raised alarms within the cybersecurity community. Identified as CVE-2024-38100, this sec… First seen on gbhackers.com Jump to article: gbhackers.com/leaked-wallpaper-vulnerability-exposes-windows/
-
Hackers Actively Exploiting WordPress Plugin Arbitrary File Upload Vulnerability
Hackers have been actively exploiting a critical vulnerability in the WordPress plugin 简数采集器 (Keydatas). The vulnerability, CVE-2024-6220, a… First seen on gbhackers.com Jump to article: gbhackers.com/exploiting-wordpress-plugin/
-
Bitdefender Flaw Let Attackers Trigger Server-Side Request Forgery Attacks
A recently discovered vulnerability in Bitdefender’s GravityZone Update Server has raised significant security concerns. Identified as CVE-2024-6980, … First seen on gbhackers.com Jump to article: gbhackers.com/bitdefender-flaw-let-attackers/
-
Over 20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024-37085
Shadowserver researchers reported that over 20,000 internet-exposed VMware ESXi instances are affected by the actively exploited flaw CVE-2024-37085. … First seen on securityaffairs.com Jump to article: securityaffairs.com/166432/hacking/vmware-esxi-cve-2024-37085-vulnerable-instances.html
-
Security Bypass Vulnerability Exposed in Rockwell Automation Logix Controllers
A security flaw in Rockwell Automation’s Logix controllers has been highlighted. This security bypass vulnerability, identified as CVE-2024-6242, affe… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/security-bypass-vulnerability-in-rockwell/
-
Critical OpenSSH vulnerability could affect millions of servers
Exploitation against CVE-2024-6387, which Qualys nicknamed ‘regreSSHion,’ could let attackers bypass security measures and gain root access to vulnera… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366592376/Critical-OpenSSH-vulnerability-could-affect-millions-of-servers
-
Recent Vulnerabilities in Cybersecurity: July 2024 CVE Roundup
Recent cybersecurity vulnerabilities reported on the National Institute of Standards and Technology (NIST)’s National Vulnerability Database pose sign… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/recent-vulnerabilities-in-cybersecurity-july-2024-cve-roundup/
-
CVE-2024-37085: VMware ESXi Vulnerability Exploited by Ransomware Gangs
Microsoft Threat Intelligence has disclosed a vulnerability (CVE-2024-37085) in VMware ESXi hypervisors, which is being actively exploited in the wild… First seen on securityonline.info Jump to article: securityonline.info/cve-2024-37085-vmware-esxi-vulnerability-exploited-by-ransomware-gangs/
-
Ransomware gangs exploit recently patched VMware ESXi bug CVE-2024-37085
Microsoft warns that ransomware gangs are exploiting the recently patched CVE-2024-37085 flaw in VMware ESXi flaw. Microsoft researchers warned that m… First seen on securityaffairs.com Jump to article: securityaffairs.com/166295/cyber-crime/ransomware-gangs-exploit-cve-2024-37085-vmware-esxi.html
-
VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)
Ransomware operators have been leveraging CVE-2024-37085, an authentication bypass vulnerability affecting Active Directory domain-joined VMware ESXi … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/30/cve-2024-37085-exploited/
-
Top CVEs of July 2024: Key Vulnerabilities and Mitigations
July 2024 has surfaced a series of significant vulnerabilities that could compromise the security of many organizations. From Bamboo Data Center flaws… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/top-cves-of-july-2024-key-vulnerabilities-and-mitigations/
-
March 2024 Patch Tuesday: Significant Vulnerabilities
Microsoft has rolled out its latest batch of security fixes for March 2024 Patch Tuesday, addressing a total of 59 CVE-numbered vulnerabilities. The g… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/march-2024-patch-tuesday/
-
Microsoft Says Ransomware Gangs Exploiting Just-Patched VMware ESXi Flaw
VMware did not mention in-the-wild exploitation for CVE-2024-37085 but Microsoft says ransomware gangs are abusing the just-patched flaw. The post Mic… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-ransomware-gangs-exploiting-just-patched-vmware-esxi-flaw/
-
Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)
CVE-2023-45249, a critical vulnerability affecting older versions of Acronis Cyber Infrastructure, is being exploited by attackers. About Acronis Cybe… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/29/cve-2023-45249/
-
Next-Gen Vulnerability Assessment: AWS Bedrock Claude in CVE Data Classification
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/next-gen-vulnerability-assessment-aws-bedrock-claude-in-cve-data-classification/
-
Cisco Patches the Products Impacted by RADIUS Protocol Vulnerability
Cisco has issued patches for multiple products affected by a critical vulnerability in the RADIUS protocol. The vulnerability, identified as CVE-2024-… First seen on gbhackers.com Jump to article: gbhackers.com/cisco-patches-the-products-impacted/
-
Cisco-Patches schließen kritische Schwachstellen in SSM und SEG
Noch ein kleiner Nachtrag von Ende der Woche. Anbieter Cisco hat kritische Schwachstellen in Produkten geschlossen. Da gibt es die Schwachstelle CVE-2… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/07/21/cisco-patches-schlieen-kritische-schwachstellen-in-ssm-und-seg/
-
Progress Software fixed critical RCE CVE-2024-6327 in the Telerik Report Server
Progress Software addressed a critical remote code execution vulnerability, tracked as CVE-2024-6327, in the Telerik Report Server. Telerik Report Ser… First seen on securityaffairs.com Jump to article: securityaffairs.com/166168/security/telerik-report-server-cve-2024-6327.html
-
Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers
The CVE-2024-21412 flaw in the Microsoft Defender SmartScreen has been exploited to deliver information stealers such as ACR Stealer, Lumma, and Meduz… First seen on securityaffairs.com Jump to article: securityaffairs.com/166152/security/cve-2024-21412-flaw-info-stealers.html
-
Broadcom liefert Update für CVE-2024-22280 – VMware Aria Automation und Cloud Foundation anfällig für SQL-Injections
First seen on security-insider.de Jump to article: www.security-insider.de/broadcom-vmware-sql-injection-schwachstelle-vmware-aria-updates-a-245d38ecf6d1179fcdbe0351da56ae96/
-
Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018
The vulnerability, tagged as CVE-2024-41110 with a CVSS severity score of 10/10, was originally found and fixed in 2018. The post Docker Patches Criti… First seen on securityweek.com Jump to article: www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/
-
Critical Microsoft Zero-Day Vulnerability Exploited in the Wild for Over a Year
A severe zero-day vulnerability in Microsoft Windows, tracked as CVE-2024-38112, has been actively exploited by threat actors for at least 18 months. … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/critical-microsoft-zero-day-vulnerability-exploited-in-the-wild-for-over-a-year/
-
SolarWinds Serv-U vulnerability under attack
The Centre for Cybersecurity Belgium observed exploitation against CVE-2024-28995, a high-severity vulnerability in SolarWind’s Serv-U file transfer p… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366589400/SolarWinds-Serv-U-vulnerability-under-attack
-
Organizations Warned of Exploited Twilio Authy Vulnerability
CISA warns of the in-the-wild exploitation of CVE-2024-39891, a Twilio Authy bug leading to the disclosure of phone number data. The post Organization… First seen on securityweek.com Jump to article: www.securityweek.com/organizations-warned-of-exploited-twilio-authy-vulnerability/
-
Windows Patchday-Nachlese: MSHTML 0-day-Schwachstelle CVE-2024-38112 durch Malware ausgenutzt
Noch ein kleiner Nachtrag zum Juli 2024 Patchday bei Microsoft. Mit den Sicherheitsupdates hat Microsoft auch eine MSHTML Spoofing-Schwachstelle gesch… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/07/18/windows-patchday-nachlese-mshtml-0-day-schwachstelle-cve-2024-38112-durch-malware-ausgenutzt/
-
SonicOS IPSec VPN Vulnerability Let Attackers Cause Dos Condition
SonicWall has disclosed a critical heap-based buffer overflow vulnerability in its SonicOS IPSec VPN. This flaw, identified as CVE-2024-40764, can pot… First seen on gbhackers.com Jump to article: gbhackers.com/sonicos-ipsec-vpn-vulnerability/
-
Critical Bazaar Vulnerability CVE-2024-40348: Directory Traversal Flaw Threatens System Integrity
A critical security flaw, CVE-2024-40348, has emerged in Bazaar v1.4.3, posing substantial risks due to its potential for directory traversal by unaut… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cve-2024-40348-vulnerability-in-bazaar-v1-4-3/
-
Cisco fixes critical flaws in Secure Email Gateway and SSM On-Prem (CVE-2024-20401, CVE-2024-20419)
Cisco has fixed two critical vulnerabilities that may allow attackers to overwrite files on its Secure Email Gateways (CVE-2024-20401) and change the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/18/cve-2024-20401-cve-2024-20419/
-
Hackers are actively exploiting PHP RCE vulnerability (CVE-2024-4577)
A critical vulnerability in PHP, designated CVE-2024-4577, has become a prime target for cybercriminals within a day of its public disclosure in June … First seen on securityonline.info Jump to article: securityonline.info/hackers-are-actively-exploiting-php-rce-vulnerability-cve-2024-4577/
-
Void Banshee exploits CVE-2024-38112 zero-day to spread malware
Void Banshee APT group exploited the Windows zero-day CVE-2024-38112 to execute code via the disabled Internet Explorer. An APT group tracked as Void … First seen on securityaffairs.com Jump to article: securityaffairs.com/165832/apt/void-banshee-cve-2024-38112-zero-day-attacks.html