Tag: cve
-
New OpenSSH CVE-2024-6409 Flaw Emerges
A week after the disclosure of the regreSSHion CVE-2024-6387 flaw in OpenSSH, researchers have found a related flaw (CVE-2024-6409) in some recent ver… First seen on duo.com Jump to article: duo.com/decipher/new-openssh-cve-2024-6409-flaw-emerges
-
Void Banshee APT exploited >>lingering Windows relic<< in zero-day attacks
The zero-day exploit used to leverage CVE-2024-38112, a recently patched Windows MSHTML vulnerability, was wielded by an APT group dubbed Void Banshee… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/16/cve-2024-38112-void-banshee/
-
Ransomware groups target Veeam Backup Replication bug
Multiple ransomware groups were spotted exploiting a vulnerability, tracked as CVE-2023-27532, in Veeam Backup & Replication. The vulnerability CV… First seen on securityaffairs.com Jump to article: securityaffairs.com/165753/malware/ransomware-groups-target-veeam-backup-replication-bug.html
-
Neue Sicherheitslücke CVE-2024-6409 – Schon wieder Schwachstelle in OpenSSH gefunden!
First seen on security-insider.de Jump to article: www.security-insider.de/neue-sicherheitsluecken-openssh-cve-2024-6409-cve-2024-6387-a-d440c27ea09facb360e465932b6160b4/
-
Apache HugeGraph Vulnerability Exploited in Wild
A recently patched Apache HugeGraph-Server vulnerability tracked as CVE-2024-27348 is being targeted in attacks. The post Apache HugeGraph Vulnerabili… First seen on securityweek.com Jump to article: www.securityweek.com/apache-hugegraph-vulnerability-exploited-in-wild/
-
Oracle Patches 240 Vulnerabilities With July 2024 CPU
Oracle releases 386 new security patches to resolve roughly 240 unique CVEs as part of its July 2024 Critical Patch Update. The post Oracle Patches 24… First seen on securityweek.com Jump to article: www.securityweek.com/oracle-patches-240-vulnerabilities-with-july-2024-cpu/
-
Critical Cellopoint Secure Email Gateway Flaw Let Attackers Execute Arbitrary Code
A critical vulnerability has been discovered in the Cellopoint Secure Email Gateway, identified as CVE-2024-6744. This flaw assigned a CVSS score of 9… First seen on gbhackers.com Jump to article: gbhackers.com/cellopoint-secure-email-gateway-flaw/
-
Act Now: Critical Apache HugeGraph Vulnerability Under Attack
A critical security vulnerability, CVE-2024-27348, has been identified in Apache HugeGraph-Server, posing a severe risk to organizations relying on th… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/hugegraph-vulnerability-cve-2024-27348/
-
APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer
The Void Banshee APT exploited the CVE-2024-38112 Windows zero-day to infect systems with the Atlantida stealer. The post APT Exploits Windows Zero-Da… First seen on securityweek.com Jump to article: www.securityweek.com/apt-exploits-windows-zero-day-to-execute-code-via-disabled-internet-explorer/
-
Patch-Tuesday Die Auswirkungen der Schwachstelle in Windows-Hyper-V sind enorm
Saeed Abbasi, Produktmanager, Vulnerability Research, Qualys Threat Research Unit (TRU) zum Patch Tuesday: ‘Die Auswirkungen von CVE-2024-38080, einer… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/07/10/patch-tuesday-die-auswirkungen-der-schwachstelle-in-windows-hyper-v-sind-enorm/
-
Hacker nutzen uralte Sicherheitslücke um Sicherheitsvorkehrungen auszuhebeln
Obwohl die Sicherheitslücke CVE-2015-2291 in Treibern von Intel bereits seit Jahren bekannt ist, nutzen Hacker sie bis heute aus, um Netzwerke zu komp… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/hacker-nutzen-uralte-sicherheitslucke-um-sicherheitsvorkehrungen-auszuhebeln
-
Microsoft Says Windows Not Impacted by regreSSHion as Second OpenSSH Bug Is Found
A second remote code execution vulnerability, tracked as CVE-2024-6409, was found in OpenSSH during an analysis of the regreSSHion flaw. The post Micr… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-windows-not-impacted-by-regresshion-as-second-openssh-bug-is-found/
-
How CVE-2022-24785 MomentJS Path Traversal Works: Detailed Exploit Guide
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36079/How-CVE-2022-24785-MomentJS-Path-Traversal-Works-Detailed-Exploit-Guide.html
-
Multiple threat actors exploit PHP flaw CVE-2024-4577 to deliver malware
Multiple threat actors exploit a recently disclosed security PHP flaw CVE-2024-4577 to deliver multiple malware families. The Akamai Security Intellig… First seen on securityaffairs.com Jump to article: securityaffairs.com/165586/hacking/php-flaw-cve-2024-4577-actively-exploited.html
-
VMware fixed critical SQL-Injection in Aria Automation product
VMware addressed a critical SQL-Injection vulnerability, tracked as CVE-2024-22280, impacting Aria Automation. Virtualization giant VMware addressed a… First seen on securityaffairs.com Jump to article: securityaffairs.com/165560/security/vmware-aria-automation-critical-sql-injection.html
-
A new flaw in OpenSSH can lead to remote code execution
A vulnerability affects some versions of the OpenSSH secure networking suite, it can potentially lead to remote code execution. The vulnerability CVE-… First seen on securityaffairs.com Jump to article: securityaffairs.com/165535/hacking/openssh-flaw-cve-2024-6409.html
-
Zero-day patched by Microsoft has been exploited by attackers for over a year (CVE-2024-38112)
CVE-2024-38112, a spoofing vulnerability in Windows MSHTML Platform for which Microsoft has released a fix on Tuesday, has likely been exploited by at… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/10/cve-2024-38112-cve-2024-38021/
-
Passwort Folge 5: Common Vulnerabilities and Exposures
Im Podcast von heise security diskutieren die Hosts das System der CVE-Nummern: Wie funktioniert die, wo klemmt es und warum will Linux das System kap… First seen on heise.de Jump to article: www.heise.de/news/Passwort-Folge-5-Common-Vulnerabilities-and-Exposures-9777933.html
-
Ghostscript Rendering Platform Vulnerability Let Attackers Execute Remote Code
A critical vulnerability has been discovered in the Ghostscript rendering platform, identified as CVE-2024-29510. This flaw, a format string vulnerabi… First seen on gbhackers.com Jump to article: gbhackers.com/ghostscript-rendering-vulnerability/
-
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
For July 2024 Patch Tuesday, Microsoft has released security updates and patches that fix 142 CVEs, including two exploited zero-days (CVE-2024-38080,… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/09/microsoft-fixes-two-zero-days-exploited-by-attackers-cve-2024-38080-cve-2024-38112/
-
Critical Ghostscript flaw exploited in the wild. Patch it now!
Threat actors are exploiting Ghostscript vulnerability CVE-2024-29510 to bypass the sandbox and achieve remote code execution. Threat actors are activ… First seen on securityaffairs.com Jump to article: securityaffairs.com/165449/hacking/ghostscript-vulnerability-cve-2024-29510.html
-
Apache fixed a source code disclosure flaw in Apache HTTP Server
The Apache Foundation addressed a critical source code disclosure vulnerability, tracked as CVE-2024-39884, in the HTTP Server. The Apache Software Fo… First seen on securityaffairs.com Jump to article: securityaffairs.com/165422/security/apache-source-code-disclosure-flaw-apache-http-server.html
-
MSI Center: Schwachstelle CVE-2024-37726 ermöglicht System-Privilegien
Noch eine kurze Meldung für Windows-Nutzer die das MSI Center von Micro-Star International auf ihrem System installiert haben. Es gibt eine Local Priv… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/07/06/msi-center-schwachstelle-cve-2024-37726-ermglicht-system-privilegien/
-
Check Point discovers vulnerability tied to VPN attacks
While Check Point identified CVE-2024-24919 as the root cause behind recent attack attempts on its VPN products, it’s unclear if threat actors gained … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366586616/Check-Point-discovers-vulnerability-tied-to-VPN-attacks
-
99% of IoT exploitation attempts rely on previously known CVEs
The explosion of Internet of Things (IoT) devices has brought about a wide range of security and privacy challenges, according to Bitdefender and NETG… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/05/iot-security-privacy-challenges/
-
RegreSSHion-Sicherheitslücke CVE-2024-6387 – Millionen Linux-Systeme sind über OpenSSH angreifbar
First seen on security-insider.de Jump to article: www.security-insider.de/qualys-entdeckt-sicherheitsluecke-in-openssh-a-cf3ed0e947247c683611f2c3891b7713/
-
CVE-2024-6387: New OpenSSH RegreSSHion Vulnerability Gives Hackers Root Access on Linux Servers 700,000+ Linux Boxes Potentially at Risk
Labeled as CVE-2024-6387, the recently discovered vulnerability in OpenSSH has become a serious cause for concern among Linux servers. OpenSSH is a co… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/cve-2024-6387-new-openssh-regresshion-vulnerability-gives-hackers-root-access-on-linux-servers-700000-linux-boxes-potentially-at-risk/
-
regreSSHion: Kritische OpenSSH Server-Schwachstelle CVE-2024-6387
In OpenSSH-Server wurde eine kritische Schwachstelle CVE-2024-6387 offen gelegt. Die als regreSSHion bezeichnete Sicherheitslücke ermöglicht eine Remo… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/07/02/regresshion-kritische-openssh-server-schwachstelle-cve-2024-6387/
-
regreSSHion OpenSSH Flaw: Potential Exploitation Attempts Seen, but Mass Attacks Unlikely
The critical OpenSSH vulnerability tracked as regreSSHion and CVE-2024-6387 may already be targeted by attackers, but mass exploitation is unlikely. T… First seen on securityweek.com Jump to article: www.securityweek.com/regresshion-openssh-flaw-potential-exploitation-attempts-seen-but-mass-attacks-unlikely/