Tag: cve
-
CVE of the month, the supply chain attack hidden for 10 years CVE-2024-38368
For over a decade, a massive vulnerability that could have unleashed a huge supply chain attack lay dormant. Luckily the good guys found it first or s… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/cve-of-the-month-the-supply-chain-attack-hidden-for-10-years-cve-2024-38368/
-
RegreSSHion CVE-2024-6387: A Targeted Exploit in the Wild
A critical security flaw, known as regression and cataloged under CVE-2024-6387, has been identified in OpenSSH, just a few days ago. This vulnerabili… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/regresshion-cve-2024-6387-a-targeted-exploit-in-the-wild/
-
Threat actors actively exploit D-Link DIR-859 router flaw CVE-2024-0769
Experts spotted threat actors exploiting the critical vulnerability CVE-2024-0769 affects all D-Link DIR-859 WiFi routers. Researchers from cybersecur… First seen on securityaffairs.com Jump to article: securityaffairs.com/165045/hacking/d-link-dir-859-actively-exploited.html
-
Water Sigbin Exploiting Oracle WebLogic Server Flaw
Water Sigbin (8220 Gang) exploits vulnerabilities (CVE-2017-3506, CVE-2023-21839) in Oracle WebLogic servers to deliver cryptocurrency miners using Po… First seen on gbhackers.com Jump to article: gbhackers.com/water-sigbin-exploiting-oracle/
-
Dev rejects CVE severity, makes his GitHub repo read-only
The popular open source project, ‘ip’ had its GitHub repository archived, or made read-only by its developer as a result of a dubious CVE report filed… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dev-rejects-cve-severity-makes-his-github-repo-read-only/
-
A Playbook for Detecting the OpenSSH Vulnerability CVE-2024-6387 regreSSHion
The Qualys Threat Research Unit has discovered a new high severity signal handler race condition vulnerability in OpenSSH’s server software (sshd). Ac… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/a-playbook-for-detecting-the-openssh-vulnerability-cve-2024-6387-regresshion/
-
Millions of OpenSSH Servers Potentially Vulnerable to Remote regreSSHion Attack
Millions of OpenSSH servers could be vulnerable to unauthenticated remote code execution due to a vulnerability tracked as regreSSHion and CVE-2024-63… First seen on securityweek.com Jump to article: www.securityweek.com/millions-of-openssh-servers-potentially-vulnerable-to-remote-regresshion-attack/
-
Juniper Networks Issues Critical Patch for Router Vulnerability, CVE-2024-2973
Juniper Networks has urgently released security updates to address a critical vulnerability affecting some of its routers, identified as CVE-2024-2973… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/juniper-networks-router-vulnerability/
-
Microsoft Active Directory Netlogon Elevation of Privilege CVE-2020-1472
Summary On August 11th, 2020 Microsoft publicly disclosed the existence of a critical severity Elevation of Priviledge (EOP) vulnerability that impact… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2020/08/12/microsoft-active-directory-netlogon-elevation-of-privilege-cve-2020-1472/
-
Progress MOVEit Transfer: Angriffe auf Schwachstelle CVE-2024-5806
In der Software Progress MOVEit Transfer wurde kürzlich die Schwachstelle CVE-2024-5806 bekannt. Bereits kurz nach Veröffentlichung dieser Information… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/26/progress-moveit-transfer-angriffe-auf-schwachstelle-cve-2024-5806/
-
Critical Vulnerability in MOVEit Transfer Let Hackers Gain Files Access
A critical security vulnerability, CVE-2024-5806, has been identified in MOVEit Transfer, a widely used managed file transfer software. The vulnerabil… First seen on gbhackers.com Jump to article: gbhackers.com/authentication-bypass-vulnerability-in-moveit-transfer/
-
Progress quietly fixes MOVEit auth bypass flaws (CVE-2024-5805, CVE-2024-5806)
Progress Software has patched one critical (CVE-2024-5805) and one high-risk (CVE-2024-5806) vulnerability in MOVEit, its widely used managed file tra… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/25/cve-2024-5805-cve-2024-5806/
-
Exploitation Attempts Target New MOVEit Transfer Vulnerability
Exploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started. The post tion attempts targeti… First seen on securityweek.com Jump to article: www.securityweek.com/exploitation-attempts-target-new-moveit-transfer-vulnerability/
-
Mailcow Patches Critical XSS and File Overwrite Flaws Update NOW
lcow email servers faced critical vulnerabilities (CVE-2024-31204 and CVE-2024-30270) allowing potential remote code execution. Update to Mailcow 2024… First seen on hackread.com Jump to article: hackread.com/mailcow-patches-critical-xss-file-overwrite-flaws/
-
CosmicSting: Schwachstelle CVE-2024-34102 gefährdet Adobe Commerce- und Magento-Shops
Kleiner Nachtrag von letzter Woche. Seit Mitte des Monats ist bekannt, dass in Adobe Commerce- und Magento-Online-Shops die Schwachstelle CVE-2024-341… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/24/cosmicsting-schwachstelle-cve-2024-34102-gefhrdet-adobe-commerce-und-magento-shops/
-
Threat actors are actively exploiting SolarWinds Serv-U bug CVE-2024-28995
Threat actors are actively exploiting a recently discovered vulnerability in SolarWinds Serv-U software using publicly available proof-of-concept (PoC… First seen on securityaffairs.com Jump to article: securityaffairs.com/164806/hacking/solarwinds-serv-u-cve-2024-28995-exploit.html
-
PrestaShop Website Under Injection Attack Via Facebook Module
A critical vulnerability has been discovered in the >>Facebook
-
Mailcow Mail Server Vulnerability Let Attackers Execute Remote Code
Two critical vulnerabilities (CVE-2024-31204 and CVE-2024-30270) affecting Mailcow versions before 2024-04 allow attackers to execute arbitrary code o… First seen on gbhackers.com Jump to article: gbhackers.com/mailcow-mail-server-remote-code-execution/
-
Phoenix UEFI vulnerability impacts hundreds of Intel PC models
A newly discovered vulnerability in Phoenix SecureCore UEFI firmware tracked as CVE-2024-0762 impacts devices running numerous Intel CPUs, with Lenovo… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/phoenix-uefi-vulnerability-impacts-hundreds-of-intel-pc-models/
-
Kritische Schwachstelle CVE-2024-38428 in wget
Im Kommandozeilenprogramm wget gibt es eine kritische Schwachstelle, die mit dem CVSS Base Score 10.0 bewertet wird. CERT-Bund warnt vor der Schwachst… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/18/kritische-schwachstelle-cve-2024-38428-in-wget-dringend-handeln/
-
Phoenix SecureCore UEFI Flaw Exposes Intel Processors to ‘UEFIcanhazbufferoverflow'<< Vulnerability
A newly discovered vulnerability, CVE-2024-0762, dubbed UEFIcanhazbufferoverflow, has recently come to light in the Phoenix SecureCore UEFI firmware, … First seen on thecyberexpress.com Jump to article: thecyberexpress.com/ueficanhazbufferoverflow-vulnerability/
-
CVE-2024-3080: ASUS warns Customers about the latest Authentication Bypass Vulnerability detected Across seven Router Models
ASUS announces major Firmware Update ASUS recently issued a firmware update to resolve a critical security vulnerability affecting seven different var… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/cve-2024-3080-asus-warns-customers-about-the-latest-authentication-bypass-vulnerability-detected-across-seven-router-models/
-
Broadcom Advises Urgent Patch for Severe VMware vCenter Server Vulnerabilities
tical security vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081) found in VMware vCenter Server! Patch immediately to safeguard virtual… First seen on hackread.com Jump to article: hackread.com/broadcom-patch-vmware-vcenter-server-vulnerabilities/
-
Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability
Hundreds of PC and server models may be affected by CVE-2024-0762, a privilege escalation and code execution flaw in Phoenix SecureCore UEFI firmware…. First seen on securityweek.com Jump to article: www.securityweek.com/hundreds-of-pc-server-models-possibly-affected-by-serious-phoenix-uefi-vulnerability/
-
Critical PHP Flaw CVE-2024-4577 Patched
A critical remote code execution bug (CVE-2024-4577) in all versions of PHP on Windows has been patched. The bug also affects all Windows versions of … First seen on duo.com Jump to article: duo.com/decipher/critical-php-flaw-cve-2024-4577-patched
-
Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers
Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.Tracked as CVE-2024-4… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/arm-warns-of-actively-exploited-zero.html
-
Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080)
VMware by Broadcom has fixed two critical vulnerabilities (CVE-2024-37079, CVE-2024-37080) affecting VMware vCenter Server and products that contain i… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/18/cve-2024-37079-cve-2024-37080/
-
Outlook-Schwachstelle CVE-2024-30103 ermöglicht Remote-Code-Ausführung; Patch im Juni 2024
Mit den Sicherheitsupdates vom 11. Juni 2024 hat Microsoft auch eine kritische Schwachstelle in Microsoft Outlook geschlossen. Die Schwachstelle CVE-2… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/15/outlook-schwachstelle-cve-2024-30103-ermglicht-remote-code-ausfhrung-patch-im-juni-2024/
-
Exploit Attempts Against Check Point CVE-2024-24919 On the Rise
First seen on duo.com Jump to article: duo.com/decipher/exploit-attempts-against-check-point-cve-2024-24919-on-the-rise
-
0-day Vulnerability In 10,000 Web Apps Exploited Using XSS Payloads
A significant vulnerability, tracked as CVE-2024-37629, has been discovered in SummerNote 0.8.18. It allows Cross-Site Scripting (XSS) via the Code Vi… First seen on gbhackers.com Jump to article: gbhackers.com/0day-vulnerability-xss-payloads/