Tag: cve
-
CVE of the month, CheckPoint Security Gateway exploit CVE-2024-24919
This month we dive into CheckPoints CVE-2024-24919 to explain what this vulnerability does and why we have seen it being used in the wild already! The… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/cve-of-the-month-checkpoint-security-gateway-exploit-cve-2024-24919/
-
Exploit for Veeam Recovery Orchestrator auth bypass available, patch now
A proof-of-concept (PoC) exploit for a critical Veeam Recovery Orchestrator authentication bypass vulnerability tracked as CVE-2024-29855 has been rel… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/exploit-for-veeam-recovery-orchestrator-auth-bypass-available-patch-now/
-
Developing a Plan to Respond to Critical CVEs in Open Source Software
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/developing-plan-to-respond-to-critical-cves-open-source-software
-
Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation
The zero-day is tagged as CVE-2024-32896 and described as an elevation of privilege issue in Pixel Firmware. The post -day is tagged as CVE-2024-32896… First seen on securityweek.com Jump to article: www.securityweek.com/google-warns-of-pixel-firmware-zero-day-under-limited-targeted-exploitation/
-
Hotel-Check-In-System: Schwachstelle CVE-2024-37364 in Ariane Allegro Scenario Player legt Daten offen
Wieder ein Sicherheitsproblem bei einem Hotel-Check-In-System, bei dem Daten von Hotelgästen offen werden konnten. Es reichte ein falsches Zeichen ein… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/10/hotel-check-in-system-schwachstelle-cve-2024-37364-in-ariane-allegro-scenario-player-legt-daten-offen/
-
Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day
The Black Basta ransomware gang may have exploited the Windows privilege escalation flaw CVE-2024-26169 before it was patched. The post k Basta ransom… First seen on securityweek.com Jump to article: www.securityweek.com/ransomware-group-may-have-exploited-windows-vulnerability-as-zero-day/
-
Expert released PoC exploit code for Veeam Backup Enterprise Manager flaw CVE-2024-29849. Patch it now!
A proof-of-concept (PoC) exploit code for a Veeam Backup Enterprise Manager authentication bypass flaw CVE-2024-29849 is publicly available. Researche… First seen on securityaffairs.com Jump to article: securityaffairs.com/164407/hacking/veeam-cve-2024-29849-poc.html
-
Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103)
June 2024 Patch Tuesday is here and Microsoft has delivered fixes for a critical MSMQ flaw (CVE-2024-30080) and a RCE vulnerability in Microsoft Outlo… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/11/cve-2024-30080-cve-2024-30103/
-
Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw
Microsoft has disclosed two Critical remote code execution vulnerabilities in MSMQ (Microsoft Message Queuing) and the Windows Wi-Fi Driver. The CVE f… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-message-queuing-rce-flaw/
-
CVE-2024-29824 Deep Dive: Ivanti EPM SQL Injection Remote Code Execution Vulnerability
Introduction Ivanti Endpoint Manager (EPM) is an enterprise endpoint management solution that allows for centralized management of devices within an o… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/cve-2024-29824-deep-dive-ivanti-epm-sql-injection-remote-code-execution-vulnerability/
-
TellYouThePass ransomware exploits recent PHP RCE flaw to breach servers
The TellYouThePass ransomware gang has been exploiting the recently patched CVE-2024-4577 remote code execution vulnerability in PHP to deliver webshe… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/tellyouthepass-ransomware-exploits-recent-php-rce-flaw-to-breach-servers/
-
Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’
Apple has released a visionOS update that patches CVE-2024-27812, which may be the first flaw specific to the VR headset. The post s released a vision… First seen on securityweek.com Jump to article: www.securityweek.com/apple-patches-vision-pro-vulnerability-used-in-first-ever-spatial-computing-hack/
-
Arm Warns of Exploited Kernel Driver Vulnerability
Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks. The post s that CVE-2024-4610, … First seen on securityweek.com Jump to article: www.securityweek.com/arm-warns-of-exploited-kernel-driver-vulnerability/
-
Exploit for critical Veeam auth bypass available, patch now
A proof-of-concept (PoC) exploit for a Veeam Backup Enterprise Manager authentication bypass flaw tracked as CVE-2024-29849 is now publicly available,… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/exploit-for-critical-veeam-auth-bypass-available-patch-now/
-
PHP Patches Critical Remote Code Execution Vulnerability
PHP has released patches for CVE-2024-4577, a critical vulnerability that could lead to arbitrary code execution on remote servers. The post released … First seen on securityweek.com Jump to article: www.securityweek.com/php-patches-critical-remote-code-execution-vulnerability/
-
CVE-2024-29849: Veeam discloses Critical Vulnerability that allows attackers to bypass user authentication on its Backup Enterprise Manager web interface
On May 21, 2024, Veeam revealed a severe flaw across its Veeam Backup Enterprise Manager (VBEM) web interface that enables an unauthenticated attacker… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/cve-2024-29849-veeam-discloses-critical-vulnerability-that-allows-attackers-to-bypass-user-authentication-on-its-backup-enterprise-manager-web-interface/
-
Chinese threat actor exploits old ThinkPHP flaws since October 2023
Akamai observed a Chinese-speaking group exploiting two flaws, tracked as CVE-2018-20062 and CVE-2019-9082, in ThinkPHP applications. Akamai researche… First seen on securityaffairs.com Jump to article: securityaffairs.com/164239/hacking/hackers-exploits-old-thinkphp-flaws.html
-
Hackers exploit 2018 ThinkPHP flaws to install ‘Dama’ web shells
Chinese threat actors are targeting ThinkPHP applications vulnerable to CVE-2018-20062 and CVE-2019-9082 to install a persistent web shell named Dama…. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-2018-thinkphp-flaws-to-install-dama-web-shells/
-
Zyxel patches critical flaws in EOL NAS devices
Zyxel has released patches for three critical vulnerabilities (CVE-2024-29972, CVE-2024-29973, and CVE-2024-29974) affecting two network-attached stor… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/06/cve-2024-29972-cve-2024-29973-cve-2024-29974/
-
BSI-Warnung vor Schwachstelle CVE-2024-24919 in Check Point Security Gateways; Einfallstor für CDU-Hack?
Ich nehme alles zurück und behaupte das Gegenteil. Gerade ist mir eine Warnung des Bundesamts für Sicherheit in der Informationstechnik (BSI) unter di… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/03/bsi-warnung-vor-schwachstelle-cve-2024-24919-in-check-point-security-gateways-einfallstor-fr-cdu-hack/
-
PoC for Progress Telerik RCE chain released (CVE-2024-4358, CVE-2024-1800)
Security researchers have published a proof-of-concept (PoC) exploit that chains together two vulnerabilities (CVE-2024-4358, CVE-2024-1800) to achiev… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/04/cve-2024-4358-cve-2024-1800-poc/
-
Why CVEs Are an Incentives Problem
It’s time to rethink the pivotal role incentives play in shaping behavior to find and disclose software vulnerabilities. More accurate guidance to ref… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/why-cves-are-an-incentives-problem
-
CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability
CISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog. The post added an old Oracle WebLo… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-attacks-exploiting-old-oracle-weblogic-vulnerability/
-
Check Point VPN zero-day exploited since beginning of April (CVE-2024-24919)
Attackers have been exploiting CVE-2024-24919, a zero-day vulnerability in Check Point Security Gateways, to pinpoint and extract password hashes for … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/31/cve-2024-24919/
-
Check Point Remote VPN Sicherheitsupdate für CVE-2024-24919
In Check Point Remote Access VPN gibt es eine Schwachstelle CVE-2024-24919, die von Angreifern seit Ende April 2024 für Angriffe verwendet wird. Diese… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/05/31/check-point-remote-vpn-sicherheitsupdate-fr-cve-2024-24919/
-
CISA Warns of Exploited Linux Kernel Vulnerability
CISA instructs federal agencies to mitigate CVE-2024-1086, a Linux kernel flaw leading to privilege escalation. The post tructs federal agencies to mi… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-exploited-linux-kernel-vulnerability/
-
Top 5 CVEs and Vulnerabilities of May 2024
May brought a fresh batch of security headaches. This month, we’re focusing on critical vulnerabilities in widely used software like Apache, Gitlab, a… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/top-5-cves-and-vulnerabilities-of-may-2024/
-
Progress Telerik Report Server Flaw Let Attackers Bypass Authentication
A new vulnerability related to authentication bypass was discovered in the Progress Telerik Report server. The CVE for this vulnerability has been ass… First seen on gbhackers.com Jump to article: gbhackers.com/progress-telerik-report-server/
-
RedTail Cryptominer Evolves with Palo Alto PAN-OS CVE-2024-3400 Vulnerability
The operators of RedTail cryptominer, which was the biggest cryptominer operation last year, have now started to take advantage of the Palo Alto PAN-O… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/redtail-cryptominer/
-
Schwachstellen im ZScaler Client-Connector
Noch eine kurze Information für Leser, die den Client-Connector von ZScaler in ihrer Umgebung einsetzen. Dort sind gleich drei Schwachstellen CVE-2023… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/05/28/schwachstellen-im-zscaler-client-connector/