Tag: cve
-
CISA Announces CVE Enrichment Project ‘Vulnrichment’
CISA’s Vulnrichment project is adding important information to CVE records to help improve vulnerability management processes. The post Vulnrichment … First seen on securityweek.com Jump to article: www.securityweek.com/cisa-announces-cve-enrichment-project-vulnrichment/
-
F5 fixes BIG-IP Next Central Manager flaws with public PoCs (CVE-2024-21793, CVE-2024-26026)
Eclypsium researchers have published details and PoC exploits for two remotely exploitable injection vulnerabilities (CVE-2024-21793, CVE-2024-26026) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/09/cve-2024-21793-cve-2024-26026/
-
CISA starts CVE >>vulnrichment<< program
The US Cybersecurity and Infrastructure Agency (CISA) has announced the creation of >>Vulnrichment,
-
VPN-Leak: TunnelVision über Schwachstelle CVE-2024-3661
Sicherheitsforscher haben eine neue, als TunnelVision bezeichnete Angriffsmethode auf VPN-Verbindungen offen gelegt. Der Angriff ermöglicht es, einen … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/05/07/vpn-leak-tunnelvision-ber-schwachstelle-cve-2024-3661/
-
Most Tinyproxy Instances are potentially vulnerable to flaw CVE-2023-49606
A critical Remote Code Execution vulnerability in the Tinyproxy service potentially impacted 50,000 Internet-Exposing hosts. Researchers from Cisco Ta… First seen on securityaffairs.com Jump to article: securityaffairs.com/162866/hacking/tinyproxy-rce.html
-
Google Chrome Zero-day Exploited in the Wild, Patch Now
Google has urgently updated its Chrome browser across all platforms after a critical vulnerability, identified as CVE-2024-4671, was found being activ… First seen on gbhackers.com Jump to article: gbhackers.com/chrome-zero-day-exploited/
-
Attackers may be using TunnelVision to snoop on users’ VPN traffic (CVE-2024-3661)
Researchers have brought to light a new attack method dubbed TunnelVision and uniquely identified as CVE-2024-3661 that can be used to intercept and… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/08/tunnelvision-cve-2024-3661/
-
VPN-Leak: TunnelVision über Schwachstelle CVE-2024-3661
Sicherheitsforscher haben eine neue, als TunnelVision bezeichnete Angriffsmethode auf VPN-Verbindungen offen gelegt. Der Angriff ermöglicht es, einen … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/05/07/vpn-leak-tunnelvision-ber-schwachstelle-cve-2024-3661/
-
CrushFTP Vulnerability Exploited in Wild to Execute Remote Code
A critical vulnerability in CrushFTP, identified as CVE-2024-4040, has been actively exploited in the wild. It allows attackers to perform unauthentic… First seen on gbhackers.com Jump to article: gbhackers.com/crushftp-vulnerability-exploited/
-
Veeam RCE Flaws Let Hackers Gain Access To VSPC Servers
Veeam Service Provider console has been discovered with two critical vulnerabilities that were associated with Remote Code Execution. A CVE for these … First seen on gbhackers.com Jump to article: gbhackers.com/veeam-rce-flaws-vspc-servers/
-
Week in review: PoCs allow persistence on Palo Alto firewalls, Okta credential stuffing attacks
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Palo Alto firewalls: CVE-2024-3400 exploitation and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/05/week-in-review-pocs-allow-persistence-on-palo-alto-firewalls-okta-credential-stuffing-attacks/
-
R Programming Bug Exposes Orgs to Vast Supply Chain Risk
The CVE-2024-27322 security vulnerability in R’s deserialization process gives attackers a way to execute arbitrary code in target environments via sp… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/r-programming-language-exposes-orgs-to-supply-chain-risk
-
Flaws in legacy D-Link NAS devices under attack
Internet scans show threat actors are targeting CVE-2024-3273 in thousands of end-of-life D-Link NAS devices and exploitation requires no authenticati… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366580153/Flaws-in-legacy-D-Link-NAS-devices-under-attack
-
Linksys Router Flaw Let Attackers Perform Command Injection, PoC Released
Linksys routers were discovered with two vulnerabilities: CVE-2024-33788 and CVE-2024-33789. These vulnerabilities were associated with Command Inject… First seen on gbhackers.com Jump to article: gbhackers.com/linksys-router-flaw-command-injection/
-
Tracking CVE-2024-2876: Why does the latest WordPress exploit compromise over 90,000 websites?
A highly concerning security loophole was recently discovered in a WordPress plugin called Email Subscribers by Icegram Express, a popular tool utiliz… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/tracking-cve-2024-2876-why-does-the-latest-wordpress-exploit-compromise-over-90000-websites/
-
Vulnerability of the Month Controversy of the JetBrains TeamCity CVE-2024-27198 CVE-2024-27199
This month we dive into CVE-2024-27198 for JetBrains TeamCity and the controversy surrounding the patching process that contributed to it being exploi… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/vulnerability-of-the-month-controversy-of-the-jetbrains-teamcity-cve-2024-27198-cve-2024-27199/
-
Military Tank Manual, 2017 Zero-Day Anchor Latest Ukraine Cyberattack
The targeted operation utilized CVE-2017-8570 as the initial vector and employed a notable custom loader for Cobalt Strike, yet attribution to any kno… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/military-tank-manual-zero-day-ukraine-cyberattack
-
Neue Warnung vor Schwachstelle CVE-2024-3400 in Palo Alto Networks Firewalls
Anfang April 2024 gab es bereits eine Warnung zu einer ungepatchte Sicherheitslücke (CVE-2024-3400) in der PAN-Firmware, die in Palo Alto Networks Fir… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/27/neue-warnung-vor-schwachstelle-cve-2024-3400-in-palo-alto-networks-firewalls/
-
Why cloud vulnerabilities need CVEs
When considering vulnerability management’s purpose in a modern world, it’s imperative to recognize the huge transition to new technologies and how yo… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/01/cve-vulnerability-management/
-
Windows Print-Spooler-Schwachstelle CVE-2022-38028 bevorzugtes Einfallstor russischer Angreifer
Die alte Print-Spooler-Schwachstelle CVE-2022-38028 in Windows ist wohl das bevorzugte Angriffsziel der russischen Hackergruppe Fancy Bear. Das hat di… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/23/windows-print-spooler-schwachstelle-cve-2022-38028-bevorzugtes-einfallstor-russischer-angreifer/
-
Mit CVE-Beschreibung: GPT-4 kann eigenständig bekannte Sicherheitslücken ausnutzen
Tags: cveForscher haben festgestellt, dass GPT-4 allein anhand der zugehörigen Schwachstellenbeschreibungen 13 von 15 Sicherheitslücken erfolgreich ausnutzen k… First seen on golem.de Jump to article: www.golem.de/news/mit-cve-beschreibung-gpt-4-kann-eigenstaendig-bekannte-sicherheitsluecken-ausnutzen-2404-184301.html
-
Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades
There are proof-of-concept techniques allowing attackers to achieve persistence on Palo Alto Networks firewalls after CVE-2024-3400 has been exploited… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/30/palo-alto-firewalls-persistence-cve-2024-3400-exploitation/
-
CVE-2024-27322 Vulnerability Found in R Programming Language
A critical vulnerability (CVE-2024-27322) in R programming language exposes systems to arbitrary code execution : OFFICIAL CVE-2024-27322 PATCHING INF… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/cve-2024-27322-vulnerability-found-in-r-programming-language/
-
Russia’s Fancy Bear Pummels Windows Print Spooler Bug
The infamous Russian threat actor has created a custom tool called GooseEgg to exploit CVE-2022-38028 in cyber-espionage attacks against targets in Uk… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/russia-fancy-bear-pummels-windows-print-spooler-bug
-
PoC Exploit Released For Windows Kernel EoP Vulnerability
Microsoft released multiple product security patches on their April 2024 Patch Tuesday updates. One of the vulnerabilities addressed was CVE-2024-2621… First seen on gbhackers.com Jump to article: gbhackers.com/windows-kernel-eop-exploit-released/
-
Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware
Threat actors are exploiting unpatched Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware.The attacks leverage CVE-2023-225… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-atlassian-flaw-exploited-to.html
-
Hackers Exploit Old Microsoft Office 0-day to Deliver Cobalt Strike
Hackers have leveraged an old Microsoft Office vulnerability, CVE-2017-8570, to deploy the notorious Cobalt Strike Beacon, targeting systems in Ukrain… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-exploit-old-microsoft-office/
-
Palo Alto Networks Shares Remediation Advice for Hacked Firewalls
Palo Alto Networks has issued urgent remediation advice after discovering a critical vulnerability, designated CVE-2024-3400, which threat actors have… First seen on gbhackers.com Jump to article: gbhackers.com/palo-alto-networks-shares-remediation-advice-for-hacked-firewalls/
-
Over 1,400 CrushFTP internet-facing servers vulnerable to CVE-2024-4040 bug
Over 1,400 CrushFTP internet-facing servers are vulnerable to attacks exploiting recently disclosed CVE-2024-4040 vulnerability. Over 1,400 CrushFTP i… First seen on securityaffairs.com Jump to article: securityaffairs.com/162319/hacking/crushftp-cve-2024-4040-vulnerable-servers.html
-
Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)
A state-sponsored threat actor has managed to compromise Cisco Adaptive Security Appliances (ASA) used on government networks across the globe and use… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/24/cve-2024-20353-cve-2024-20359/