Tag: flaw
-
Audio-based iOS, iPadOS flaws addressed by Apple
First seen on scworld.com Jump to article: www.scworld.com/brief/audio-based-ios-ipados-flaws-addressed-by-apple
-
iPhone Mirroring Flaw Could Expose Employee Personal Information
A flaw in Apple’s mirroring feature within the iOS 18 and macOS Sequoia software updates compromises personal privacy when used on work Macs, accordin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/iphone-mirroring-flaw-could-expose-employee-personal-information/
-
Critical Apache Avro SDK RCE flaw impacts Java applications
A critical vulnerability in the Apache Avro Java Software Development Kit (SDK) could be exploited to execute arbitrary code on vulnerable instances. … First seen on securityaffairs.com Jump to article: securityaffairs.com/169469/security/apache-avro-java-sdk-critical-flaw.html
-
NIST’s Security Flaw Database Still Backlogged With 17k+ Unprocessed Bugs. Not Great
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36421/NISTs-Security-Flaw-Database-Still-Backlogged-With-17k-Unprocessed-Bugs.-Not-Great.html
-
14 DrayTek Vulns Patched, Including RCE Flaw
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36424/14-DrayTek-Vulns-Patched-Including-RCE-Flaw.html
-
Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/litespeed-cache-plugin-flaw-allows/
-
Progress Software Releases Patches for 6 Flaws in WhatsUp Gold Patch Now
Progress Software has released another round of updates to address six security flaws in WhatsUp Gold, including two critical vulnerabilities.The issu… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/progress-software-releases-patches-for.html
-
Critical Linux CUPS Printing System Flaws Could Allow Remote Command Execution
A new set of security vulnerabilities has been disclosed in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems that could permit rem… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/critical-linux-cups-printing-system.html
-
Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers
A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/critical-nvidia-container-toolkit.html
-
Hackers Exploit Ivanti Endpoint Manager Flaw, Are You at Risk?
The Cybersecurity and Infrastructure Security Agency (CISA) has alerted organizations about an active exploitation of a vulnerability in Ivanti Endpoi… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/critical-ivanti-vulnerability-cve-2024-29824/
-
Google Addresses Critical Baseband Flaws, Strengthens Pixel Defenses
Google recently addressed a flaw within cellular modem vulnerabilities that can pose risk to smartphone users. The cellular baseband is responsible fo… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cellular-modem-vulnerabilities/
-
WordPress LiteSpeed Cache plugin flaw could allow site takeover
A high-severity flaw in the WordPress LiteSpeed Cache plugin could allow attackers to execute arbitrary JavaScript code under certain conditions. A hi… First seen on securityaffairs.com Jump to article: securityaffairs.com/169390/security/wordpress-litespeed-cache-plugin-flaw-site-takeover.html
-
Recently patched CUPS flaw can be used to amplify DDoS attacks
A recently disclosed vulnerability in the Common Unix Printing System (CUPS) open-source printing system can be exploited by threat actors to launch d… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/recently-patched-cups-flaw-can-be-used-to-amplify-ddos-attacks/
-
Kia Security Flaw Exposed, NIST’s New Password Guidelines
In this episode, the hosts discuss a significant vulnerability found in Kia’s web portal that allows remote control of various car features via their … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/kia-security-flaw-exposed-nists-new-password-guidelines/
-
Critical Ivanti Endpoint Manager flaw exploited (CVE-2024-29824)
CVE-2024-29824, an unauthenticated SQL Injection vulnerability in Ivanti Endpoint Manager (EPM) appliances, is being exploited by attackers, the Cyber… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/03/cve-2024-29824/
-
Ivanti warns critical flaws in Endpoint Manager exploited in the wild
First seen on scworld.com Jump to article: www.scworld.com/news/ivanti-warns-critical-flaws-in-endpoint-manager-exploited-in-the-wild
-
14 DrayTek vulnerabilities patched, including max-severity RCE flaw
First seen on scworld.com Jump to article: www.scworld.com/news/14-draytek-vulnerabilities-patched-including-max-severity-rce-flaw
-
Attacks Exploit Critical Zimbra Email Server Flaw
First seen on scworld.com Jump to article: www.scworld.com/brief/attacks-exploit-critical-zimbra-email-server-flaw
-
Critical SQLi Flaw Targets Ivanti Endpoint Manager
First seen on scworld.com Jump to article: www.scworld.com/brief/critical-sqli-flaw-targets-ivanti-endpoint-manager
-
14 New DrayTek routers’ flaws impacts over 700,000 devices in 168 countries
Multiple flaws in DrayTek residential and enterprise routers can be exploited to fully compromise vulnerable devices. Forescout researchers discovered… First seen on securityaffairs.com Jump to article: securityaffairs.com/169267/security/draytek-routers-flaws-impacts-700000-devices.html
-
Critical Zimbra Postjournal flaw CVE-2024-45519 actively exploited in the wild. Patch it now!
Threat actors attempt to exploit recently disclosed vulnerability CVE-2024-45519 in Synacor’s Zimbra Collaboration. Proofpoint cybersecurity researche… First seen on securityaffairs.com Jump to article: securityaffairs.com/169239/hacking/zimbra-postjournal-flaw-cve-2024-45519-exploited.html
-
SAP, D-Link flaws among 4 added to Known Exploited Vulnerabilities catalog
First seen on scworld.com Jump to article: www.scworld.com/news/sap-d-link-flaws-among-4-added-to-known-exploited-vulnerabilities-catalog
-
Critical Ivanti RCE flaw with public exploit now used in attacks
Tags: attack, cisa, endpoint, exploit, flaw, ivanti, rce, remote-code-execution, threat, vulnerabilityCISA warned today that a critical Ivanti vulnerability that can let threat actors gain remote code execution on vulnerable Endpoint Manager (EPM) appl… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-ivanti-rce-flaw-with-public-exploit-now-used-in-attacks/
-
ChatGPT macOS Flaw Could’ve Enabled Long-Term Spyware via Memory Function
A now-patched security vulnerability in OpenAI’s ChatGPT app for macOS could have made it possible for attackers to plant long-term persistent spyware… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/chatgpt-macos-flaw-couldve-enabled-long.html
-
Network switch RCE flaw impacts critical infrastructure
U.S. cybersecurity agency CISA is warning about two critical vulnerabilities that allow authentication bypass and remote code execution in Optigo Netw… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-network-switch-rce-flaw-impacts-critical-infrastructure/
-
Critical Zimbra RCE flaw exploited to backdoor servers using emails
Hackers are actively exploiting a recently disclosed RCE vulnerability in Zimbra email servers that can be triggered simply by sending specially craft… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-zimbra-rce-flaw-exploited-to-backdoor-servers-using-emails/
-
DrayTek fixed critical flaws in over 700,000 exposed routers
DrayTek has released security updates for multiple router models to address 14 vulnerabilities of varying severity, including a remote code execution … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/draytek-fixed-critical-flaws-in-over-700-000-exposed-routers/
-
CISA Flags Critical Ivanti vTM Vulnerability Amid Active Exploitation Concerns
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager (v… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/cisa-flags-critical-ivanti-vtm.html
-
Critical Zimbra RCE flaw actively exploited to take over servers
Hackers are actively exploiting a recently disclosed RCE vulnerability in Zimbra email servers that can be triggered simply by sending specially craft… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-zimbra-rce-flaw-actively-exploited-to-take-over-servers/
-
Volt Typhoon exploiting Versa Director zero-day flaw
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366609294/Volt-Typhoon-exploiting-Versa-Director-zero-day-flaw