Tag: flaw
-
Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk
A critical security flaw has been disclosed in the Microchip Advanced Software Framework (ASF) that, if successfully exploited, could lead to remote c… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/critical-flaw-in-microchip-asf-exposes.html
-
Critical NVIDIA Container Toolkit flaw could allow access to the underlying host
A critical vulnerability in the NVIDIA Container Toolkit could allow a container to escape and gain full access to the underlying host. Critical vulne… First seen on securityaffairs.com Jump to article: securityaffairs.com/169090/uncategorized/nvidia-container-toolkit-critical-flaw.html
-
Flaw in Kia’s web portal let researchers track, hack cars
Tags: flawFirst seen on arstechnica.com Jump to article: arstechnica.com/
-
Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware
A suspected advanced persistent threat (APT) originating from China targeted a government organization in Taiwan, and possibly other countries in the … First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/chinese-hackers-exploit-geoserver-flaw.html
-
Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw
Cybersecurity researchers are warning about active exploitation attempts targeting a newly disclosed security flaw in Synacor’s Zimbra Collaboration.E… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/researchers-sound-alarm-on-active.html
-
GitLab Patches: Severe SAML Authentication Bypass Flaw Fixed
A critical SAML authentication bypass flaw was recently identified in GitLab’s Community Edition (CE) and Enterprise Edition (EE). As of now, GitLab p… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/gitlab-patches-severe-saml-authentication-bypass-flaw-fixed/
-
Critical flaw in NVIDIA Container Toolkit allows full host takeover
A critical vulnerability in NVIDIA Container Toolkit impacts all AI applications in a cloud or on-premise environment that rely on it to access GPU re… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-flaw-in-nvidia-container-toolkit-allows-full-host-takeover/
-
Progress Software fixed 2 new critical flaws in WhatsUp Gold
Progress Software addresses six new security vulnerabilities affecting its WhatsUp Gold, two of them are rated as critical severity. Progress Software… First seen on securityaffairs.com Jump to article: securityaffairs.com/169056/security/progress-software-whatsup-gold-critical-bugs.html
-
Week in review: Windows Server 2025 gets hotpatching option, PoC for SolarWinds WHD flaw released
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Windows Server 2025 gets hotpatching option, without… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/29/week-in-review-windows-server-2025-gets-hotpatching-option-poc-for-solarwinds-whd-flaw-released/
-
Linux Distros Patching Printer Hijacking Flaw
Exploitation Requires Victim to Print On Rogue Printer. Attackers can exploit a series of vulnerabilities in the OpenPrinting Common Unix Printing Sys… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/linux-distros-patching-printer-hijacking-flaw-a-26404
-
CUPS flaws enable Linux remote code execution, but there’s a catch
Under certain conditions, attackers can chain a set of vulnerabilities in multiple components of the CUPS open-source printing system to execute arbit… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cups-flaws-enable-linux-remote-code-execution-but-theres-a-catch/
-
Kia dealer portal flaw could let attackers hack millions of cars
A group of security researchers discovered critical flaws in Kia’s dealer portal that could let hackers locate and steal millions of Kia cars made aft… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/kia-dealer-portal-flaw-could-let-attackers-hack-millions-of-cars/
-
Critical Ivanti Cloud Appliance Vulnerability Exploited in Active Cyberattacks
Ivanti has revealed that a critical security flaw impacting Cloud Service Appliance (CSA) has come under active exploitation in the wild.The new vulne… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/critical-ivanti-cloud-appliance.html
-
CUPS flaws allow remote code execution on Linux systems under certain conditions
A researcher has disclosed details of an unpatched Linux vulnerability, initially labeled as critical, that allows remote code execution. The popular … First seen on securityaffairs.com Jump to article: securityaffairs.com/169001/hacking/cups-flaws-allow-rce-on-linux-systems.html
-
OpenPrinting CUPS Flaws Hit Major Linux Distributions
First seen on scworld.com Jump to article: www.scworld.com/brief/openprinting-cups-flaws-hit-major-linux-distributions
-
Major Linux distributions hit by OpenPrinting CUPS flaws
First seen on scworld.com Jump to article: www.scworld.com/brief/major-linux-distributions-hit-by-openprinting-cups-flaws
-
Hacking Kia cars made after 2013 using just their license plate
Researchers discovered critical flaws in Kia’s dealer portal that could allow to hack Kia cars made after 2013 using just their license plate. In June… First seen on securityaffairs.com Jump to article: securityaffairs.com/168966/hacking/hacking-kia-cars-made-after-2013.html
-
Critical RCE vulnerability found in OpenPLC
Cisco’s Talos reported critical and high-severity flaws in OpenPLC that could lead to DoS condition and remote code execution. Cisco’s Talos threat in… First seen on securityaffairs.com Jump to article: securityaffairs.com/168953/ics-scada/openplc-critical-flaw.html
-
Ivanti vTM flaw added to Known Exploited Vulnerabilities catalog
First seen on scworld.com Jump to article: www.scworld.com/news/ivanti-vtm-flaw-added-to-known-exploited-vulnerabilities-catalog
-
HPE Aruba Networking fixes critical flaws impacting Access Points
HPE Aruba Networking has fixed three critical vulnerabilities in the Command Line Interface (CLI) service of its Aruba Access Points, which could let … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hpe-aruba-networking-fixes-three-critical-rce-flaws-impacting-its-access-points/
-
Significant automatic tank gauge flaws most severely impact US critical infrastructure
First seen on scworld.com Jump to article: www.scworld.com/brief/significant-automatic-tank-gauge-flaws-most-severely-impact-us-critical-infrastructure
-
Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than Expected
A researcher has disclosed the details of an unpatched vulnerability that was expected to pose a serious threat to many Linux systems. The post Highly… First seen on securityweek.com Jump to article: www.securityweek.com/highly-anticipated-linux-flaw-allows-remote-code-execution-but-less-serious-than-expected/
-
GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions
GitLab has released patches to address a critical flaw impacting Community Edition (CE) and Enterprise Edition (EE) that could result in an authentica… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/gitlab-patches-critical-saml.html
-
Memory-Safe Coding Cuts Android System Flaws by 75%
Google Says Rust Language Initiative Eliminates Cross-Site Scripting, Other Flaws. Google says switching to a memory-safe language such as Rust under … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/memory-safe-coding-cuts-android-system-flaws-by-75-a-26391
-
Critical Nvidia Security Flaw Exposes Cloud AI Systems to Host Takeover
Nvidia confirms risk of code execution, denial of service, escalation of privileges, information disclosure, and data tampering. CVSS 9/10. The post C… First seen on securityweek.com Jump to article: www.securityweek.com/critical-nvidia-container-flaw-exposes-cloud-ai-systems-to-host-takeover/
-
Vulnerability Recap 9/16/24 Critical Endpoint Flaws Emerged
Recent vulnerability news covered critical flaws affecting major businesses and end users. Explore the latest security updates to ensure you’re protec… First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-september-16-2024/
-
Critical Nvidia Container Flaw Exposes Cloud AI Systems to Host Takeover
Nvidia confirms risk of code execution, denial of service, escalation of privileges, information disclosure, and data tampering. CVSS 9/10. The post C… First seen on securityweek.com Jump to article: www.securityweek.com/critical-nvidia-container-flaw-exposes-cloud-ai-systems-to-host-takeover/
-
Google sees 68% drop in Android memory safety flaws over 5 years
The percentage of Android vulnerabilities caused by memory safety issues has dropped from 76% in 2019 to only 24% in 2024, representing a massive decr… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-sees-68-percent-drop-in-android-memory-safety-flaws-over-5-years/