Tag: flaw
-
Critical Flaw in Donation Plugin Exposed 100,000 WordPress Sites to Takeover
A critical vulnerability in the GiveWP WordPress plugin could be exploited for remote code execution and arbitrary file deletion. The post Critical Fl… First seen on securityweek.com Jump to article: www.securityweek.com/critical-flaw-in-donation-plugin-exposed-100000-wordpress-sites-to-takeover/
-
FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability
The maintainers of the FreeBSD Project have released security updates to address a high-severity flaw in OpenSSH that attackers could potentially expl… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/freebsd-releases-urgent-patch-for-high.html
-
Researchers Uncover 10 Flaws in Google’s File Transfer Tool Quick Share
As many as 10 security flaws have been uncovered in Google’s Quick Share data transfer utility for Android and Windows that could be assembled to trig… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/researchers-uncover-10-flaws-in-googles.html
-
Linux Kernal Vulnerability Let Attackers Bypass CPU Gain Read/Write Access
Researchers have uncovered a critical vulnerability within the Linux kernel’sdmam_free_coherent()function. This flaw, identified as CVE-2024-43856, st… First seen on gbhackers.com Jump to article: gbhackers.com/linux-kernal-vulnerability/
-
Microsoft Patched 6 Actively Exploited Zero-Day Flaws
Patch Tuesday brought updates for 90 security vulnerabilities, including patching severe remote code execution vulnerabilities and closing some doors … First seen on techrepublic.com Jump to article: www.techrepublic.com/article/microsoft-zero-day-vulnerabilities-exploited/
-
Week in review: MS Office flaw may leak NTLM hashes, malicious Chrome, Edge browser extensions
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unpatched MS Office flaw may leak NTLM hashes to att… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/18/week-in-review-ms-office-flaw-may-leak-ntlm-hashes-malicious-chrome-edge-browser-extensions/
-
Sonos Speaker Flaws Could Have Let Remote Hackers Eavesdrop on Users
Cybersecurity researchers have uncovered weaknesses in Sonos smart speakers that could be exploited by malicious actors to clandestinely eavesdrop on … First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/new-flaws-in-sonos-smart-speakers-allow.html
-
Microsoft Reveals Four OpenVPN Flaws Leading to Potential RCE and LPE
Microsoft on Thursday disclosed four medium-severity security flaws in the open-source OpenVPN software that could be chained to achieve remote code e… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-reveals-four-openvpn-flaws.html
-
Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers
Cybersecurity researchers have discovered multiple critical flaws in Amazon Web Services (AWS) offerings that, if successfully exploited, could result… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/experts-uncover-severe-aws-flaws.html
-
Vulnerability Recap 8/5/24 Already-Fixed Flaws Are Still Targeted
This week, some recently patched vulnerabilities got attention because they’re still being exploited, including Apache OfBiz and VMware eSXI hyperviso… First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-august-05-2024/
-
AMD Issues Updates for Silicon-Level ‘SinkClose’ Processor Flaw
The vulnerability has been around for nearly 20 years and gives sophisticated attackers a way to bury virtually undetectable bootkits on devices with … First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/amd-issues-updates-for-silicon-level-sinkclose-flaw
-
0.0.0.0 Day: 18-Year-Old Browser Flaw Affects Linux and macOS
Oligo Security’s research team recently uncovered a critical vulnerability dubbed the 0.0.0.0 Day affecting Chromium, Firefox, and Safari browsers on … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/0-0-0-0-day-18-year-old-browser-flaw-affects-linux-and-macos/
-
Progress discloses second critical flaw in Telerik Report Server in as many months
Tags: flawFirst seen on theregister.com Jump to article: www.theregister.com/2024/07/26/critical_vulnerability_progress_telerik/
-
BYOVDLL A New Exploit That Is Bypassing LSASS Protection
In July 2022, Microsoft patched a well-known PPL bypass flaw, initially discovered by Ionescu and Forshaw. This allowed protection circumvention witho… First seen on gbhackers.com Jump to article: gbhackers.com/byovdll-exploit-bypassing-lsass-protection/
-
Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw
Security experts are ratcheting up the urgency for Windows admins to patch a wormable, pre-auth remote code execution vulnerability in the Windows TCP… First seen on securityweek.com Jump to article: www.securityweek.com/zero-click-exploit-concerns-drive-urgent-patching-of-windows-tcp-ip-flaw/
-
Black Hat USA 2024: Chip Flaw ‘GhostWrite’ Steals Data from CPU Memory
First seen on hackread.com Jump to article: hackread.com/black-hat-usa-2024-chip-flaw-ghostwrite-data-cpu-memory/
-
A Flaw in Windows Update Opens the Door to Zombie Exploits
A researcher found a vulnerability that would let hackers strategically downgrade a target’s Windows version to reexpose patched vulnerabilities. Micr… First seen on wired.com Jump to article: www.wired.com/story/windows-update-downdate-exploit/
-
CVE-2024-21412 Used in DarkGate Malware Campaigns
A DarkGate malware campaign observed in mid-January 2024 has highlighted the exploitation of a recently patched security flaw in Microsoft Windows as … First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-21412-darkgate-malware/
-
Critical Security Flaw in WhatsUp Gold Under Active Attack – Patch Now
A critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly … First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/critical-security-flaw-in-whatsup-gold.html
-
Critical SolarWinds Web Help Desk flaw addressed
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/critical-solarwinds-web-help-desk-flaw-addressed
-
SolarWinds Addresses Critical Web Help Desk Flaw
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/solarwinds-addresses-critical-web-help-desk-flaw
-
Black Hat USA 2024: AWS ‘Bucket Monopoly’ Flaw Led to Account Takeover
First seen on hackread.com Jump to article: hackread.com/black-hat-usa-2024-aws-bucket-monopoly-account-takeover/
-
Breach Roundup: Microsoft’s August Patch Contains 90 Fixes
Also: Azure Health Bot Vulnerabilities Expose Risks in Cloud-Based Chatbots. This week, Microsoft released its August patch of 90 fixes, flaws were di… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-microsofts-august-patch-contains-90-fixes-a-26041
-
Attacks Leveraging Windows SmartScreen Bypass Flaw Deployed Since March
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/attacks-leveraging-windows-smartscreen-bypass-flaw-deployed-since-march
-
Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords
Cybersecurity researchers have disclosed details of security flaws in the Roundcube webmail software that could be exploited to execute malicious Java… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/roundcube-webmail-flaws-allow-hackers.html
-
Palo Alto Networks Patches Unauthenticated Command Execution Flaw in Cortex XSOAR
Palo Alto Networks has patched multiple vulnerabilities, including ones rated high severity, in several products. The post Palo Alto Networks Patches … First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-patches-unauthenticated-command-execution-flaw-in-cortex-xsoar/
-
A PoC exploit code is available for critical Ivanti vTM bug
Ivanti warned of a critical authentication bypass flaw in its Virtual Traffic Manager (vTM) appliances that can allow attackers to create rogue admini… First seen on securityaffairs.com Jump to article: securityaffairs.com/166991/hacking/ivanti-virtual-traffic-manager-flaw.html
-
Critical SAP flaw allows remote attackers to bypass authentication
SAP has released its security patch package for August 2024, addressing 17 vulnerabilities, including a critical authentication bypass that could allo… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-sap-flaw-allows-remote-attackers-to-bypass-authentication/