Tag: flaw
-
Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks
Cybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that could be exploited to achieve remote code executio… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/prompt-injection-flaw-in-vanna-ai.html
-
Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (2/2)
Learn about critical code vulnerabilities we discovered in Gogs, a source code hosting solution. This follow-up covers how less severe flaws can still… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-2-2/
-
Juniper Rushes Out Emergency Patch for Critical Smart Router Flaw
Although not yet exploited in the wild, the max-critical authentication bypass bug could allow adversaries to take over unpatched Juniper Session Smar… First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/juniper-rushes-out-emergency-patch-for-critical-smart-router-flaw
-
VMware Warns of Critical vCenter Server Flaws
First seen on duo.com Jump to article: duo.com/decipher/vmware-warns-of-critical-vcenter-server-flaws
-
Microsoft Uncovers Major Flaws in Rockwell PanelView Plus
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-uncovers-flaws-rockwell/
-
Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36056/Google-Patches-25-Android-Flaws-Including-Critical-Privilege-Escalation-Bug.html
-
Critical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application
A critical security flaw has been disclosed in Fortra FileCatalyst Workflow that, if left unpatched, could allow an attacker to tamper with the applic… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/critical-sqli-vulnerability-found-in.html
-
Exploit Attempts Recorded Against New MOVEit Transfer Vulnerability – Patch ASAP!
A newly disclosed critical security flaw impacting Progress Software MOVEit Transfer is already seeing exploitation attempts in the wild shortly after… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/new-moveit-transfer-vulnerability-under.html
-
In Other News: Microsoft Details ICS Flaws, Smart Grill Hacking, Predator Spyware Activity
Noteworthy stories that might have slipped under the radar: Microsoft details Rockwell HMI vulnerabilities, smart grills hacked, Predator spyware acti… First seen on securityweek.com Jump to article: www.securityweek.com/in-other-news-microsoft-details-ics-flaws-smart-grill-hacking-predator-spyware-activity/
-
Critical SSH Vulnerability, Facial Recognition Flaws, How to Safely Dispose of Old Devices
In episode 337, we cover broken news about the new SSH vulnerability ‘regreSSHion’ highlighting the vulnerability discovered in the OpenSSH protocol b… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/critical-ssh-vulnerability-facial-recognition-flaws-how-to-safely-dispose-of-old-devices/
-
Microsoft discloses 2 flaws in Rockwell Automation PanelView Plus
Microsoft discovered two flaws in Rockwell Automation PanelView Plus that remote, unauthenticated attackers could exploit. Microsoft responsibly discl… First seen on securityaffairs.com Jump to article: securityaffairs.com/165276/ics-scada/rockwell-automation-panelview-plus-flaws.html
-
Splunk fixed tens of flaws in Splunk Enterprise and Cloud Platform
Technology company Splunk released security updates to address 16 vulnerabilities in Splunk Enterprise and Cloud Platform. Technology company Splunk a… First seen on securityaffairs.com Jump to article: securityaffairs.com/165204/security/splunk-enterprise-and-cloud-platform-flaws.html
-
Breach Roundup: FBI Warns of US Renewable Energy Sector Threats
Google Offers $250,000 Reward for KVM Vulns; CocoaPods Flaws Expose Apple Apps. This week: FBI warns of cyber threats to US renewable energy sector; I… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-fbi-warns-us-renewable-energy-sector-threats-a-25709
-
Critical Vulnerabilities Found in Rockwell PanelView Plus
Microsoft Uncovers Critical Flaws in Rockwell PanelView Plus. Microsoft has found critical vulnerabilities in Rockwell Automation’s PanelView Plus pro… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/critical-vulnerabilities-found-in-rockwell-panelview-plus-a-25708
-
MOVEit Transfer Flaws Push Security Defense Into a Race With Attackers
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/moveit-transfer-flaws-security-defense-attackers
-
Critical OpenSSH Flaw Enables Full System Compromise
A newly discovered RCE vulnerability, which can lead to full system compromise, has put over 14 million OpenSSH server instances are potentially at ri… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/openssh-flaw-system-compromise/
-
Major Security Flaws in Mitsubishi Electric Software: Urgent Patches Required
Mitsubishi Electric’s GENESIS64 and MC Works64 software have been identified with multiple vulnerabilities, posing significant security risks to indus… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/mitsubishi-electric-vulnerabilities/
-
Critical WordPress Plugin Flaw Exposes 90,000+ WordPress Sites
A critical vulnerability has been discovered in the popular WordPress plugin >>Email Subscribers by Icegram Express Email Marketing, Newsletters, Auto… First seen on gbhackers.com Jump to article: gbhackers.com/critical-wordpress-plugin/
-
Critical RCE Vulnerability Discovered in Ollama AI Infrastructure Tool
Tags: ai, cybersecurity, flaw, infrastructure, intelligence, open-source, rce, remote-code-execution, tool, update, vulnerabilityCybersecurity researchers have detailed a now-patch security flaw affecting the Ollama open-source artificial intelligence (AI) infrastructure platfor… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/critical-rce-vulnerability-discovered.html
-
14 million OpenSSH servers exposed to the internet via regression flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/14-million-openssh-servers-exposed-to-the-internet-via-regression-flaw
-
Patched: RCE Flaw That Affects Critical Manufacturing
Hackers Have Not Yet Exploited the CVSS 10-Rated Flaw, Says PTC. Software maker for critical manufacturing organizations PTC patched a critical flaw t… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/patched-rce-flaw-that-affects-critical-manufacturing-a-25699
-
regreSSHion OpenSSH Flaw: Potential Exploitation Attempts Seen, but Mass Attacks Unlikely
The critical OpenSSH vulnerability tracked as regreSSHion and CVE-2024-6387 may already be targeted by attackers, but mass exploitation is unlikely. T… First seen on securityweek.com Jump to article: www.securityweek.com/regresshion-openssh-flaw-potential-exploitation-attempts-seen-but-mass-attacks-unlikely/
-
China-linked APT exploited Cisco NX-OS zero-day to deploy custom malware
Cisco fixed an actively exploited NX-OS zero-day, the flaw was exploited to install previously unknown malware as root on vulnerable switches. Cisco a… First seen on securityaffairs.com Jump to article: securityaffairs.com/165097/apt/cisco-nx-os-zero-day-chinese-hackers.html
-
Critical unauthenticated remote code execution flaw in OpenSSH server
A critical flaw in the OpenSSH server can be exploited to achieve unauthenticated remote code execution with root privileges in glibc-based Linux syst… First seen on securityaffairs.com Jump to article: securityaffairs.com/165087/security/openssh-server-critical-flaw.html
-
RegreSSHion CVE-2024-6387: A Targeted Exploit in the Wild
A critical security flaw, known as regression and cataloged under CVE-2024-6387, has been identified in OpenSSH, just a few days ago. This vulnerabili… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/regresshion-cve-2024-6387-a-targeted-exploit-in-the-wild/
-
Additional old Oracle WebLogic flaws used for cryptomining
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/additional-old-oracle-weblogic-flaws-used-for-cryptomining
-
Juniper Networks fixed a critical authentication bypass flaw in some of its routers
Juniper Networks released out-of-band security updates to address a critical authentication bypass vulnerability impacting some of its routers. Junipe… First seen on securityaffairs.com Jump to article: securityaffairs.com/165069/security/juniper-networks-critical-authentication-bypass-flaw.html
-
Threat actors actively exploit D-Link DIR-859 router flaw CVE-2024-0769
Experts spotted threat actors exploiting the critical vulnerability CVE-2024-0769 affects all D-Link DIR-859 WiFi routers. Researchers from cybersecur… First seen on securityaffairs.com Jump to article: securityaffairs.com/165045/hacking/d-link-dir-859-actively-exploited.html
-
Water Sigbin Exploiting Oracle WebLogic Server Flaw
Water Sigbin (8220 Gang) exploits vulnerabilities (CVE-2017-3506, CVE-2023-21839) in Oracle WebLogic servers to deliver cryptocurrency miners using Po… First seen on gbhackers.com Jump to article: gbhackers.com/water-sigbin-exploiting-oracle/
-
Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations
PTC has patched a critical vulnerability in the Creo Elements/Direct License Server that can be exploited for unauthenticated command execution. The p… First seen on securityweek.com Jump to article: www.securityweek.com/critical-flaw-in-ptc-license-server-can-allow-lateral-movement-in-industrial-organizations/