Tag: flaw
-
Adobe Patches Critical Flaws in Reader, Acrobat
Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software. The post c… First seen on securityweek.com Jump to article: www.securityweek.com/adobe-patches-critical-flaws-in-reader-acrobat/
-
Citrix Addresses High-Severity Flaw in NetScaler ADC and Gateway
First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/citrix-addresses-high-severity-flaw-in-netscaler-adc-and-gateway
-
Week in review: Veeam fixes RCE flaw in backup management platform, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Veeam fixes RCE flaw in backup management platform (… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/12/week-in-review-veeam-fixes-rce-flaw-in-backup-management-platform-patch-tuesday-forecast/
-
Helsinki suffers data breach after hackers exploit unpatched flaw
The City of Helsinki is investigating a data breach in its education division, which it discovered in late April 2024, impacting tens of thousands of … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/helsinki-suffers-data-breach-after-hackers-exploit-unpatched-flaw/
-
Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS
Apple documents another zero-day flaw being exploited on older iPhones and documents security problems in macOS, iOS and iPadOS. The post cuments anot… First seen on securityweek.com Jump to article: www.securityweek.com/apple-patch-day-code-execution-flaws-in-iphones-ipads-macos/
-
New Goldoon Botnet Targets D-Link Routers With Decade-Old Flaw
A never-before-seen botnet called Goldoon has been observed targeting D-Link routers with a nearly decade-old critical security flaw with the goal of … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/new-goldoon-botnet-targets-d-link.html
-
TunnelVision DHCP Flaw Lets Attackers Bypass VPNs, Redirect Traffic
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35854/TunnelVision-DHCP-Flaw-Lets-Attackers-Bypass-VPNs-Redirect-Traffic.html
-
CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting GitLab to its Known Exploited Vulnerabilities (KE… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/cisa-warns-of-active-exploitation-of.html
-
Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors
A critical vulnerability in the Cinterion cellular modems can be exploited for remote code execution via SMS messages. The post al vulnerability in th… First seen on securityweek.com Jump to article: www.securityweek.com/cinterion-modem-flaws-pose-risk-to-millions-of-devices-in-industrial-other-sectors/
-
Passwordless Authentication Standard FIDO2 Flaw Let Attackers Launch MITM Attacks
FIDO2 (Fast Identity Online) is a passwordless authentication method developed by FIDO Alliance to prevent Man-in-the-Middle (MiTM) attacks, Phishing … First seen on gbhackers.com Jump to article: gbhackers.com/fid02-mitm-vulnerability/
-
Apache OFBiz RCE Flaw Let Attackers Execute Malicious Code Remotely
Many businesses use enterprise resource planning (ERP) systems like Apache OFBiz. However, it has been found to have significant security holes that l… First seen on gbhackers.com Jump to article: gbhackers.com/apache-ofbiz-rce-flaw/
-
Widely used modems in industrial IoT devices open to SMS attack
Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/widely-used-modems-in-industrial-iot-devices-open-to-sms-attack/
-
Citrix warns customers to update PuTTY version installed on their XenCenter system manually
Citrix urges customers to manually address a PuTTY SSH client flaw that could allow attackers to steal a XenCenter admin’s private SSH key. Versions o… First seen on securityaffairs.com Jump to article: securityaffairs.com/162953/security/citrix-manually-update-putty-ssh-client.html
-
F5 fixes BIG-IP Next Central Manager flaws with public PoCs (CVE-2024-21793, CVE-2024-26026)
Eclypsium researchers have published details and PoC exploits for two remotely exploitable injection vulnerabilities (CVE-2024-21793, CVE-2024-26026) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/09/cve-2024-21793-cve-2024-26026/
-
Experts warn of two BIG-IP Next Central Manager flaws that allow device takeover
Two high-severity vulnerabilities in BIG-IP Next Central Manager can be exploited to gain admin control and create hidden accounts on any managed asse… First seen on securityaffairs.com Jump to article: securityaffairs.com/162916/security/f5-big-ip-next-central-manager.html
-
WordPress sites targeted for hijacking with LiteSpeed Cache plugin flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/wordpress-sites-targeted-for-hijacking-with-litespeed-cache-plugin-flaw
-
‘TunnelVision’ DHCP flaw lets attackers bypass VPNs, redirect traffic
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/tunnelvision-dhcp-flaw-lets-attackers-bypass-vpns-redirect-traffic
-
Widely used Telit Cinterion modems open to SMS takeover attacks
Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/widely-used-telit-cinterion-modems-open-to-sms-takeover-attacks/
-
Most Tinyproxy Instances are potentially vulnerable to flaw CVE-2023-49606
A critical Remote Code Execution vulnerability in the Tinyproxy service potentially impacted 50,000 Internet-Exposing hosts. Researchers from Cisco Ta… First seen on securityaffairs.com Jump to article: securityaffairs.com/162866/hacking/tinyproxy-rce.html
-
Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover
Multiple critical security flaws have been disclosed in the Judge0 open-source online code execution system that could be exploited to obtain code exe… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/sandbox-escape-vulnerabilities-in.html
-
Veeam fixes RCE flaw in backup management platform (CVE-2024-29212)
Veeam has patched a high-severity vulnerability (CVE-2024-29212) in Veeam Service Provider Console (VSPC) and is urging customers to implement the pat… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/08/cve-2024-29212/
-
Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw
Cybersecurity researchers have discovered a targeted operation against Ukraine that has been found leveraging a nearly seven-year-old flaw in Microsof… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/ukraine-targeted-in-cyberattack.html
-
Hackers exploit LiteSpeed Cache flaw to create WordPress admins
Hackers have been targeting WordPress sites with an outdated version of the LiteSpeed Cache plugin to create administrator users and gain control of t… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-litespeed-cache-flaw-to-create-wordpress-admins/
-
Severe Flaws Disclosed in Brocade SANnav SAN Management Software
Several security vulnerabilities disclosed in Brocade SANnav storage area network (SAN) management application could be exploited to compromise suscep… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/severe-flaws-disclosed-in-brocade.html
-
Veeam RCE Flaws Let Hackers Gain Access To VSPC Servers
Veeam Service Provider console has been discovered with two critical vulnerabilities that were associated with Remote Code Execution. A CVE for these … First seen on gbhackers.com Jump to article: gbhackers.com/veeam-rce-flaws-vspc-servers/
-
Palo Alto Networks discloses RCE zero-day vulnerability
Tags: exploit, flaw, injection, network, rce, remote-code-execution, software, threat, vulnerability, zero-dayThreat actors have exploited the remote code injection flaw, which affects the GlobalProtect gateway in Palo Alto Networks’ PAN-OS software, in a ‘lim… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366580732/Palo-Alto-Networks-discloses-RCE-zero-day-vulnerability
-
Over 50,000 Tinyproxy servers vulnerable to critical RCE flaw
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-50-000-tinyproxy-servers-vulnerable-to-critical-rce-flaw/
-
Android Flaw Affected Apps With 4 Billion Installs
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/android-flaw-apps-4-billion/
-
Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack
Palo Alto Networks has shared remediation guidance for a recently disclosed critical security flaw impacting PAN-OS that has come under active exploit… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/palo-alto-networks-outlines-remediation.html
-
Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites
Threat actors are attempting to actively exploit a critical security flaw in the WP‘Automatic plugin for WordPress that could allow site takeovers.The… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/hackers-exploiting-wp-automatic-plugin.html