Tag: flaw
-
Multiple Samsung Mobile Devices Flaw Let Attackers Execute Arbitrary Code
In a cybersecurity update, Samsung announced the patching of 25 vulnerabilities in its mobile devices, aiming to fortify them against potential code e… First seen on gbhackers.com Jump to article: gbhackers.com/25-flaws-patched-samsung/
-
Citrix NetScaler ADC Gateway Flaw Lets Attackers Obtain Sensitive Data Remotely
A security vulnerability has been identified in Citrix NetScaler ADC and Gateway appliances, allowing remote attackers to access sensitive data withou… First seen on gbhackers.com Jump to article: gbhackers.com/citrix-netscaler-adc-gateway-flaw/
-
New Goldoon Botnet Targeting D-Link Devices by Exploiting 9-Year-Old Flaw
A new botnet called Goldoon targets D-Link routers and NAS devices putting them at risk of DDoS attacks and more. Learn how weak credentials leave you… First seen on hackread.com Jump to article: www.hackread.com/goldoon-botnet-targeting-d-link-devices/
-
Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users
Security vulnerabilities uncovered in cloud-based pinyin keyboard apps could be exploited to reveal users’ keystrokes to nefarious actors.The findings… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/major-security-flaws-expose-keystrokes.html
-
Tinyproxy Flaw Let Attackers Execute Remote Code
A security flaw has been identified in Tinyproxy, a lightweight HTTP/HTTPS proxy daemon widely used in small network environments. The vulnerability, … First seen on gbhackers.com Jump to article: gbhackers.com/tinyproxy-flaw/
-
Flaws in legacy D-Link NAS devices under attack
Internet scans show threat actors are targeting CVE-2024-3273 in thousands of end-of-life D-Link NAS devices and exploitation requires no authenticati… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366580153/Flaws-in-legacy-D-Link-NAS-devices-under-attack
-
Linksys Router Flaw Let Attackers Perform Command Injection, PoC Released
Linksys routers were discovered with two vulnerabilities: CVE-2024-33788 and CVE-2024-33789. These vulnerabilities were associated with Command Inject… First seen on gbhackers.com Jump to article: gbhackers.com/linksys-router-flaw-command-injection/
-
HPE Aruba Networking addressed four critical ArubaOS RCE flaws
HPE Aruba Networking addressed four critical remote code execution vulnerabilities impacting its ArubaOS network operating system. HPE Aruba Networkin… First seen on securityaffairs.com Jump to article: securityaffairs.com/162663/security/hpe-aruba-networking-critical-flaws.html
-
Critical GitLab account takeover flaw added to CISA’s KEV Catalog
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/critical-gitlab-account-takeover-flaw-added-to-cisas-kev-catalog
-
Accelerated patching found with CISA KEV catalog-listed flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/accelerated-patching-found-with-cisa-kev-catalog-listed-flaws
-
Immediate GitLab account takeover flaw remediation crucial amid attacks
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/cisa-immediate-gitlab-account-takeover-flaw-remediation-crucial-amid-attacks
-
Host takeovers likely with critical Judge0 flaws
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/host-takeovers-likely-with-critical-judge0-flaws
-
HPE Aruba Networking fixes four critical RCE flaws in ArubaOS
HPE Aruba Networking has issued its April 2024 security advisory detailing critical remote code execution (RCE) vulnerabilities impacting multiple ver… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hpe-aruba-networking-fixes-four-critical-rce-flaws-in-arubaos/
-
A flaw in the R programming language could allow code execution
A flaw in the R programming language enables the execution of arbitrary code when parsing specially crafted RDS and RDX files. A vulnerability, tracke… First seen on securityaffairs.com Jump to article: securityaffairs.com/162591/security/r-programming-language-flaw.html
-
Russia’s APT28 Exploited Windows Print Spooler Flaw to Deploy ‘GooseEgg’ Malware
The Russia-linked nation-state threat actor tracked as APT28 weaponized a security flaw in the Microsoft Windows Print Spooler component to deliver a … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/russias-apt28-exploited-windows-print.html
-
1,400 GitLab Servers Impacted by Exploited Vulnerability
CISA says a critical GitLab password reset flaw is being exploited in attacks and roughly 1,400 servers have not been patched. The post s a critical G… First seen on securityweek.com Jump to article: www.securityweek.com/1400-gitlab-servers-impacted-by-exploited-vulnerability/
-
MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws
The MITRE Corporation revealed that it was the target of a nation-state cyber attack that exploited two zero-day flaws in Ivanti Connect Secure applia… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/mitre-corporation-breached-by-nation.html
-
US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks
First seen on techcrunch.com Jump to article: techcrunch.com/2024/04/22/cisa-chirp-systems-remotely-unlock-smart-locks/
-
R language flaw allows code execution via RDS/RDX files
A new vulnerability has been discovered in the R programming language that allows arbitrary code execution upon deserializing specially crafted RDS an… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/r-language-flaw-allows-code-execution-via-rds-rdx-files/
-
Researchers Uncover Windows Flaws Granting Hackers Rootkit-Like Powers
New research has found that the DOS-to-NT path conversion process could be exploited by threat actors to achieve rootkit-like capabilities to conceal … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/researchers-uncover-windows-flaws.html
-
Palo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under Attack
Palo Alto Networks has shared more details of a critical security flaw impacting PAN-OS that has come under active exploitation in the wild by malicio… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/palo-alto-networks-discloses-more.html
-
Critical Update: CrushFTP Zero-Day Flaw Exploited in Targeted Attacks
Users of the CrushFTP enterprise file transfer software are being urged to update to the latest version following the discovery of a security flaw tha… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-update-crushftp-zero-day-flaw.html
-
Safari Vulnerability Exposes EU iOS Users to Malicious Marketplaces
A serious concern has arisen for iPhone users in the European Union as a newly discovered flaw in Apple’s Safari browser has the potential to expose t… First seen on gbhackers.com Jump to article: gbhackers.com/safari-flaw-exposes-eu-ios/
-
Open source programming language R patches gnarly arbitrary code exec flaw
First seen on theregister.com Jump to article: www.theregister.com/2024/05/01/r_programming_language_ace_vuln/
-
Patched Deserialization Flaw in Siemens Product Allows RCE
The Siemens Simatic Energy Manager Used an Unsafe BinaryFormatter Method. Researchers detailed a deserialization vulnerability in Siemens software use… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/patched-deserialization-flaw-in-siemens-product-allows-rce-a-24980
-
Google Patches Critical Chrome Vulnerability and Additional Flaws
First seen on hackread.com Jump to article: www.hackread.com/google-patches-critical-chrome-vulnerability/
-
Multiple Brocade SANnav SAN Management SW flaws allow device compromise
Multiple flaws in Brocade SANnav storage area network (SAN) management application can allow to compromise impacted appliances. Multiple vulnerabiliti… First seen on securityaffairs.com Jump to article: securityaffairs.com/162473/uncategorized/brocade-sannav-flaws.html
-
1,200+ Vulnerabilities Detected In Microsoft Products In 2023
Hackers often focus on flaws in Microsoft products since they are commonly employed in various institutions and personal computers, which means they h… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-vulnerabilities-2023/