Tag: flaw
-
Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack
Palo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild.Tra… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/zero-day-alert-critical-palo-alto.html
-
Windows MagicDot Path Flaw Lets Attackers Gain Rootkit-Like Abilities
A new vulnerability has been unearthed, allowing attackers to gain rootkit-like abilities on Windows systems without requiring administrative privileg… First seen on gbhackers.com Jump to article: gbhackers.com/windows-magicdot-vulnerability/
-
Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204)
The newest version of Ivanti Avalanche the company’s enterprise mobile device management (MDM) solution carries fixes for 27 vulnerabilities, two of… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/18/cve-2024-29204/
-
22,500 Palo Alto firewalls possibly vulnerable to ongoing attacks
Approximately 22,500 exposed Palo Alto GlobalProtect firewall devices are likely vulnerable to the CVE-2024-3400 flaw, a critical command injection vu… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/22-500-palo-alto-firewalls-possibly-vulnerable-to-ongoing-attacks/
-
AWS fixes ‘FlowFixation’ vulnerability for account hijacking
A Tenable researcher discovered a session fixation flaw in AWS Managed Workflows for Apache Airflow that, combined with a misconfiguration, could enab… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366574976/AWS-fixes-FlowFixation-vulnerability-for-account-hijacking
-
Fortinet Rolls Out Critical Security Patches for FortiClientLinux Vulnerability
Fortinet has released patches to address a critical security flaw impacting FortiClientLinux that could be exploited to achieve arbitrary code executi… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/fortinet-has-released-patches-to.html
-
Palo Alto ZeroDay Exploited in The Wild Following PoC Release
Palo Alto Networks has disclosed a critical vulnerability within its PAN-OS operating system, identified as CVE-2024-3400. This zero-day flaw, found i… First seen on gbhackers.com Jump to article: gbhackers.com/palo-alto-zeroday-exploited-in-wild/
-
SoumniBot Exploiting Android Manifest Flaws to Evade Detection
A new banker, SoumniBot, has recently been identified. It targets Korean users and is incredible by using an unusual method to evade investigation and… First seen on gbhackers.com Jump to article: gbhackers.com/soumnibot-android-banker-techniques/
-
Asantee Games Acknowledges Security Flaw in Magic Rampage, Assures it’s Been Contained
Tags: flawFirst seen on thecyberexpress.com Jump to article: thecyberexpress.com/magic-rampage-data-breach/
-
‘Thousands’ of businesses at mercy of miscreants thanks to unpatched Ray AI flaw
First seen on theregister.com Jump to article: www.theregister.com/2024/03/27/ray_ai_framework_bug/
-
Cisco warns of a command injection escalation flaw in its IMC. PoC publicly available
Cisco has addressed a high-severity vulnerability in its Integrated Management Controller (IMC) for which publicly available exploit code exists. Cisc… First seen on securityaffairs.com Jump to article: securityaffairs.com/161975/hacking/cisco-integrated-management-controller-bug.html
-
Ivanti fixed two critical flaws in its Avalanche MDM
Ivanti addressed two critical vulnerabilities in its Avalanche mobile device management (MDM) solution, that can lead to remote command execution. Iva… First seen on securityaffairs.com Jump to article: securityaffairs.com/161952/security/ivanti-avalanche-mdm-critical-flaws.html
-
Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included
Microsoft has released security updates for the month of April 2024 to remediate a record 149 flaws, two of which have come under active exploitation … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/microsoft-fixes-149-flaws-in-huge-april.html
-
Critical ‘BatBadBut’ Rust Vulnerability Exposes Windows Systems to Attacks
A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks.The vulnerability… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-batbadbut-rust-vulnerability.html
-
Uncle Sam’s had it up to here with ‘unforgivable’ SQL injection flaws
First seen on theregister.com Jump to article: www.theregister.com/2024/03/26/fbi_cisa_sql_injection/
-
Ivanti Patches Two Critical Avalanche Flaws in Major Update
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ivanti-patches-two-critical/
-
PuTTY SSH Client flaw allows of private keys recovery
The PuTTY Secure Shell (SSH) and Telnet client are impacted by a critical vulnerability that could be exploited to recover private keys. PuTTY tools f… First seen on securityaffairs.com Jump to article: securityaffairs.com/161921/security/putty-ssh-client-flaw.html
-
Critical Rust Flaw Poses Exploit Threat in Specific Windows Use Cases
Project behind the Rust programming language asserted that any calls to a specific API would be made safe, even with unsafe inputs, but researchers fo… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/critical-rust-flaw-poses-exploit-threat-in-specific-windows-use-cases
-
Cisco discloses root escalation flaw with public exploit code
Cisco has released patches for a high-severity Integrated Management Controller (IMC) vulnerability with public exploit code that can let local attack… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisco-discloses-root-escalation-flaw-with-public-exploit-code/
-
Over 100 Juniper Networks flaws addressed
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/over-100-juniper-networks-flaws-addressed
-
Multiple botnets exploiting one-year-old TP-Link flaw to hack routers
At least six distinct botnet malware operations are hunting for TP-Link Archer AX21 (AX1800) routers vulnerable to a command injection security issue … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/multiple-botnets-exploiting-one-year-old-tp-link-flaw-to-hack-routers/
-
LeakyCLI Flaw Exposes AWS and Google Cloud Credentials
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/leakycli-exposes-aws-google-cloud/
-
Ivanti warns of critical flaws in its Avalanche MDM solution
Ivanti has released security updates to fix 27 vulnerabilities in its Avalanche mobile device management (MDM) solution, two of them critical heap ove… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ivanti-warns-of-critical-flaws-in-its-avalanche-mdm-solution/
-
Ivanti Patches 27 Vulnerabilities in Avalanche MDM Product
Ivanti releases patches for 27 vulnerabilities in the Avalanche MDM product, including critical flaws leading to command execution. The post eleases p… First seen on securityweek.com Jump to article: www.securityweek.com/ivanti-patches-27-vulnerabilities-in-avalanche-mdm-product/
-
Critical Flaws Leave 92,000 D-Link NAS Devices Vulnerable to Malware Attacks
Threat actors are actively scanning and exploiting a pair of security flaws that are said to affect as many as 92,000 internet-exposed D-Link network-… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-flaws-leave-92000-d-link-nas.html
-
Exploited TP-Link Vulnerability Spawns Botnet Threats
Attackers Exploit Old Flaw, Hijack TP-Link Archer Routers. Half a dozen different botnets are prowling the internet for TP-Link-brand Wi-Fi routers un… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/exploited-tp-link-vulnerability-spawns-botnet-threats-a-24882
-
PuTTY SSH client flaw allows recovery of cryptographic private keys
A vulnerability tracked as CVE-2024-31497 in PuTTY 0.68 through 0.80 could potentially allow attackers with access to 60 cryptographic signatures to r… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/putty-ssh-client-flaw-allows-recovery-of-cryptographic-private-keys/
-
Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites
Threat actors have been found exploiting a critical flaw in Magento to inject a persistent backdoor into e-commerce websites.The attack leverages CVE-… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/hackers-exploit-magento-bug-to-steal.html
-
CISA adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilit… First seen on securityaffairs.com Jump to article: securityaffairs.com/161855/hacking/palo-alto-networks-pan-os-bug-known-exploited-vulnerabilities-catalog.html