Tag: flaw
-
CISA adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilit… First seen on securityaffairs.com Jump to article: securityaffairs.com/161855/hacking/palo-alto-networks-pan-os-bug-known-exploited-vulnerabilities-catalog.html
-
Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt
PAM company Delinea over the weekend rushed to patch a critical authentication bypass vulnerability after it apparently ignored the researcher who fou… First seen on securityweek.com Jump to article: www.securityweek.com/delinea-scrambles-to-patch-critical-flaw-after-failed-responsible-disclosure-attempt/
-
Windows Apps Vulnerable to Command Injection via >>BatBadBut<< Flaw
First seen on hackread.com Jump to article: www.hackread.com/windows-batbadbut-vulnerability-comment-injection/
-
Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws
Multiple China-nexus threat actors have been linked to the zero-day exploitation of three security flaws impacting Ivanti appliances (CVE-2023-46805, … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/researchers-identify-multiple-china.html
-
6-year-old Lighttpd Flaw Impacts Intel And Lenovo Servers
The software supply chain is filled with various challenges, such as untracked security vulnerabilities in open-source components and inconsistent upd… First seen on gbhackers.com Jump to article: gbhackers.com/lighttpd-flaw-intel-lenovo-servers/
-
March Patch Tuesday throws up two critical Hyper-V flaws
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366573322/March-Patch-Tuesday-throws-up-two-critical-Hyper-V-flaws
-
March Patch Tuesday fixes critical Hyper-V vulnerabilities
Microsoft also corrects a remote-code execution flaw on Exchange Server and issues an advisory related to changes with an outdated file-scanning featu… First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366573352/March-Patch-Tuesday-fixes-critical-Hyper-V-vulnerabilities
-
BatBadBut flaw allowed an attacker to perform command injection on Windows
A critical vulnerability, named ‘BatBadBut’, impacts multiple programming languages, its exploitation can lead to command injection in Windows applica… First seen on securityaffairs.com Jump to article: securityaffairs.com/161785/security/batbadbut-flaw-programming-languages.html
-
Ivanti Rushes Patches for 4 New Flaws in Connect Secure and Policy Secure
Ivanti has released security updates to address four security flaws impacting Connect Secure and Policy Secure Gateways that could result in code exec… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/ivanti-rushes-patches-for-4-new-flaw-in.html
-
LayerSlider Plugin Flaw Exposes 1M Sites To SQL Injections
Recent media reports have revealed a crucial LayerSlider plugin flaw. According to these reports, this flaw has exposed numerous WordPress sites to SQ… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/layerslider-plugin-flaw-exposes-1m-sites-to-sql-injections/
-
Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies
Google has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies.The high-se… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/google-warns-android-zero-day-flaws-in.html
-
What is Web Application Security Testing?
Web application security testing aims to detect, prevent, and address security vulnerabilities within web applications. Flaws in web application codin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/what-is-web-application-security-testing-2/
-
Critical Security Flaw Found in Popular LayerSlider WordPress Plugin
A critical security flaw impacting the LayerSlider plugin for WordPress could be abused to extract sensitive information from databases, such as passw… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-security-flaw-found-in-popular.html
-
LockBit attacks continue via ConnectWise ScreenConnect flaws
Coalition is latest company to confirm LockBit activity against vulnerable ScreenConnect instances. But the insurer found significant differences betw… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366573237/LockBit-attacks-continue-via-ConnectWise-ScreenConnect-flaws
-
Intel and Lenovo servers impacted by 6-year-old BMC flaw
An almost 6-year-old vulnerability in the Lighttpd web server used in Baseboard Management Controllers has been overlooked by many device vendors, inc… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/intel-and-lenovo-servers-impacted-by-6-year-old-bmc-flaw/
-
Fortinet fixed a critical remote code execution bug in FortiClientLinux
Fortinet addressed multiple issues in FortiOS and other products, including a critical remote code execution flaw in FortiClientLinux. Fortinet fixed … First seen on securityaffairs.com Jump to article: securityaffairs.com/161674/security/forticlientlinux-rce.html
-
Microsoft Patches 150 Flaws Including Two Zero-Days
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-patches-150-flaws-two-1/
-
New Spectre v2 attack impacts Linux systems on Intel CPUs
Researchers have demonstrated the first native Spectre v2 exploit for a new speculative execution side-channel flaw that impacts Linux systems running… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-spectre-v2-attack-impacts-linux-systems-on-intel-cpus/
-
Critical Security Flaw Exposes 1 Million WordPress Sites to SQL Injection
A researcher received a $5,500 bug bounty for discovering a vulnerability (CVE-2024-2879) in LayerSlider, a plug-in with more than a million active in… First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/critical-security-flaw-wordpress-sql-injection
-
Apple Chip Flaw Leaks Secret Encryption Keys
Plus: The Biden administration warns of nationwide attacks on US water systems, a new Russian wiper malware emerges, and China-linked hackers wage a g… First seen on wired.com Jump to article: www.wired.com/story/apple-m-chip-flaw-leak-encryption-keys/
-
Fortinet Patches Critical RCE Vulnerability in FortiClientLinux
Fortinet has released patches for a dozen vulnerabilities, including a critical-severity remote code execution flaw in FortiClientLinux. The post has… First seen on securityweek.com Jump to article: www.securityweek.com/fortinet-patches-critical-rce-vulnerability-in-forticlientlinux/
-
Patch Tuesday: Code Execution Flaws in Multiple Adobe Software Products
Adobe calls attention to a pair of code execution bugs in Adobe¯Commerce and¯Magento Open Source, a product used to manage online stories. The post ll… First seen on securityweek.com Jump to article: www.securityweek.com/patch-tuesday-code-execution-flaws-in-multiple-adobe-software-products/
-
Microsoft April 2024 Patch Tuesday fixes 150 security flaws, 67 RCEs
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-april-2024-patch-tuesday-fixes-150-security-flaws-67-rces/
-
E-commerce site data compromised via critical Magento flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/e-commerce-site-data-compromised-via-critical-magento-flaw
-
New SharePoint flaws help hackers evade detection when stealing files
Researchers have discovered two techniques that could enable attackers to bypass audit logs or generate less severe entries when downloading files fro… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-sharepoint-flaws-help-hackers-evade-detection-when-stealing-files/
-
Apple patches zero-days amid ‘foundational’ post-quantum update
Apple’s iOS 17.4 update not only fixes zero-day flaws that are being actively exploited, but includes important new security protocols to safeguard us… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366572533/Apple-patches-zero-days-amid-foundational-post-quantum-update
-
Cisco warns of XSS flaw in endlife small business routers
Cisco warns customers of Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Cross-Site scripting flaw. Cisco warns of a Small Busine… First seen on securityaffairs.com Jump to article: securityaffairs.com/161540/security/cisco-eof-routers-xss.html
-
Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices
Unpatched D-Link NAS device vulnerability CVE-2024-3273, potentially affecting many devices, is being exploited in the wild. The post d D-Link NAS dev… First seen on securityweek.com Jump to article: www.securityweek.com/exploitation-attempts-target-unpatched-flaw-affecting-many-d-link-nas-devices/