Tag: flaw
-
Fortra Releases Update on Critical Severity RCE Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/fortra-releases-update-on-critical-severity-rce-flaw
-
CISA Warns Of Active Exploitation Of Flaws In Fortinet, Ivanti, Nice Linear
A recent security alert warns of three critical vulnerabilities actively exploited in the wild, of which the first is CVE-2023-48788, an SQL injection… First seen on gbhackers.com Jump to article: gbhackers.com/cisa-warns-of-active-exploitation/
-
Microsoft Releases Outband Update to Fix Windows Server Memory Leak Flaw
Microsoft released an out-of-band update, KB5037422, on March 22, 2024, specifically for Windows Server 2022 (OS Build 20348.2342) to address a critic… First seen on gbhackers.com Jump to article: gbhackers.com/windows-server-memory-leak/
-
Hackers exploit Ray framework flaw to breach servers, hijack resources
A new hacking campaign dubbed ShadowRay targets an unpatched vulnerability in Ray, a popular open-source AI framework, to hijack computing power and l… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-ray-framework-flaw-to-breach-servers-hijack-resources/
-
CVE-2023-40000: LiteSpeed Plugin Flaw Exposes Millions of WordPress Sites
A concerning security vulnerability within a widely-used WordPress plugin, LiteSpeed Cache, has been detected. Tracked as CVE-2023-40000, this vulnera… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2023-40000-litespeed-plugin-wordpress/
-
CVE-2024-1071: Ultimate Member Plugin Flaw Exposes WordPress Sites
The revelation of a critical security loophole within the widely deployed WordPress plugin, Ultimate Member, has sent shockwaves through the online co… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-1071-ultimate-member-plugin-wordpress/
-
CVE-2024-23204: Vulnerability in Apple’s Shortcuts App
Details have emerged about a high-severity security flaw in Apple’s Shortcuts app. This vulnerability, tracked as CVE-2024-23204, has the potential to… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-23204-apple-shortcuts-app/
-
Ransomware gangs exploiting ConnectWise ScreenConnect flaws
Ransomware activity is ramping up against vulnerable ScreenConnect systems as Black Basta and Bl00dy threat actors were observed exploiting the vulner… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366571367/Ransomware-gangs-exploiting-ConnectWise-ScreenConnect-flaws
-
Three flaws added to CISA’s known exploited vulnerabilities catalog
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/three-flaws-added-to-cisas-known-exploited-vulnerabilities-catalog
-
VMware urges emergency action to blunt hypervisor flaws
First seen on theregister.com Jump to article: www.theregister.com/2024/03/07/vmware_usb_critical_flaws/
-
Row breaks out over true severity of two DNSSEC flaws
Tags: flawFirst seen on theregister.com Jump to article: www.theregister.com/2024/03/26/software_risk_scores/
-
Critical Flaw Detected in MiniOrange Plugins
Concerned about the vulnerability of WordPress plugins jeopardizing your website’s security? Did you know? Vulnerable plugins are the primary cause of… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/wordpress-critical-flaw-detected-in-miniorange-plugins/
-
Researchers Detail Kubernetes Vulnerability That Enables Windows Node Takeover
Details have been made public about a now-patched high-severity flaw in Kubernetes that could allow a malicious attacker to achieve remote code execut… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/researchers-detail-kubernetes.html
-
CVE-2023-52160: Wi-Fi Flaws Expose Android and Linux Devices
Two authentication bypass vulnerabilities were uncovered in open-source Wi-Fi software utilized across Android, Linux, and ChromeOS devices. These vul… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2023-52160-wi-fi-flaws/
-
Unsaflok flaws allow to open millions of doors using Dormakaba Saflok electronic locks
A flaw in Dormakaba Saflok electronic locks, dubbed Unsaflok, can allow threat actors to open millions of doors worldwide. Researchers Lennert Wouters… First seen on securityaffairs.com Jump to article: securityaffairs.com/160900/hacking/unsaflok-flaws-dormakaba-saflok-electronic-locks.html
-
Unsaflok flaw can let hackers unlock millions of hotel doors
Security vulnerabilities in over 3 million Saflok electronic RFID locks deployed in 13,000 hotels and homes worldwide allowed researchers to easily un… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/unsaflok-flaw-can-let-hackers-unlock-millions-of-hotel-doors/
-
Microsoft Xbox Gaming Services Flaw Let Attackers Gain SYSTEM Privileges
A new elevation of privilege vulnerability has been discovered in the Xbox Gaming services that allow a threat actor to elevate their privileges to th… First seen on gbhackers.com Jump to article: gbhackers.com/xbox-gaming-services-privilege-escalation/
-
DarkGate Malware Exploited Recently Patched Microsoft Flaw in Zero-Day Attack
A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus sof… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/darkgate-malware-exploits-recently.html
-
Exploit Released For Critical Fortinet RCE Flaw: Patch Soon!
FortiClientEMS (Enterprise Management Server), the security solution used for scalable and centralized management, was discovered with an SQL injectio… First seen on gbhackers.com Jump to article: gbhackers.com/exploit-fortinet-rce-flaw-patch/
-
Critical Fortinet’s FortiClient EMS flaw actively exploited in the wild
Researchers released a PoC exploit for a critical flaw in Fortinet’s FortiClient Enterprise Management Server (EMS) software, which is actively exploi… First seen on securityaffairs.com Jump to article: securityaffairs.com/160885/uncategorized/fortinet-forticlient-ems-critical-flaw.html
-
Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software
Fortinet has warned of a critical security flaw impacting its FortiClientEMS software that could allow attackers to achieve code execution on affected… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/fortinet-warns-of-severe-sqli.html
-
Attackers are exploiting JetBrains TeamCity flaw to deliver a variety of malware
Attackers are exploiting the recently patched JetBrains TeamCity auth bypass vulnerability (CVE-2024-27198) to deliver ransomware, cryptominers and re… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/03/21/exploiting-cve-2024-27198/
-
Apple M-Series FAIL: GoFetch Flaw Finds Crypto Keys
GoFAIL: Researchers worm their way into broken cache-filling microcode in most Macs and iPads. The post Researchers worm their way into broken cache-f… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/apple-m-gofetch-richixbw/
-
Unsaflok Vulnerability Lets Hackers Open 3M+ Hotel Doors in Seconds
A group of cybersecurity researchers has uncovered several critical security flaws in the Saflok electronic RFID locks by Dormakaba. These locks, wide… First seen on gbhackers.com Jump to article: gbhackers.com/unsaflok-vulnerability/
-
Ivanti urges customers to fix critical RCE flaw in Standalone Sentry solution
Ivanti urges customers to address a critical remote code execution vulnerability impacting the Standalone Sentry solution. Ivanti addressed a critical… First seen on securityaffairs.com Jump to article: securityaffairs.com/160864/security/ivanti-critical-rce.html
-
Fixes issued for several Atlassian flaws
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/fixes-issued-for-several-atlassian-flaws
-
AWS fixes 1-click Apache Airflow session hijack flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/aws-fixes-1-click-apache-airflow-session-hijack-flaw
-
Critical flaw in Atlassian Bamboo Data Center and Server must be fixed immediately
Atlassian fixed tens of vulnerabilities in Bamboo, Bitbucket, Confluence, and Jira products, including a critical flaw that can be very dangerous. Atl… First seen on securityaffairs.com Jump to article: securityaffairs.com/160838/security/atlassian-fixed-critical-flaw-cve-2024-1597.html
-
Threat actors actively exploit JetBrains TeamCity flaws to deliver malware
Multiple threat actors are exploiting the recently disclosed JetBrains TeamCity flaw CVE-2024-27198 in attacks in the wild. Trend Micro researchers ar… First seen on securityaffairs.com Jump to article: securityaffairs.com/160823/breaking-news/jetbrains-teamcity-flaws-actively-exploited.html