Tag: flaw
-
Critical Cisco Expressway Flaw Let Remote Execute Arbitrary Code
Cisco released patches to address multiple vulnerabilities in the Cisco Expressway Series that might allow an attacker to do arbitrary operations on a… First seen on gbhackers.com Jump to article: gbhackers.com/critical-cisco-expressway-flaw/
-
TeamCity Authentication Bypass Flaw Let Attackers Gain Admin Control
A critical security vulnerability was detected in TeamCity On-Premises, tagged as CVE-2024-23917, with a CVSS score of 9.8. An unauthenticated attacke… First seen on gbhackers.com Jump to article: gbhackers.com/teamcity-authentication-bypass-flaw/
-
New Fortinet RCE flaw in SSL VPN likely exploited in attacks
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-fortinet-rce-flaw-in-ssl-vpn-likely-exploited-in-attacks/
-
Apple and Google Just Patched Their First Zero-Day Flaws of the Year
First seen on wired.com Jump to article: www.wired.com/story/apple-google-zero-day-flaws-critical-update-january-2024/
-
CVE-2024-20253: Critical Code Execution Flaw in Cisco Products
Cisco has recently issued patches to rectify a critical security vulnerability affecting Unified Communications and Contact Center Solutions products,… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-20253-cisco/
-
CVE-2023-35081: Critical Flaw in Ivanti EPMM
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical flaw in Ivanti Endpoint Manager Mobile (EPMM) and MobileIron C… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2023-35081-ivanti-epmm/
-
TensorFlow CI/CD Flaws Create Risk of Supply Chain Attacks
Continuous integration and continuous delivery (CI/CD) misconfigurations discovered within the widely-used TensorFlow machine learning framework raise… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/tensorflow-ci-cd-flaws-risk-supply-chain-attacks/
-
Mispadu Trojan Now Exploiting CVE-2023-36025 Windows Flaw
The Mispadu banking Trojan has once again made headlines, leveraging a now-patched Windows SmartScreen security bypass flaw to compromise users in Mex… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/mispadu-trojan-exploiting-cve-2023-36025/
-
CVE-2023-40547: Shim RCE Flaw Impacts Major Linux Distros
The developers behind shim, the essential software component utilized as a first-stage boot loader on UEFI systems, have recently unveiled version 15…. First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2023-40547-shim-rce/
-
CVE-2024-21762: Critical Flaw in FortiOS SSL VPN Exploited
Fortinet has recently uncovered a critical security vulnerability, designated as CVE-2024-21762, within its FortiOS SSL VPN software. This flaw, with … First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-21762-fortios-ssl-vpn/
-
CVE-2024-21893: Ivanti Flaw Under Active, Mass Exploitation
A critical server-side request forgery vulnerability (CVE-2024-21893), affecting Ivanti Connect Secure and Policy Secure products has been exploited a… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-21893-ivanti-flaw-exploit/
-
CVE-2023-6246: GNU C Flaw Exposes Linux to Local Privilege Escalation
A newly disclosed security vulnerability in the GNU C library (glibc) has raised significant concerns within the cybersecurity community. Tracked as C… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2023-6246-gnu-c-flaw-linux/
-
CVE-2022-48618: Apple Flaw in macOS, iOS Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently added a high-severity flaw to its Known Exploited Vulnerabilities (KEV) cata… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2022-48618-macos-ios/
-
Patched Critical Flaw Exposed JetBrains TeamCity Servers
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/flaw-exposed-jetbrains-teamcity/
-
Twin Max-Severity Bugs Open Fortinet’s SIEM to Code Execution
Full 10s on the CVSS vulnerability severity scale have been assigned to two flaws discovered in Fortinet’s FortiSIEM cybersecurity operations platform… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/fortinet-fortisiem-hit-with-twin-max-severity-bugs
-
Flaw in AI Plugin Exposes 50,000 WordPress Sites to Remote Attack
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/flaw-ai-plugin-exposes-50000-wp/
-
How Security Flaws Work: The Buffer Overflow
Tags: flawFirst seen on http: Jump to article: packetstormsecurity.org/news/view/25725/How-Security-Flaws-Work-The-Buffer-Overflow.html
-
Apple iOS Ins0mnia Flaw Revealed By FireEye
First seen on http: Jump to article: packetstormsecurity.org/news/view/25729/Apple-iOS-Ins0mnia-Flaw-Revealed-By-FireEye.html
-
Security Flaw Found in Traffic Monitoring System
First seen on http: Jump to article: www.esecurityplanet.com/network-security/security-flaw-found-in-traffic-monitoring-system.html
-
Twitter Patches SMS Security Flaw
Tags: flawFirst seen on http: Jump to article: www.esecurityplanet.com/mobile-security/twitter-patches-sms-security-flaw.html
-
Six Security Flaws Fixed in BIND 9.9.2
A new version of the BIND DNS server software is available, fixing six security vulnerabilities and a long list of other bugs. BIND 9.9.2-P1 is mainly… First seen on http: Jump to article: threatpost.com/en_us/blogs/trusteer-more-chrome-64-bit-windows-malware-come-2013-120512
-
Twitter, Facebook affected by SMS spoofing flaw: Users who send and receive Twitter messages via text message fr…
Tags: flawFirst seen on http: Jump to article: bit.ly/11AyBFz
-
Twitter, Facebook affected by SMS spoofing flaw
Attackers could have mimicked users of Twitter and Facebook, as well as a mobile payments service, if they sent text messages to their accounts using … First seen on http: Jump to article: www.scmagazine.com/twitter-facebook-affected-by-sms-spoofing-flaw/article/271144/
-
Tumblr worm proliferated due to XSS flaw
First seen on http: Jump to article: net-security.org/secworld.php
-
[News] PayPal Fixes Trio of Remote-Access Vulnerabilities
PayPal has repaired three remote-access vulnerabilities found in different areas of its website, including a cross-site scripting (XSS) flaw on its Pa… First seen on http: Jump to article: feedproxy.google.com/~r/SecurityTube/~3/lQt8b0tjyeQ/1091
-
Researcher Finds 23 SCADA Flaws in One Morning
Tags: flawFirst seen on http: Jump to article: www.esecurityplanet.com/network-security/researcher-finds-23-scada-flaws-in-one-morning.html
-
Google Repairs High-Risk Flaw in Chrome
Google has fixed a couple of security vulnerabilities in its Chrome browser, including a high-risk use-after-free bug and a problem in the way that th… First seen on http: Jump to article: threatpost.com/en_us/blogs/how-tips-shopping-online-112012
-
Second person guilty in ATT iPad prank hack
More than two years after gray-hat hacker Andrew Auernheimer exploited a flaw in AT&T’s website, which led to users’ email addresses being leaked, a j… First seen on http: Jump to article: www.scmagazine.com/second-person-guilty-in-att-ipad-prank-hack/article/269837/
-
eBay patches two critical security flaws on US website
Tags: flawFirst seen on http: Jump to article: net-security.org/secworld.php
-
Researchers Warn of Belkin Router Security Flaw
First seen on http: Jump to article: www.esecurityplanet.com/wireless-security/researchers-warn-of-belkin-router-security-flaw.html