Tag: remote-code-execution
-
Critical Auth Bugs Expose Smart Factory Gear to Cyberattack
Factory automation software from Mitsubishi Electric and Rockwell Automation could be subject to remote code execution (RCE), denial-of-service (DoS),… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/critical-auth-bugs-smart-factory-cyberattack
-
Critical Veeam RCE bug now used in Frag ransomware attacks
After being used in Akira and Fog ransomware attacks, a critical Veeam Backup & Replication (VBR) security flaw was also recently exploited to deploy Frag ransomware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-veeam-rce-bug-now-used-in-frag-ransomware-attacks/
-
Palo Alto Networks warns of potential RCE in PAN-OS management interface
Palo Alto Networks warns customers to restrict access to their next-generation firewalls because of a potential RCE flaw in the PAN-OS management interface. Palo Alto Networks warns customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability in PAN-OS. The cybersecurity company has no further details on…
-
Oracle WebLogic Server Remote Code Execution Vulnerability (CVE-2024-21216)
Overview Recently, NSFOCUS CERT detected that Oracle issued a security announcement and fixed the deserialization vulnerability in WebLogic Server (CVE-2024-21216). Since WebLogic does not strictly filter incoming data through the T3/IIOP protocol, when the T3/IIOP protocol is enabled, an unauthenticated remote attacker sends a special request to the server through the T3/IIOP protocol to execute…The…
-
Palo Alto Networks warns of potential PAN-OS RCE vulnerability
Palo Alto Networks warned customers to restrict access to their next-generation firewalls because of a potential remote code execution vulnerability in the PAN-OS management interface. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-potential-pan-os-rce-vulnerability/
-
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services
Tags: access, botnet, cloud, credentials, exploit, flaw, infrastructure, Internet, iot, malware, remote-code-execution, service, threat, vulnerabilityThe threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware.”This botnet utilizes remote code execution and credential-stealing methods to maintain persistent access, leveraging unpatched vulnerabilities to infiltrate critical infrastructures,” CloudSEK said in a First seen on thehackernews.com Jump…
-
DEF CON 32 QuickShell Sharing Is Caring About RCE Attack Chain On QuickShare Or Yair, Shmuel Cohen
Authors/Presenters: Or Yair, Shmuel Cohen Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/def-con-32-quickshell-sharing-is-caring-about-rce-attack-chain-on-quickshare-or-yair-shmuel-cohen/
-
HPE warns of critical RCE flaws in Aruba Networking access points
Hewlett Packard Enterprise (HPE) released updates for Instant AOS-8 and AOS-10 software to address two critical vulnerabilities in Aruba Networking Access Points. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hpe-warns-of-critical-rce-flaws-in-aruba-networking-access-points/
-
Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)
Synology has released fixes for an unauthenticated >>zero-click
-
Microsoft SharePoint RCE bug exploited to breach corporate network
Tags: breach, corporate, cve, exploit, microsoft, network, rce, remote-code-execution, vulnerabilityA recently disclosed Microsoft SharePoint remote code execution (RCE) vulnerability tracked as CVE-2024-38094 is being exploited to gain initial acces… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-sharepoint-rce-bug-exploited-to-breach-corporate-network/
-
Yahoo Discloses NetIQ iManager Flaws Allowing Remote Code Execution
Yahoo researchers found nearly a dozen vulnerabilities in OpenText’s NetIQ iManager and some could have been chained for unauthenticated RCE. The post… First seen on securityweek.com Jump to article: www.securityweek.com/yahoo-discloses-netiq-imanager-flaws-allowing-remote-code-execution/
-
qBittorrent fixes flaw exposing users to MitM attacks for 14 years
qBittorrent has addressed a remote code execution flaw caused by the failure to validate SSL/TLS certificates in the application’s DownloadManager, a … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qbittorrent-fixes-flaw-exposing-users-to-mitm-attacks-for-14-years/
-
CVE-2024-9680 Mozilla Firefox Security Vulnerability October 2024
A critical vulnerability (CVE-2024-9680) in Mozilla Firefox exposes systems to remote code execution by exploiting memory handling flaws. Affected Pl… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/cve-2024-9680-mozilla-firefox-security-vulnerability-october-2024/
-
VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability
VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution.T… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/vmware-releases-vcenter-server-update.html
-
Massive PSAUX ransomware attack targets 22,000 CyberPanel instances
Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware attac… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/massive-psaux-ransomware-attack-targets-22-000-cyberpanel-instances/
-
Week in review: Fortinet patches critical FortiManager 0-day, VMware fixes vCenter Server RCE
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Fortinet releases patches for publicly undisclosed c… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/27/week-in-review-fortinet-patches-critical-fortimanager-0-day-vmware-fixes-vcenter-server-rce/
-
Xerox Printers Vulnerable to Remote Code Execution Attacks
Multiple Xerox printer models, including EC80xx, AltaLink, VersaLink, and WorkCentre, have been identified as vulnerable to an authenticated remote co… First seen on gbhackers.com Jump to article: gbhackers.com/xerox-printers-vulnerable/
-
Fortinet Confirms Zero-Day Exploit Targeting FortiManager Systems
Fortinet confirms zero-day exploits hitting critical (CVSS severity score 9.8/10) remote code execution bug in the FortiManager platform. The post For… First seen on securityweek.com Jump to article: www.securityweek.com/fortinet-confirms-zero-day-exploit-targeting-fortimanager-systems/
-
VMware fixes critical vCenter Server RCE bug again! (CVE-2024-38812)
Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter Server, one of which hasn’t been fu… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/22/cve-2024-38812-cve-2024-38813-fixed-again/
-
VMware patching of identified vCenter RCE hits snag
First seen on scworld.com Jump to article: www.scworld.com/brief/vmware-patching-of-identified-vcenter-rce-hits-snag
-
‘Patch yesterday’: Zimbra mail servers under siege through RCE vuln
First seen on theregister.com Jump to article: www.theregister.com/2024/10/02/mass_exploitation_of_zimbra_rce/
-
VMware fixes bad patch for critical vCenter Server RCE flaw
VMware has released another security update for CVE-2024-38812, a critical VMware vCenter Server remote code execution vulnerability that was not corr… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/vmware-fixes-bad-patch-for-critical-vcenter-server-rce-flaw/
-
FortiJump: Yet Another Critical Fortinet 0-Day RCE
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/fortinet-fortijump-0day-richixbw/
-
VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812
VMware addressed a remote code execution flaw, demonstrated in a Chinese hacking contest, for the second time in two months. VMware failed to fully ad… First seen on securityaffairs.com Jump to article: securityaffairs.com/170096/security/vmware-failed-to-fix-rce-vcenter-server-cve-2024-38812.html
-
CISA Warns Recent Microsoft SharePoint RCE Flaw Exploited in Attacks
CISA has added a recent Microsoft SharePoint Server remote code execution vulnerability to the KEV catalog. The post CISA Warns Recent Microsoft Share… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-recent-microsoft-sharepoint-rce-flaw-exploited-in-attacks/
-
Critical Grafana Vulnerability Could Allow RCE
First seen on scworld.com Jump to article: www.scworld.com/brief/critical-grafana-vulnerability-could-allow-rce
-
Talos discovers denialservice vulnerability in Microsoft Audio Bus; Potential remote code execution in popular open-source PLC
First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/talos-discovers-denial-of-service-vulnerability-in-microsoft-audio-bus-potential-remote-code-execution-in-popular-open-source-plc/
-
VMware Struggles to Fix Flaw Exploited at Chinese Hacking Contest
For the second time in as many months, VMware patches a remote code execution vulnerability first exploited at a Chinese hacking contest in June. The … First seen on securityweek.com Jump to article: www.securityweek.com/vmware-struggles-to-fix-flaw-exploited-at-chinese-hacking-contest/
-
SolarWinds Web Help Desk Vulnerability Allows Remote Code Execution
A critical vulnerability in SolarWinds Web Help Desk has been identified. It could allow attackers to execute arbitrary code on affected systems. The … First seen on gbhackers.com Jump to article: gbhackers.com/solarwinds-web-help-desk-vulnerability/
-
Splunk Enterprise Update Patches Remote Code Execution Vulns
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36473/Splunk-Enterprise-Update-Patches-Remote-Code-Execution-Vulns.html