Tag: remote-code-execution
-
Arc browser launches bug bounty program after fixing RCE bug
The Browser Company has introduced an Arc Bug Bounty Program to encourage security researchers to report vulnerabilities to the project and receive re… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/arc-browser-launches-bug-bounty-program-after-fixing-rce-bug/
-
Critical Zimbra RCE flaw actively exploited to take over servers
Hackers are actively exploiting a recently disclosed RCE vulnerability in Zimbra email servers that can be triggered simply by sending specially craft… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-zimbra-rce-flaw-actively-exploited-to-take-over-servers/
-
Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk
A critical security flaw has been disclosed in the Microchip Advanced Software Framework (ASF) that, if successfully exploited, could lead to remote c… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/critical-flaw-in-microchip-asf-exposes.html
-
CUPS vulnerabilities affecting Linux, Unix systems can lead to RCE
After much hyping and following prematurely leaked information by a third party, security researcher Simone Margaritelli has released details about fo… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/27/cups-vulnerabilities/
-
CUPS vulnerabilities put Linux systems at risk of remote code execution
First seen on scworld.com Jump to article: www.scworld.com/news/cups-vulnerabilities-put-linux-systems-at-risk-of-remote-code-execution
-
CUPS flaws enable Linux remote code execution, but there’s a catch
Under certain conditions, attackers can chain a set of vulnerabilities in multiple components of the CUPS open-source printing system to execute arbit… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cups-flaws-enable-linux-remote-code-execution-but-theres-a-catch/
-
Remote Code Execution Vulnerability Alert of Unix CUPS Print Service (CVE-2024-47076 / CVE-2024-47175 / CVE-2024-47177)
Overview Recently, NSFOCUS CERT monitored the disclosure of the details of remote code execution vulnerabilities for Unix CUPS printing service on the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/remote-code-execution-vulnerability-alert-of-unix-cups-print-service-cve-2024-47076-cve-2024-47175-cve-2024-47177/
-
CUPS flaws allow remote code execution on Linux systems under certain conditions
A researcher has disclosed details of an unpatched Linux vulnerability, initially labeled as critical, that allows remote code execution. The popular … First seen on securityaffairs.com Jump to article: securityaffairs.com/169001/hacking/cups-flaws-allow-rce-on-linux-systems.html
-
Critical RCE vulnerability found in OpenPLC
Cisco’s Talos reported critical and high-severity flaws in OpenPLC that could lead to DoS condition and remote code execution. Cisco’s Talos threat in… First seen on securityaffairs.com Jump to article: securityaffairs.com/168953/ics-scada/openplc-critical-flaw.html
-
Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than Expected
A researcher has disclosed the details of an unpatched vulnerability that was expected to pose a serious threat to many Linux systems. The post Highly… First seen on securityweek.com Jump to article: www.securityweek.com/highly-anticipated-linux-flaw-allows-remote-code-execution-but-less-serious-than-expected/
-
Remote Code Execution, DoS Vulnerabilities Patched in OpenPLC
Critical and high-severity vulnerabilities that can be exploited for DoS attacks and remote code execution have been patched in OpenPLC. The post Remo… First seen on securityweek.com Jump to article: www.securityweek.com/remote-code-execution-dos-vulnerabilities-patched-in-openplc/
-
Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution
Broadcom on Tuesday released updates to address a critical security flaw impacting VMware vCenter Server that could pave the way for remote code execu… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/patch-issued-for-critical-vmware.html
-
Doomsday ‘9.9 RCE bug’ might hit every Linux system
First seen on theregister.com Jump to article: www.theregister.com/2024/09/26/unauthenticated_rce_bug_linux/
-
1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/poc-exploit-for-rce-flaw-but-patches-from-veeam
-
Exploiting Exploiting Exchange PowerShell After ProxyNotShell: Part 3 DLL Loading Chain for RCE
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36374/Exploiting-Exploiting-Exchange-PowerShell-After-ProxyNotShell-Part-3-DLL-Loading-Chain-for-RCE.html
-
Open Source C3 Frameworks Used In Red Teaming Assessments Vulnerable To RCE Attacks
C2 frameworks, crucial for post-exploitation operations, offer open-source alternatives to Cobalt Strike. They streamline the management of compromise… First seen on gbhackers.com Jump to article: gbhackers.com/c3-framework-rce-vulnerability/
-
Open Source C2 Frameworks Used In Red Teaming Assessments Vulnerable To RCE Attacks
C2 frameworks, crucial for post-exploitation operations, offer open-source alternatives to Cobalt Strike. They streamline the management of compromise… First seen on gbhackers.com Jump to article: gbhackers.com/c2-framework-rce-vulnerability/
-
SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks
SolarWinds has released fixes to address two security flaws in its Access Rights Manager (ARM) software, including a critical vulnerability that could… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/solarwinds-issues-patch-for-critical.html
-
FreeBSD RCE Vulnerability Let Attackers Execute Malicious Code
FreeBSD has disclosed a critical remote code execution (RCE) vulnerability affecting its bhyve hypervisor. This vulnerability, CVE-2024-41721, could a… First seen on gbhackers.com Jump to article: gbhackers.com/freebsd-rce-vulnerability/
-
Google Fixes GCP Composer Flaw That Could’ve Led to Remote Code Execution
A now-patched critical security flaw impacting Google Cloud Platform (GCP) Composer could have been exploited to achieve remote code execution on clou… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/google-fixes-gcp-composer-flaw-that.html
-
Critical vulnerabilities in Microchip ASF, MediaTek expose RCE risks
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/critical-vulnerabilities-in-microchip-asf-mediatek-expose-rce-risks
-
CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability Deep-Dive
On August 13, 2024, SolarWinds released a security advisory for Web Help Desk (WHD) that detailed a deserialization remote code execution vulnerabilit… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/cve-2024-28987-solarwinds-web-help-desk-hardcoded-credential-vulnerability-deep-dive/
-
Zero-Click RCE Bug in macOS Calendar Exposes iCloud Data
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/zero-click-rce-bug-macos-calendar-exposes-icloud-data
-
Rockwell Automation PLC Software Contains RCE Flaw
Attackers Could Shut Down Operations Or Cause Physical Damage. A severe vulnerability in Rockwell Automation software used to configure programmable l… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/rockwell-automation-plc-software-contains-rce-flaw-a-26346
-
D-Link patches 5 vulnerabilities including RCE, hard-coded credential flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/d-link-patches-5-vulnerabilities-including-rce-hard-coded-credential-flaws
-
Broadcom fixes critical RCE bug in VMware vCenter Server
Broadcom has fixed a critical VMware vCenter Server vulnerability that attackers can exploit to gain remote code execution on unpatched servers via a … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/broadcom-fixes-critical-rce-bug-in-vmware-vcenter-server/
-
D-Link addressed three critical RCE in wireless router models
D-Link fixed multiple critical flaws in its WiFi 6 routers that allow remote attackers to execute arbitrary code or gain hardcoded credentials. D-Link… First seen on securityaffairs.com Jump to article: securityaffairs.com/168471/security/d-link-rce-wireless-router-models.html
-
VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest
VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10. The post … First seen on securityweek.com Jump to article: www.securityweek.com/vmware-patches-remote-code-execution-flaw-found-in-chinese-hacking-contest/
-
Exploit code released for critical Ivanti RCE flaw, patch now
A proof-of-concept (PoC) exploit for CVE-2024-29847, a critical remote code execution (RCE) vulnerability in Ivanti Endpoint Manager, is now publicly … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/exploit-code-released-for-critical-ivanti-rce-flaw-patch-now/
-
SolarWinds fixed critical RCE CVE-2024-28991 in Access Rights Manager
SolarWinds addressed a critical remote code execution vulnerability, tracked as CVE-2024-28991, in Access Rights Manager. SolarWinds released security… First seen on securityaffairs.com Jump to article: securityaffairs.com/168456/security/solarwinds-fixed-rce-cve-2024-28991.html