Tag: remote-code-execution
-
DEF CON 32 Outlook Unleashing RCE Chaos CVE 2024 30103
Authors/Presenters: Michael Gorelik, Arnold Osipov Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/def-con-32-outlook-unleashing-rce-chaos-cve-2024-30103/
-
Revamped Remcos RAT Deployed Against Microsoft Windows Users
Tags: exploit, malicious, microsoft, office, rat, remote-code-execution, risk, tool, vulnerability, windowsWindows users are at risk for full device takeover by an emerging malicious version of the Remcos remote admin tool, which is being used in an ongoing campaign exploiting a known remote code execution (RCE) vulnerability in Microsoft Office and WordPad. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/revamped-remcos-rat-microsoft-windows-users
-
Palo Alto Networks Addresses Remote Code Execution Vulnerability Claims
Palo Alto Networks has issued an advisory urging customers to take action in response to claims of an RCE vulnerability in PAN-OS. The post Palo Alto Networks Addresses Remote Code Execution Vulnerability Claims appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-addresses-remote-code-execution-vulnerability-claims/
-
Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns
Palo Alto Networks on Friday issued an informational advisory urging customers to ensure that access to the PAN-OS management interface is secured because of a potential remote code execution vulnerability.”Palo Alto Networks is aware of a claim of a remote code execution vulnerability via the PAN-OS management interface,” the company said. “At this time, we…
-
Critical Auth Bugs Expose Smart Factory Gear to Cyberattack
Factory automation software from Mitsubishi Electric and Rockwell Automation could be subject to remote code execution (RCE), denial-of-service (DoS),… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/critical-auth-bugs-smart-factory-cyberattack
-
Critical Veeam RCE bug now used in Frag ransomware attacks
After being used in Akira and Fog ransomware attacks, a critical Veeam Backup & Replication (VBR) security flaw was also recently exploited to deploy Frag ransomware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-veeam-rce-bug-now-used-in-frag-ransomware-attacks/
-
Palo Alto Networks warns of potential RCE in PAN-OS management interface
Palo Alto Networks warns customers to restrict access to their next-generation firewalls because of a potential RCE flaw in the PAN-OS management interface. Palo Alto Networks warns customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability in PAN-OS. The cybersecurity company has no further details on…
-
Oracle WebLogic Server Remote Code Execution Vulnerability (CVE-2024-21216)
Overview Recently, NSFOCUS CERT detected that Oracle issued a security announcement and fixed the deserialization vulnerability in WebLogic Server (CVE-2024-21216). Since WebLogic does not strictly filter incoming data through the T3/IIOP protocol, when the T3/IIOP protocol is enabled, an unauthenticated remote attacker sends a special request to the server through the T3/IIOP protocol to execute…The…
-
Palo Alto Networks warns of potential PAN-OS RCE vulnerability
Palo Alto Networks warned customers to restrict access to their next-generation firewalls because of a potential remote code execution vulnerability in the PAN-OS management interface. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-potential-pan-os-rce-vulnerability/
-
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services
Tags: access, botnet, cloud, credentials, exploit, flaw, infrastructure, Internet, iot, malware, remote-code-execution, service, threat, vulnerabilityThe threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware.”This botnet utilizes remote code execution and credential-stealing methods to maintain persistent access, leveraging unpatched vulnerabilities to infiltrate critical infrastructures,” CloudSEK said in a First seen on thehackernews.com Jump…
-
DEF CON 32 QuickShell Sharing Is Caring About RCE Attack Chain On QuickShare Or Yair, Shmuel Cohen
Authors/Presenters: Or Yair, Shmuel Cohen Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/def-con-32-quickshell-sharing-is-caring-about-rce-attack-chain-on-quickshare-or-yair-shmuel-cohen/
-
HPE warns of critical RCE flaws in Aruba Networking access points
Hewlett Packard Enterprise (HPE) released updates for Instant AOS-8 and AOS-10 software to address two critical vulnerabilities in Aruba Networking Access Points. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hpe-warns-of-critical-rce-flaws-in-aruba-networking-access-points/
-
Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)
Synology has released fixes for an unauthenticated >>zero-click
-
Microsoft SharePoint RCE bug exploited to breach corporate network
Tags: breach, corporate, cve, exploit, microsoft, network, rce, remote-code-execution, vulnerabilityA recently disclosed Microsoft SharePoint remote code execution (RCE) vulnerability tracked as CVE-2024-38094 is being exploited to gain initial acces… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-sharepoint-rce-bug-exploited-to-breach-corporate-network/
-
Yahoo Discloses NetIQ iManager Flaws Allowing Remote Code Execution
Yahoo researchers found nearly a dozen vulnerabilities in OpenText’s NetIQ iManager and some could have been chained for unauthenticated RCE. The post… First seen on securityweek.com Jump to article: www.securityweek.com/yahoo-discloses-netiq-imanager-flaws-allowing-remote-code-execution/
-
qBittorrent fixes flaw exposing users to MitM attacks for 14 years
qBittorrent has addressed a remote code execution flaw caused by the failure to validate SSL/TLS certificates in the application’s DownloadManager, a … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qbittorrent-fixes-flaw-exposing-users-to-mitm-attacks-for-14-years/
-
CVE-2024-9680 Mozilla Firefox Security Vulnerability October 2024
A critical vulnerability (CVE-2024-9680) in Mozilla Firefox exposes systems to remote code execution by exploiting memory handling flaws. Affected Pl… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/cve-2024-9680-mozilla-firefox-security-vulnerability-october-2024/
-
VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability
VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution.T… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/vmware-releases-vcenter-server-update.html
-
Massive PSAUX ransomware attack targets 22,000 CyberPanel instances
Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware attac… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/massive-psaux-ransomware-attack-targets-22-000-cyberpanel-instances/
-
Week in review: Fortinet patches critical FortiManager 0-day, VMware fixes vCenter Server RCE
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Fortinet releases patches for publicly undisclosed c… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/27/week-in-review-fortinet-patches-critical-fortimanager-0-day-vmware-fixes-vcenter-server-rce/
-
Xerox Printers Vulnerable to Remote Code Execution Attacks
Multiple Xerox printer models, including EC80xx, AltaLink, VersaLink, and WorkCentre, have been identified as vulnerable to an authenticated remote co… First seen on gbhackers.com Jump to article: gbhackers.com/xerox-printers-vulnerable/
-
Fortinet Confirms Zero-Day Exploit Targeting FortiManager Systems
Fortinet confirms zero-day exploits hitting critical (CVSS severity score 9.8/10) remote code execution bug in the FortiManager platform. The post For… First seen on securityweek.com Jump to article: www.securityweek.com/fortinet-confirms-zero-day-exploit-targeting-fortimanager-systems/
-
VMware fixes critical vCenter Server RCE bug again! (CVE-2024-38812)
Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter Server, one of which hasn’t been fu… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/22/cve-2024-38812-cve-2024-38813-fixed-again/
-
VMware patching of identified vCenter RCE hits snag
First seen on scworld.com Jump to article: www.scworld.com/brief/vmware-patching-of-identified-vcenter-rce-hits-snag
-
‘Patch yesterday’: Zimbra mail servers under siege through RCE vuln
First seen on theregister.com Jump to article: www.theregister.com/2024/10/02/mass_exploitation_of_zimbra_rce/
-
VMware fixes bad patch for critical vCenter Server RCE flaw
VMware has released another security update for CVE-2024-38812, a critical VMware vCenter Server remote code execution vulnerability that was not corr… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/vmware-fixes-bad-patch-for-critical-vcenter-server-rce-flaw/
-
FortiJump: Yet Another Critical Fortinet 0-Day RCE
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/fortinet-fortijump-0day-richixbw/
-
VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812
VMware addressed a remote code execution flaw, demonstrated in a Chinese hacking contest, for the second time in two months. VMware failed to fully ad… First seen on securityaffairs.com Jump to article: securityaffairs.com/170096/security/vmware-failed-to-fix-rce-vcenter-server-cve-2024-38812.html
-
CISA Warns Recent Microsoft SharePoint RCE Flaw Exploited in Attacks
CISA has added a recent Microsoft SharePoint Server remote code execution vulnerability to the KEV catalog. The post CISA Warns Recent Microsoft Share… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-recent-microsoft-sharepoint-rce-flaw-exploited-in-attacks/
-
Critical Grafana Vulnerability Could Allow RCE
First seen on scworld.com Jump to article: www.scworld.com/brief/critical-grafana-vulnerability-could-allow-rce