THREAT OPS › Threat News

Threat Intelligence News

12305 reports from 110+ open cyber-threat-intelligence sources — APT activity, malware, vulnerabilities and campaigns, newest first.

[NVD] CVE-2024-13461 (MEDIUM 6.4) — The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and ounvd · 2025-02-21
[NVD] CVE-2025-0624 (HIGH 7.6) — A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environmnvd · 2025-02-19
[NVD] CVE-2025-26465 (MEDIUM 6.8) — A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifyingnvd · 2025-02-18
[NVD] CVE-2025-1391 (MEDIUM 5.4) — A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a user if their username or email matches the organization’s domain pattern. This issue occurs at the mapper level, leading to misrepresentation in tokens. If an appnvd · 2025-02-17
[NVD] CVE-2025-1239 — A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code invd · 2025-02-14
[NVD] CVE-2025-1071 (MEDIUM 4.8) — A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code invd · 2025-02-14
[NVD] CVE-2025-0178 (MEDIUM 6.1) — An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poisonnvd · 2025-02-14
Multiple Russian Threat Actors Targeting Microsoft Device Code Authenticationvolexity · 2025-02-13
[NVD] CVE-2025-21701 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: avoid race between device unregistration and ethnl ops The following trace can be seen if a device is being unregistered while its number of channels are being modified. DEBUG_LOCKS_WARN_ON(lock->magic nvd · 2025-02-13
[NVD] CVE-2025-1247 (HIGH 8.3) — A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information.nvd · 2025-02-13
Binarly Tracking Updates for CVE-2024-56161 – A 'High Risk' Microcode Flaw in AMD CPU'sbinarly · 2025-02-13
[NVD] CVE-2025-1244 (HIGH 8.8) — A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a renvd · 2025-02-12
[NVD] CVE-2025-21699 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag Truncate an inode's address space when flipping the GFS2_DIF_JDATA flag: depending on that flag, the pages in the address space will either use bufnvd · 2025-02-12
[NVD] CVE-2025-21697 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Ensure job pointer is set to NULL after job completion After a job completes, the corresponding pointer in the device must be set to NULL. Failing to do so triggers a warning when unloading the driver,nvd · 2025-02-12
[NVD] CVE-2025-24472 (HIGH 8.1) — An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devicesnvd · 2025-02-11
[NVD] CVE-2025-21687 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.nvd · 2025-02-10
[NVD] CVE-2024-11831 (MEDIUM 5.4) — A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed whenvd · 2025-02-10
[NVD] CVE-2025-0938 — The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This nvd · 2025-01-31
[NVD] CVE-2025-21682 (HIGH 7.3) — In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp # ip li set dev eth0 xdp ofnvd · 2025-01-31
[NVD] CVE-2025-21678 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: gtp: Destroy device along with udp socket's netns dismantle. gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created. Even when src_net is removed, thenvd · 2025-01-31
[NVD] CVE-2025-21677 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcp_newlink() links the device to a list in dev_net(dev) instead of net, where a udp tunnel socket is created. Even when net is removed, the devicnvd · 2025-01-31
[NVD] CVE-2025-21676 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would snvd · 2025-01-31
[NVD] CVE-2025-21673 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server in cifs_put_tcp_session(), cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit thnvd · 2025-01-31
[NVD] CVE-2025-21669 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issnvd · 2025-01-31
[NVD] CVE-2025-23367 (MEDIUM 6.5) — A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monvd · 2025-01-30
[NVD] CVE-2025-23006 (CRITICAL 9.8) — Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrnvd · 2025-01-23
[NVD] CVE-2025-0604 (MEDIUM 5.4) — A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials against AD. This vulnerability allows users whose AD accounts are expired or disabled to regain access in Keyclnvd · 2025-01-22
[NVD] CVE-2024-11218 (HIGH 8.6) — A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and dnvd · 2025-01-22
[NVD] CVE-2025-21664 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: dm thin: make get_first_thin use rcu-safe list first function The documentation in rculist.h explains the absence of list_empty_rcu() and cautions programmers against relying on a list_empty() -> list_first() snvd · 2025-01-21
[NVD] CVE-2025-21663 (CRITICAL 10.0) — In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" (SID) to be written to the MGBE_WRAP_AXI_ASID0_CTRL register. The current driver isnvd · 2025-01-21
[NVD] CVE-2025-21661 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix missing lookup table cleanups When a virtuser device is created via configfs and the probe fails due to an incorrect lookup table, the table is not removed. This prevents subsequent probe atnvd · 2025-01-21
[NVD] CVE-2025-21659 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at thenvd · 2025-01-21
[NVD] CVE-2025-21655 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period io_eventfd_do_signal() is invoked from an RCU callback, but when dropping the reference to the io_ev_fd, it calls io_eventfd_free() directlnvd · 2025-01-20
[NVD] CVE-2025-21651 (MEDIUM 4.7) — In the Linux kernel, the following vulnerability has been resolved: net: hns3: don't auto enable misc vector Currently, there is a time window between misc irq enabled and service task inited. If an interrupte is reported at this time, it will cause warning like below: [ 16.nvd · 2025-01-19
[NVD] CVE-2025-21650 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue The TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs 1024-1279 are in different BAR space addresses. However, hclge_fetnvd · 2025-01-19
[NVD] CVE-2025-21649 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices Currently, HIP08 devices does not register the ptp devices, so the hdev->ptp is NULL. But the tx process would still try to set hardware time stampnvd · 2025-01-19
[NVD] CVE-2025-21647 (HIGH 7.3) — In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow countersnvd · 2025-01-19
[NVD] CVE-2025-21646 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs if someone actually does that: kafs tries to create a directory under /proc/net/anvd · 2025-01-19
[NVD] CVE-2025-21640 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: nvd · 2025-01-19
[NVD] CVE-2025-21638 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: gettnvd · 2025-01-19
[NVD] CVE-2025-21637 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: gettingnvd · 2025-01-19
[NVD] CVE-2024-57727 (HIGH 7.5) — SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration filenvd · 2025-01-15
[NVD] CVE-2025-21629 (HIGH 8.2) — In the Linux kernel, the following vulnerability has been resolved: net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets The blamed commit disabled hardware offoad of IPv6 packets with extension headers on devices that advertise NETIF_F_IPV6_CSUM, based on the definitionnvd · 2025-01-15
[NVD] CVE-2025-23366 (MEDIUM 6.5) — A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to nvd · 2025-01-14
[NVD] CVE-2024-12086 (MEDIUM 6.1) — A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the clinvd · 2025-01-14
[NVD] CVE-2024-12085 (HIGH 7.5) — A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a tinvd · 2025-01-14
[NVD] CVE-2024-55591 (CRITICAL 9.8) — An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to nvd · 2025-01-14
[NVD] CVE-2024-11736 (MEDIUM 4.9) — A vulnerability was found in Keycloak. Admin users may have to access sensitive server environment variables and system properties through user-configurable URLs. When configuring backchannel logout URLs or admin URLs, admin users can include placeholders like ${env.VARNAME} or $nvd · 2025-01-14
[NVD] CVE-2024-11734 (MEDIUM 6.5) — A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service. This action is done by modifying any of the security headers and inserting newlines, which causes the Keycloak server tonvd · 2025-01-14
Research that builds detectionsvirustotal_blog · 2025-01-09
[NVD] CVE-2025-0282 (CRITICAL 9.0) — A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.nvd · 2025-01-08
[NVD] CVE-2024-54010 (LOW 3.4) — A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires nvd · 2025-01-08
[NVD] CVE-2024-8447 (MEDIUM 5.9) — A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading tnvd · 2025-01-02
[NVD] CVE-2024-45497 (HIGH 7.6) — A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from privanvd · 2024-12-31
[NVD] CVE-2024-56639 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: net: hsr: must allocate more bytes for RedBox support Blamed commit forgot to change hsr_init_skb() to allocate larger skb for RedBox case. Indeed, send_hsr_supervision_frame() will add two additional componennvd · 2024-12-27
[NVD] CVE-2024-56545 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: streamline driver probe to avoid devres issues It was found that unloading 'hid_hyperv' module results in a devres complaint: ... hv_vmbus: unregistering driver hid_hyperv ------------[ cut hernvd · 2024-12-27
[NVD] CVE-2024-21549 (HIGH 8.6) — Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by utilizing view-source:file://, which allows for arbitrary file reading on a localnvd · 2024-12-20
[NVD] CVE-2024-51532 (HIGH 7.1) — Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.nvd · 2024-12-19
[NVD] CVE-2024-10973 (MEDIUM 5.7) — A vulnerability was found in Keycloak. The environment option `KC_CACHE_EMBEDDED_MTLS_ENABLED` does not work and the JGroups replication configuration is always used in plain text which can allow an attacker that has access to adjacent networks related to JGroups to read sensitivnvd · 2024-12-17
[NVD] CVE-2024-55956 (CRITICAL 9.8) — In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.nvd · 2024-12-13
[NVD] CVE-2024-52059 (HIGH 7.8) — Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.0.0 nvd · 2024-12-13
[NVD] CVE-2024-12397 (HIGH 7.4) — A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leadinvd · 2024-12-12
[NVD] CVE-2024-55550 (LOW 2.7) — Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to tnvd · 2024-12-10
[NVD] CVE-2024-12369 (MEDIUM 4.2) — A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's onvd · 2024-12-09
[NVD] CVE-2024-12254 (HIGH 7.5) — Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drainnvd · 2024-12-06
[NVD] CVE-2024-53920 (HIGH 7.8) — In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs nvd · 2024-11-27
[NVD] CVE-2024-11667 (HIGH 7.5) — A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versnvd · 2024-11-27
[NVD] CVE-2024-8676 (HIGH 7.4) — A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. As a result, the validnvd · 2024-11-26
[NVD] CVE-2024-9666 (MEDIUM 4.7) — A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a denial of service (DoS) attack due to improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifnvd · 2024-11-25
[NVD] CVE-2024-10492 (LOW 2.7) — A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, anvd · 2024-11-25
[NVD] CVE-2024-10451 (MEDIUM 5.9) — A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specifienvd · 2024-11-25
[NVD] CVE-2023-7299 (MEDIUM 6.3) — A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. Upgrading to version 4.7nvd · 2024-11-23
The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Accessvolexity · 2024-11-22
[NVD] CVE-2024-53063 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIG_DVB_DYNAMIC_MINORS is set or not. When not set, dvb_nvd · 2024-11-19
[NVD] CVE-2024-42450 (CRITICAL 10.0) — The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director convd · 2024-11-19
[NVD] CVE-2024-21539 (HIGH 7.5) — Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability.nvd · 2024-11-19
[NVD] CVE-2024-9474 (HIGH 7.2) — A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.nvd · 2024-11-18
[NVD] CVE-2024-0012 (CRITICAL 9.8) — An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authennvd · 2024-11-18
BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATAvolexity · 2024-11-15
Important Update: IP Address Change for VirusTotalvirustotal_blog · 2024-11-12
[NVD] CVE-2024-10963 (HIGH 7.4) — A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems thatnvd · 2024-11-07
[NVD] CVE-2024-21537 (HIGH 8.8) — Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function.nvd · 2024-10-31
[NVD] CVE-2024-51567 (CRITICAL 10.0) — upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell nvd · 2024-10-29
[NVD] CVE-2024-51378 (CRITICAL 10.0) — getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST requenvd · 2024-10-29
[NVD] CVE-2024-20260 (HIGH 8.6) — Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability affects all Cisco Secunvd · 2024-10-23
[NVD] CVE-2024-50312 (MEDIUM 5.3) — A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitanvd · 2024-10-22
[NVD] CVE-2024-10234 (MEDIUM 6.1) — A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.nvd · 2024-10-22
[NVD] CVE-2024-41713 (CRITICAL 9.1) — A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized accesnvd · 2024-10-21
[NVD] CVE-2024-50029 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync This checks if the ACL connection remains valid as it could be destroyed while hci_enhanced_setup_sync is pending on cmd_sync leading to the following tranvd · 2024-10-21
[NVD] CVE-2022-48979 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix array index out of bound error in DCN32 DML [Why&How] LinkCapacitySupport array is indexed with the number of voltage states and not the number of max DPPs. Fix the error by changing the arnvd · 2024-10-21
[NVD] CVE-2024-50017 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. When ident_pud_init() uses only GB pages to create identity maps, large ranges of addresses not actually requested can be included in the nvd · 2024-10-21
[NVD] CVE-2024-21536 (HIGH 7.5) — Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by making requests to nvd · 2024-10-19
Unveiling Hidden Connections: JA4 Client Fingerprinting on VirusTotalvirustotal_blog · 2024-10-18
[NVD] CVE-2024-21262 (MEDIUM 6.5) — Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Convd · 2024-10-15
[NVD] CVE-2024-21202 (MEDIUM 6.1) — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to cnvd · 2024-10-15
[NVD] CVE-2024-9675 (HIGH 7.8) — A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as lonvd · 2024-10-09
[NVD] CVE-2024-9680 (CRITICAL 9.8) — An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 1nvd · 2024-10-09
[NVD] CVE-2024-9621 (MEDIUM 5.3) — A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and nvd · 2024-10-08
[NVD] CVE-2024-9355 (MEDIUM 6.5) — A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when convd · 2024-10-01
[NVD] CVE-2024-9341 (MEDIUM 5.4) — A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting senvd · 2024-10-01