IT-Sicherheitsupdates | Stinner IT Solutions

Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability (CVE-2024-8190)

von | 13. Sep. 2024 | Unkategorisiert

What is the Vulnerability?An OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) version 4.6 allows an authenticated attacker to remotely execute code. The attacker must have admin level privileges to exploit the vulnerability tagged as...

Versa Director Dangerous File Type Upload Vulnerability (CVE-2024-39717)

von | 27. Aug. 2024 | Unkategorisiert

What is the Vulnerability?The Versa Director GUI contains a zero-day dangerous file type upload vulnerability (CVE-2024-39717) that allows attackers to upload potentially malicious files, granting them system administrator access. This flaw effects the “Change...

Microsoft Multiple Actively Exploited Vulnerabilities

von | 15. Aug. 2024 | Unkategorisiert

What are the Vulnerabilities?Threat actors are exploiting multiple zero-day vulnerabilities that were recently disclosed on the Microsoft Security Updates- August 2024. The six actively exploited zero-day vulnerabilities were also added to CISA’s Known Exploited...

SnakeKeylogger Attack

von | 1. Aug. 2024 | Unkategorisiert

What is the Attack?Threat actors are continuously preying on end users to unknowingly install a trojan stealer known as SnakeKeylogger or KrakenKeylogger. This trojan was developed using .NET and targets Windows users. Its arsenal includes keystroke logging,...

VMware ESXi Ransomware Attack (CVE-2024-37085)

von | 1. Aug. 2024 | Unkategorisiert

What is the Attack?Threat actors are exploiting an authentication bypass vulnerability in ESXi hypervisors, known as CVE-2024-37085, to gain full administrative permissions on domain-joined ESXi hypervisors. This flaw allows threat actors to encrypt critical ESXi...

ServiceNow Improper Input Validation Vulnerability (CVE-2024-4879)

von | 29. Juli 2024 | Unkategorisiert

What is the vulnerability?A critical input validation vulnerability (CVE-2024–4879) is identified in ServiceNow’s Now platform hosted in Vancouver and Washington DC, exploiting this vulnerability could lead to potential data breaches and unauthorized system access....

Threat Actors leveraging the recent CrowdStrike update outage

von | 23. Juli 2024 | Unkategorisiert

DescriptionFortiGuard Labs is aware of the campaigns used by threat actors to spread malware, using phishing and scams to take advantage of the recent widespread global IT outage affecting Microsoft Windows hosts. This outage is due to an issue with a recent...

SolarWinds Serv-U Information Disclosure Vulnerability (CVE-2024-28995)

von | 17. Juli 2024 | Unkategorisiert

What is the Vulnerability?A Directory Traversal Vulnerability in SolarWinds Serv-U software is being actively exploited in the wild. Tracked as CVE-2024-28995, the vulnerability is due to improper validation of the user-supplied inputs. An attacker could exploit this...

Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-38112)

von | 16. Juli 2024 | Unkategorisiert

What is the Vulnerability?CVE-2024-38112 is a spoofing vulnerability in Windows MSHTML Platform. The attacker can abuse internet shortcuts and Microsoft protocol handlers to execute malicious code. This vulnerability is known to be used by attackers to deliver...

Progress Telerik Report Server Authentication Bypass Vulnerability

von | 8. Juli 2024 | Unkategorisiert

What is the Vulnerability?Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability, allowing an attacker to bypass authentication and create rogue administrator users. The flaw, tracked as CVE-2024-4358, has been added to CISA’s known...