IT-Sicherheitsupdates | Stinner IT Solutions

Ignite Realtime Openfire Path Traversal Vulnerability (CVE-2023-32315)

von | 1. Mai 2024 | Unkategorisiert

What is the vulnerability?The CVE-2023-32315 is a path traversal vulnerability that affects all Openfire versions since version 3.1.0. Successful exploitation of this vulnerability can allow attackers to bypass authentication and gain access to sections of the...

CrushFTP VFS Sandbox Escape Vulnerability (CVE-2024-4040)

von | 26. Apr. 2024 | Unkategorisiert

What is the Vulnerability ? A zero-day security vulnerability has been uncovered in an enterprise file-transfer software CrushFTP. The vulnerability tagged as CVE-2024-4040 is actively being exploited in targeted attacks and has also been added to the CISA Known...

ArcaneDoor Attack (CVE-2024-20353 and CVE-2024-20359)

von | 24. Apr. 2024 | Unkategorisiert

What is the Attack? Cisco issued an advisory on 24th April, regarding its Adaptive Security Appliances, multifunctional devices combining firewall, VPN, and other security functions. It reported that these appliances had become the focus of state-sponsored espionage,...

Akira Ransomware Attack

von | 20. Apr. 2024 | Unkategorisiert

What is the Akira Ransomware Attack? The Akira ransomware attack has actively and widely impacting businesses. According to CISA advisory, the ransomware group has impacted over 250 organizations and claimed approximately $42 million (USD) in ransomware proceeds. The...

PAN-OS Critical Flaw in GlobalProtect Gateway (CVE-2024-3400)

von | 12. Apr. 2024 | Unkategorisiert

What is the vulnerability/attack? A critical unauthenticated remote code injection vulnerability in the PAN-OS GlobalProtect Gateway was discovered. This vulnerability tracked under CVE-2024-3400 has a CVSS rating of 10.0. The GlobalProtect Gateway provides security...

XZ Utils Supply Chain Attack (CVE-2024-3094)

von | 2. Apr. 2024 | Unkategorisiert

What is the vulnerability/attack? A malicious code was discovered embedded in the XZ Utils which is a data compression software included in major Linux distributions. This vulnerability tracked under CVE-2024-3094 is a result of a supply chain attack on the versions...

Adobe ColdFusion Access Control Bypass (CVE-2023-26347, CVE-2023-38205)

von | 30. März 2024 | Unkategorisiert

What is the vulnerability? The Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by Improper Access Control vulnerabilities that could result in a security bypass. Exploitation of these vulnerabilities could give attacker access to...

Apache OFBiz Authentication Bypass (CVE-2023-51467, CVE-2023-49070)

von | 30. März 2024 | Unkategorisiert

What is the vulnerability? There is an authentication bypass vulnerability in Apache OFBiz tracked under CVE-2023-51467 and CVE-2023-49070. Successful exploitation would let an attacker circumvent authentication processes, enabling them to remotely execute arbitrary...

Atlassian Confluence Remote Code Execution (CVE-2023-22527)

von | 30. März 2024 | Unkategorisiert

What is the Vulnerability? On Jan 16 2024, Atlassian released an advisory for a template injection vulnerability on Confluence Data Center and Server. That can allow an unauthenticated attacker to remotely execute malicious code on affected versions. This...

Ivanti Connect Secure and Policy Secure Gateways Zero-day Vulnerabilities (CVE-2023-46805, CVE-2024-21887, CVE-2024-21888, CVE-2024-21893)

von | 30. März 2024 | Unkategorisiert

What is the Vulnerability? Ivanti recently published an advisory on two vulnerabilities on Jan 10, 2024 affecting Ivanti Connect Secure (ICS) and Ivanti Policy Secure Gateways (CVE-2023-46805 and CVE-2024-21887). The vulnerabilities are an authentication bypass and...

« Ältere Einträge

Nächste Einträge »