LR pixel

Windows CLFS Driver Elevation of Privilege

von | 11. Apr. 2025 | Unkategorisiert

What is the Vulnerability?A zero-day vulnerability has recently been identified in the Common Log File System (CLFS) kernel driver. CLFS is a general-purpose logging subsystem within the Windows operating system that provides a high-performance way to store log data...

CrushFTP Authentication Bypass

von | 9. Apr. 2025 | Unkategorisiert

What is the Vulnerability?FortiGuard Labs has observed in-the-wild attack attempts targeting CVE-2025-31161, an authentication bypass vulnerability in CrushFTP managed file transfer (MFT) software. Successful exploitation may grant attackers administrative access to...

Kubernetes Ingress-nginx Controller RCE

von | 3. Apr. 2025 | Unkategorisiert

What is the Vulnerability?On March 24, researchers disclosed a set of five vulnerabilities, collectively known as “IngressNightmare,” affecting Ingress-nginx, one of the popular ingress controllers available for Kubernetes. Using Ingress-NGINX is one of the most...

Apache Tomcat RCE

von | 26. März 2025 | Unkategorisiert

What is the Vulnerability?On March 10, 2025, Apache issued a security advisory regarding a critical vulnerability (CVE-2025-24813) affecting the Apache Tomcat web server. This flaw could allow attackers to view or inject arbitrary content into security-sensitive files...

GitHub Actions Supply Chain Attack

von | 25. März 2025 | Unkategorisiert

What is the Attack?Recently, a popular third-party GitHub Action tj-actions/changed-files GitHub Action (CVE-2025-30066)- used by over 23,000 repositories- was compromised, potentially exposing sensitive workflow secrets in any pipeline that integrated it.It was later...

Hitachi Vantara Pentaho BA Server Vulnerabilities

von | 4. März 2025 | Unkategorisiert

What is the Vulnerability?Threat actors are actively exploiting vulnerabilities in the Hitachi Vantara Pentaho Business Analytics Server. FortiGuard network sensors have detected attack attempts on over 500 devices, and CISA has added these vulnerabilities to the...

Palo Alto PAN-OS Authentication Bypass

von | 21. Feb. 2025 | Unkategorisiert

What is the Vulnerability? A recent authentication bypass vulnerability (CVE-2025-0108) in the Palo Alto Networks PAN-OS software is under active exploitation as has been added to CISA’s Known Exploited Vulnerabilities (KEV) Catalog. Successful exploitation of...