7076 matches found
KLA73905 PE vulnerability in Microsoft Apps
An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43604 Related products Microsoft-Outlook CVE list CVE-2024-43604 high Solution Install necessary updates from the KB section, that a...
PT-2024-6728 · Microsoft · Office Visio
Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to a lack of warning about dangerous actions in the Microsoft Office Visio graphic editor, which is part of Microsoft Office and Microsoft 365 Apps for...
The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise, related to the possibility of exploiting memory after deallocation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise is related to the possibility of exploiting memory after release. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
PT-2024-6768 · Microsoft · 365 Apps For Enterprise +3
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified...
PT-2025-7908 · Zoom · Zoom Workplace Apps
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to incorrect user management in some Zoom Workplace Apps, which may allow a privileged user to conduct an information disclosure via network access...
PT-2024-7214 · Microsoft · 365 Apps For Enterprise +1
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the use of an insecure search path in Microsoft Office and Microsoft 365 Apps for Enterpri...
PT-2024-6793 · Microsoft · 365 Apps For Enterprise +1
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the use of an unreliable path search in Microsoft Office and Microsoft 365 Apps for...
THN Cybersecurity Recap: Top Threats and Trends (Sep 30 - Oct 6)
Ever heard of a "pig butchering" scam? Or a DDoS attack so big it could melt your brain? This week's cybersecurity recap has it all – government showdowns, sneaky malware, and even a dash of app store shenanigans. Get the scoop before it's too late! ⚡ Threat of the Week Double Trouble: Evil Corp&...
The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma, which allows attackers to induce a service failure.
The vulnerability of HTTP servers for Ruby/Rack applications related to HTTP request processing flaws. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma allows attackers to access confidential information.
The vulnerability of HTTP servers for Ruby/Rack applications developed by Puma relates to the exposure of confidential information to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...
Fake Trading Apps Target Victims Globally via Apple App Store and Google Play
A large-scale fraud campaign leveraged fake trading apps published on the Apple App Store and Google Play Store, as well as phishing sites, to defraud victims, per findings from Group-IB. The campaign is part of a consumer investment fraud scheme that's also widely known as pig butchering, in whi...
Pig Butchering: Fake Trading Apps Target Crypto on Apple, Google Play Stores
Pig Butchering scam targets crypto users with fake trading apps on Apple and Google Play Stores. Disguised as…...
Session Hijacking 2.0 — The Latest Way That Attackers are Bypassing MFA
Attackers are increasingly turning to session hijacking to get around widespread MFA adoption. The data supports this, as: 147,000 token replay attacks were detected by Microsoft in 2023, a 111% increase year-over-year Microsoft. Attacks on session cookies now happen in the same order of magnitud...
PT-2024-32393
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2024.8.3 authentik versions prior to 2024.6.5 Description The issue allows access tokens issued to one application to be stolen and used to impersonate the user against any other proxy provider. A user can also stea...
CVE-2024-47048
Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps...
Rocket.Chat 安全漏洞
Rocket.Chat is a chat program from Rocket.Chat, Inc. A security vulnerability exists in Rocket.Chat that stems from storing cross-site scripting in the description and release notes of marketplace and private applications. The following versions are affected: version 6.12.0, version 6.11.2, versi...
Necro Android Malware Found in Popular Camera and Browser Apps on Play Store
Altered versions of legitimate Android apps associated with Spotify, WhatsApp, and Minecraft have been used to deliver a new version of a known malware loader called Necro. Kaspersky said some of the malicious apps have also been found on the Google Play Store. They have been cumulatively...
Kaspersky Exits U.S., Automatically Replaces Software With UltraAV, Raising Concerns
Antivirus vendor Kaspersky has formally begun pulling back its offerings in the U.S., migrating existing users to UltraAV, effective September 19, 2024, ahead of its formal exit at the end of the month. "Kaspersky antivirus customers received a software update facilitating the transition to...
