5572 matches found
CISA Releases One Industrial Control Systems Advisory
CISA released one Industrial Control Systems ICS advisory on April 2, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-093-01 IOSIX IO-1020 Micro ELD CISA encourages users and administrators to review the newly...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 Detection and Remediation Script This script is...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094-Vulnerabity-Checker Verify that your XZ Utils ve...
CISA Urges Patching Microsoft SharePoint Vulnerability (CVE-2023-24955)
By Deeba Ahmed Critical Microsoft SharePoint Flaw Exploited: Patch Now, CISA Urges! This is a post from HackRead.com Read the original post: CISA Urges Patching Microsoft SharePoint Vulnerability CVE-2023-24955...
CVE-2024-28085
creationtimestamp| type| source ---|---|--- 2024-03-27 17:32:04+00:00| seen| https://t.me/ctinow/213097 2024-03-29 05:47:29+00:00| seen| https://t.me/proxybar/1971 2024-03-29 12:02:12+00:00| seen| https://t.me/thehackernews/4753 2024-03-29 12:09:59+00:00| seen| https://t.me/KomunitiSiber/1709...
CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a security flaw impacting the Microsoft Sharepoint Server to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation in the wild. The vulnerability, tracked as CVE-2023-24955 CVSS score: 7.2,...
CVE-2024-2466
creationtimestamp| type| source ---|---|--- 2024-03-27 12:46:26+00:00| seen| https://t.me/ctinow/213004 2024-03-29 21:46:25+00:00| seen| https://t.me/ctinow/213434 2024-04-09 20:36:22+00:00| seen| https://t.me/arpsyndicate/4417 2024-11-14 12:00:00+00:00| seen|...
CVE-2024-2398
creationtimestamp| type| source ---|---|--- 2024-03-27 11:46:35+00:00| seen| https://t.me/ctinow/212989 2024-04-09 21:25:46+00:00| seen| https://t.me/arpsyndicate/4427 2024-04-23 13:46:41+00:00| seen| https://t.me/ctinow/216035 2024-11-14 12:00:00+00:00| seen|...
CVE-2024-2379
creationtimestamp| type| source ---|---|--- 2024-03-27 10:57:00+00:00| seen| https://t.me/ctinow/212981 2024-03-29 20:51:30+00:00| seen| https://t.me/ctinow/213427 2024-04-09 20:08:09+00:00| seen| https://t.me/arpsyndicate/4411 2024-11-14 12:00:00+00:00| seen|...
CISA Releases Four Industrial Control Systems Advisories
CISA released four Industrial Control Systems ICS advisories on March 26, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-086-01 Automation-Direct C-MORE EA9 HMI ICSA-24-086-02 Rockwell Automation PowerFlex 52...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...
Hitachi Energy MACH SCM (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.9 ATTENTION : Exploitable remotely Vendor : Hitachi Energy Equipment : MACH SCM Vulnerabilities : Improper Control of Generation of Code, Improper Neutralization of Directives in Dynamically Evaluated Code 2. RISK EVALUATION Successful exploitation of...
CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday placed three security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities added are as follows - CVE-2023-48788 CVSS score: 9.3 - Fortinet FortiClient EMS SQL...
CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities
Today, CISA and the Federal Bureau of Investigation FBI released a joint Secure by Design Alert, Eliminating SQL Injection Vulnerabilities in Software. This Alert was crafted in response to a recent, well-publicized exploitation of SQL injection SQLi defects in a managed file transfer application...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance EPM CSA Code Injection Vulnerabilit...
CISA Releases One Industrial Control Systems Advisory
CISA released one Industrial Control Systems ICS advisory on March 21, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-081-01 Advantech WebAccess/SCADA CISA encourages users and administrators to review the...
Advantech WebAccess/SCADA
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Advantech Equipment : WebAccess/SCADA Vulnerability : SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...
HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...
U.S. EPA Forms Task Force to Protect Water Systems from Cyberattacks
The U.S. Environmental Protection Agency EPA said it's forming a new "Water Sector Cybersecurity Task Force" to devise methods to counter the threats faced by the water sector in the country. "In addition to considering the prevalent vulnerabilities of water systems to cyberattacks and the...
CISA Releases One Industrial Control Systems Advisory
CISA released one Industrial Control Systems ICS advisory on March 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-079-01 Franklin Fueling System EVO 550/5000 CISA encourages users and administrators to...