CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-5910 CVS...

CVE-2024-47131

creationtimestamp| type| source ---|---|--- 2024-11-07 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-02 2024-11-08 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1463/ 2024-11-08 06:00:00+00:00| seen|...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on November 7, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-312-01 Beckhoff Automation TwinCAT Package Manager ICSA-24-312-02 Delta Electronics...

CVE-2024-47253

creationtimestamp| type| source ---|---|--- 2024-11-05 12:11:38+00:00| seen| https://t.me/cvedetector/9854 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17...

CVE-2024-47254

creationtimestamp| type| source ---|---|--- 2024-11-05 12:11:38+00:00| seen| https://t.me/cvedetector/9853 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17...

CVE-2024-47255

creationtimestamp| type| source ---|---|--- 2024-11-05 12:11:34+00:00| seen| https://t.me/cvedetector/9852 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-17...

Why your vote can’t be “hacked,” with Cait Conley of CISA (Lock and Code S05E23)

This week on the Lock and Code podcast … The US presidential election is upon the American public, and with it come fears of "election interference." But "election interference" is a broad term. It can mean the now-regular and expected foreign disinformation campaigns that are launched to sow...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8957link is external PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability CVE-2024-8956link is external PTZOptics PT30X-SDI/NDI Cameras...

CVE-2024-8934

creationtimestamp| type| source ---|---|--- 2024-10-31 15:16:18+00:00| seen| https://t.me/cvedetector/9502 2024-11-07 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-01 2024-11-11 13:31:49+00:00| seen| Telegram/D2pvGkTuSuQoHjEgXF6pNqwYJdL2ayIHlXfl1SpKeACj8...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on October 31, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-305-01 Rockwell Automation FactoryTalk ThinManager ICSA-24-030-02 Mitsubishi Electric...

Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

Fortinet has updated their security advisory addressing a critical FortiManager vulnerability CVE-2024-47575 to include additional workarounds and indicators of compromise IOCs. A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive files or take...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on October 29, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-303-01 Siemens InterMesh Subscriber Devices ICSA-24-303-02 Solar-Log Base 15...

CVE-2024-10456

creationtimestamp| type| source ---|---|--- 2024-10-29 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-303-03 2024-10-30 20:03:08+00:00| seen| https://t.me/cvedetector/9455 2024-11-06 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1457/...

Delta Electronics InfraSuite Device Master

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Delta Electronics Equipment : InfraSuite Device Master Vulnerability : Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

Solar-Log Base 15

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Solar-Log Equipment : Base 15 Vulnerability : Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' 2. RISK EVALUATION Successful...

Hitachi Energy MSM (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to impact the confidentiality, integrity or availability of the MSM. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA...

webkitgtk: Arbitrary Remote Code Execution

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog...

CVE-2024-10386

creationtimestamp| type| source ---|---|--- 2024-10-25 20:25:58+00:00| seen| https://t.me/cvedetector/8968 2024-10-31 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-305-01 2024-11-08 19:52:48+00:00| seen| https://t.me/icscert/945 2026-06-28 04:37:07+00:00| seen|...

CVE-2024-10387

creationtimestamp| type| source ---|---|--- 2024-10-25 20:25:43+00:00| seen| https://t.me/cvedetector/8957 2024-10-31 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-305-01 2026-07-11 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqfawtcnq227...

RockyLinux 8 : thunderbird (RLSA-2024:8024)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8024 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the RockyLin...