Black Basta-Linked Attackers Target Users with SystemBC Malware

An ongoing social engineering campaign with alleged links to the Black Basta ransomware group has been linked to "multiple intrusion attempts" with the goal of conducting credential theft and deploying a malware dropper called SystemBC. "The initial lure being utilized by the threat actors remain...

CVE-2024-38138

Windows Deployment Services Remote Code Execution Vulnerability...

CVE-2024-38138

Windows Deployment Services Remote Code Execution Vulnerability...

CVE-2024-38138 Windows Deployment Services Remote Code Execution Vulnerability

...

CVE-2024-38138

Technical details (affected products/versions/root cause/impact/remediation) are not present in the provided documents. Monitor for updates from Microsoft and CVE databases for concrete details, fixes, and confirmed impact.

CVE-2024-38138 Windows Deployment Services Remote Code Execution Vulnerability

...

Exploit for Observable Discrepancy in 42Gears Suremdm

CVE-2023-3897 Username enumeration is possible through Bypassi...

Description of the security update for Project 2016: August 13, 2024 (KB5002561)

None None...

PT-2024-5707 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to a use-after-free memory vulnerability in Windows Deployment Services. This vulnerability can be exploited by a remote attacker to execute arbitra...

Microsoft Windows Deployment Services 资源管理错误漏洞

Microsoft Windows Deployment Services is a setup container for Microsoft Corporation's Windows Deployment Services, an updated and redesigned version of Remote Installation Services RIS, which can be used to set up new computers via network-based unattended installations. A resource management...

Siemens COMOS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) JetBrains TeamCity, related to improperly used standard permissions, allows a hacker to increase their privileges.

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

Subscription Health Dashboard Update: Optimize Deployments and Identify Issues

For VM teams navigating the complex realm of cybersecurity tools, ensuring deployment health is paramount. Swift methods are required to pinpoint issues amidst complexity. Challenges such as duplicate entries, ghost hosts, and decommissioned devices can obstruct these views, hindering data...

Description of the security update for Office 2016: August 13, 2024 (KB5002570)

None None...

CVE-2024-42347

Affects matrix-react-sdk (Matrix web client component). A malicious homeserver could manipulate a user’s account data to enable URL previews in end-to-end encrypted rooms, causing URLs from encrypted messages to be sent to the server. This is mitigated by upgrading to matrix-react-sdk version 3.1...

CVE-2024-41820 Cluster-level privilege escalation in kubean

Kubean is a cluster lifecycle management toolchain based on kubespray and other cluster LCM engine. The ClusterRole has verbs of resources. If a malicious user can access the worker node which has kubean's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the...

The vulnerability of the adminPushRules function in the Project-level Deploy Token Handler component of the software platform based on Git, which facilitates collaborative code development in GitLab. This vulnerability allows a malicious user to create deployment tokens at the project level.

The vulnerability of the adminPushRules function in the Project-level Deploy Token Handler component of the software platform based on Git for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to crea...

CVE-2024-7458 elunez eladmin Database Management/Deployment Management upload path traversal

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversa...

CVE-2024-7458

CVE-2024-7458 affects elunez eladmin up to version 2.7. The vulnerability arises from path traversal via the file argument in the endpoints /api/deploy/upload and /api/database/upload within Database Management/Deployment Management. This can lead to accessing files outside the intended directory...

CVE-2024-7458 elunez eladmin Database Management/Deployment Management upload path traversal

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversa...