9971 matches found
mailcow Dockerized 2FA Bypass
The vulnerability of the two-factor authentication 2FA mechanism in the Docker-based mailcow:dockerized deployment and management system is related to the lack of security measures for the website structure. Exploiting this vulnerability allows an attacker to bypass 2FA protection and gain...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat
TomcatScanPro README Version: EnglishREADMEEN.m...
AI Pulse: Sticker Shock, Rise of the Agents, Rogue AI
This issue of AI Pulse is all about agentic AI: what it is, how it works, and why security needs to be baked in from the start to prevent agentic AI systems from going rogue once they’re deployed...
CVE-2024-45054
Hwameistor is an HA local storage system for cloud-native stateful workloads. This ClusterRole has verbs of resources. If a malicious user can access the worker node which has hwameistor's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the whole cluster,...
Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 3
Package name: xms10.16.0.10318.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10205.bin, xms10.16.0.10108.bin Date: August 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this a...
PT-2024-31387 · Amazon · Aws Cloud Development Kit
Name of the Vulnerable Software and Affected Versions: AWS Cloud Development Kit CDK versions 2.142.0 through 2.148.0 Description: The issue in AWS Cloud Development Kit CDK can result in granting authenticated Amazon Cognito users broader than intended access. Specifically, if a CDK application...
Citrix DAAS: After creating machine Catalog, VDAs gets deleted after Turning them ON in Azure
After creating Machine Catalog and Delivery Group, VDAs would get deleted after turning them ON in Azure. These happens to Windows 11 Single and Multi session VDAs Error: FailureMessage: Error starting machine. At least one resource deployment operation failed...
JFrog 安全漏洞
JFrog is an application from JFrog, Inc. that provides an end-to-end pipeline to control the flow of binaries from build to production. A security vulnerability exists in JFrog. An attacker exploiting this vulnerability could remotely execute code...
ZOHO ManageEngine OpManager RMM 安全漏洞
ZOHO ManageEngine OpManager RMM is a remote monitoring and management software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine OpManager RMM version 128329 and prior versions, which stems from a remote code execution contained in the deployment agent option...
Windows deployment service Code Execution
The vulnerability of Windows operating system deployment services relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Octopus Server 安全漏洞
Octopus Server is a deployment automation and release management tool for continuous delivery from Octopus Australia. A security vulnerability exists in Octopus Server that stems from a cookie using the wrong expiration time...
Agentless is a DAM Better Option for Securing Cloud Data
When it comes to on-premises database activity monitoring DAM, security teams have consistently relied on agents to seamlessly track all incoming requests and outgoing responses within the databases. The agent-based approach effectively ensures independent monitoring of database activity,...
upKeeper 安全漏洞
upKeeper is a cloud-based or local solution from upKeeper, Inc. A security vulnerability exists in upKeeper version 5.1.9 and prior versions that stems from the presence of a vulnerability that improperly restricts excessive authentication attempts, allowing for misuse of authentication...
Black Basta-Linked Attackers Target Users with SystemBC Malware
An ongoing social engineering campaign with alleged links to the Black Basta ransomware group has been linked to "multiple intrusion attempts" with the goal of conducting credential theft and deploying a malware dropper called SystemBC. "The initial lure being utilized by the threat actors remain...
CVE-2024-38138
Windows Deployment Services Remote Code Execution Vulnerability...
CVE-2024-38138
Windows Deployment Services Remote Code Execution Vulnerability...
CVE-2024-38138 Windows Deployment Services Remote Code Execution Vulnerability
...
CVE-2024-38138 Windows Deployment Services Remote Code Execution Vulnerability
...
CVE-2024-38138
Technical details (affected products/versions/root cause/impact/remediation) are not present in the provided documents. Monitor for updates from Microsoft and CVE databases for concrete details, fixes, and confirmed impact.