PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet

A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service DoS condition. Repeated attempts to trigger this condition will result in PAN-OS entering...

firefox: thunderbird: External protocol handlers could be enumerated via popups

The Mozilla Foundation's Security Advisory: By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed...

Social Media Accounts: The Weak Link in Organizational SaaS Security

Social media accounts help shape a brand's identity and reputation. These public forums engage directly with customers as they are a hub to connect, share content and answer questions. However, despite the high profile role these accounts have, many organizations overlook social media account...

CVE-2024-25282

creationtimestamp| type| source ---|---|--- 2024-10-09 07:17:02+00:00| seen| https://t.me/cvedetector/7420...

MAL-2024-9139 Malicious code in code-script-new-viking-simulator-script-hm9gi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058793c63bd85edadc62fdaf3684566ed1bc0687f28f5d5f36b5f5d3cb1ca680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2024:3544-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-43567

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review...

Cloud Logging Tip & Tricks: Getting the most value out of your cloud logs

In the cloud, logs are often the only way to get real-time visibility into what's happening, making them critical to any cloud detection and response program...

The Value of AI-Powered Identity

Introduction Artificial intelligence AI deepfakes and misinformation may cause worry in the world of technology and investment, but this powerful, foundational technology has the potential to benefit organizations of all kinds when harnessed appropriately. In the world of cybersecurity, one of th...

CVE-2024-9621

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

CVE-2024-44674

creationtimestamp| type| source ---|---|--- 2024-10-07 20:58:58+00:00| seen| https://t.me/cvedetector/7256...

Hybrid Analysis Utilizes Criminal IP’s Robust Domain Data for Better Malware Detection

Torrance, United States / California, 7th October 2024, CyberNewsWire...

The vulnerability of the graphical interface of the FortiSandbox threat detection and mitigation system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FortiSandbox threat detection and mitigation graphical interface is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially...

Stealthy Malware Has Infected Thousands of Linux Systems for Years

Perfctl malware is hard to detect, persists after reboots, and can perform a breadth of malicious activities...

Exploit for OS Command Injection in Php

CVE-2024-4577 Vulnerability Checker The CVE-2024-4577 Vulnera...

NuGet Package 'Microsoft.SemanticKernel.Abstractions' Detection

The remote host has a 'Microsoft.SemanticKernel.Abstractions' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

NuGet Package 'Microsoft.Extensions.ML' Detection

The remote host has a 'Microsoft.Extensions.ML' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

NuGet Package 'Microsoft.Recognizers.Text.Sequence' Detection

The remote host has a 'Microsoft.Recognizers.Text.Sequence' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Weights & Biases Weave Detection

A Weights & Biases Weave Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208128; scriptversion"1.6";...

NuGet Package 'Microsoft.Data.Analysis' Detection

The remote host has a 'Microsoft.Data.Analysis' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...