CVE-2024-9926

creationtimestamp| type| source ---|---|--- 2024-11-01 20:26:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8922 2024-11-07 15:07:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113442293015659790 2024-11-07 16:56:07+00:00| seen| https://t.me/cvedetector/10094...

CVE-2024-50387

creationtimestamp| type| source ---|---|--- 2024-10-31 10:54:39+00:00| published-proof-of-concept| https://t.me/truesecator/6377 2024-12-06 16:36:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113606852969444783 2024-12-06 18:58:19+00:00| seen| https://t.me/cvedetector/12250 2025-07-...

The vulnerability of the Internet Key Exchange version 2 module in the Cisco Secure Client security solution (formerly known as Cisco AnyConnect Secure Mobility Client) allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange version 2 module in the Cisco Secure Client security solution formerly known as Cisco AnyConnect Secure Mobility Client is related to a integer overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions...

K000148343: Diffie-Hellman key exchange protocol vulnerability CVE-2024-41996

Security Advisory Description Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers from the client side to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client...

Investigating a SharePoint Compromise: IR Tales from the Field

Executive summary Rapid7’s Incident Response team recently investigated a Microsoft Exchange service account with domain administrator privileges. Our investigation uncovered an attacker who accessed a server without authorization and moved laterally across the network, compromising the entire...

CVE-2024-50508

creationtimestamp| type| source ---|---|--- 2024-10-30 10:00:48+00:00| seen| https://t.me/cvedetector/9411 2025-01-06 20:19:31+00:00| seen| https://infosec.exchange/users/randomrobbie/statuses/113783260541864521...

CVE-2024-50509

creationtimestamp| type| source ---|---|--- 2024-10-30 10:00:48+00:00| seen| https://t.me/cvedetector/9412 2025-01-06 20:19:37+00:00| seen| https://infosec.exchange/users/randomrobbie/statuses/113783260932309163...

CVE-2024-50507

creationtimestamp| type| source ---|---|--- 2024-10-30 10:00:47+00:00| seen| https://t.me/cvedetector/9410 2025-01-06 20:19:43+00:00| seen| https://infosec.exchange/users/randomrobbie/statuses/113783261277012382...

F5 Networks BIG-IP : Diffie-Hellman key exchange protocol vulnerability (K000148343)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148343 advisory. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is...

The vulnerability of the 1C-Bitrix website content management system, related to insufficient protection of registration data, allows a hacker to gain access to authentication data from the Microsoft Exchange Server server.

The vulnerability of the 1C-Bitrix website content management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to authentication data from the Microsoft Exchange Server server...

SEC Charges 4 Companies Over Misleading SolarWinds Cyber Attack Disclosures

The U.S. Securities and Exchange Commission SEC has charged four current and former public companies for making "materially misleading disclosures" related to the large-scale cyber attack that stemmed from the hack of SolarWinds in 2020. The SEC said the companies – Avaya, Check Point, Mimecast,...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082 This repository contains a proof-of-concept P...

The vulnerability of the Microsoft Exchange Server mail server, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Exchange Server lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2024-20474

A vulnerability in Internet Key Exchange version 2 IKEv2 processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this...

CVE-2024-20426

A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for VPN termination of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

CVE-2024-20426

A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for VPN termination of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

PT-2024-7498 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for...

CVE-2024-40493

Null Pointer Dereference in coapclientexchangeblockwise2 function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes coapmsggetpayloadresp to return a null pointer, which is then...

CVE-2024-9287

creationtimestamp| type| source ---|---|--- 2024-10-22 20:28:27+00:00| seen| https://t.me/cvedetector/8629 2024-11-24 16:11:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113538804768487071 2025-02-14 10:00:29+00:00| seen| Telegram/Uukhpa6TqypHAxo-YZhlLIpVOs3eq1iiw3n-5vN2xYMvMPP-...

SUSE CVE-2024-50062

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment For RTRS path establishment, RTRS client initiates and completes connum of connections. After establishing all its connections, the information is exchanged betwee...