CISA Warns of Actively Exploited Apache Flink Security Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a security flaw impacting Apache Flink, an open-source, unified stream-processing and batch-processing framework, to the Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Tracked as...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability These type...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery CSRF Vulnerability CVE-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability...

CVE-2024-1914

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible. The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially...

CVE-2024-1914

CVE-2024-1914 affects ABB RobotWare components (IRC5 and OmniCore) with vulnerable RobotWare 6.x < 6.15.06 (except 6.10.10 and 6.13.07) and RobotWare 7.x

CVE-2024-1913

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code. The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Thes...

CVE-2024-3721

creationtimestamp| type| source ---|---|--- 2024-05-12 07:03:09+00:00| published-proof-of-concept| https://t.me/CNArsenal/2452 2024-05-12 07:03:15+00:00| published-proof-of-concept| Telegram/iVgfHplacJEpT4rWtryJFXtFKeaBDadlcEFrO5VYeH14xfY- 2024-10-24 00:00:00+00:00| exploited| The Shadowserver...

CVE-2024-34257

creationtimestamp| type| source ---|---|--- 2024-05-08 19:49:47+00:00| seen| https://t.me/arvinclub1/1106 2024-05-12 15:24:25+00:00| seen| Telegram/JOaFkPNkwLfjNX0z8OGxDVp4kHME6sGW7nkxX49akSUzp7M 2024-05-12 15:24:25+00:00| seen| https://t.me/LockBitRaasRansomware/27259 2024-12-27 00:00:00+00:00|...

State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

A new malware campaign leveraged two zero-day flaws in Cisco networking gear to deliver custom malware and facilitate covert data collection on target environments. Cisco Talos, which dubbed the activity ArcaneDoor, attributed it as the handiwork of a previously undocumented sophisticated...

ArcaneDoor Unlocked: Tackling State-Sponsored Cyber Espionage in Network Perimeters

Cisco recently uncovered a sophisticated cyber espionage campaign, ArcaneDoor, targeting perimeter network devices used by government and critical infrastructure sectors. This campaign involves state-sponsored actors exploiting two zero-day vulnerabilities CVE-2024-20353 and CVE-2024-20359 aimed...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability CVE-2024-4040 CrushFTP VFS Sandbo...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors an...

CVE-2024-27954

creationtimestamp| type| source ---|---|--- 2024-04-19 06:03:11+00:00| published-proof-of-concept| https://t.me/codeb0ss/1403 2024-11-01 14:06:28+00:00| published-proof-of-concept| https://t.me/HackerArsenal/680 2024-11-01 21:44:33+00:00| published-proof-of-concept|...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-3272 D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability CVE-2024-3273 D-Link Multiple NAS Devices Command Injection Vulnerability These...

CVE-2024-29059

creationtimestamp| type| source ---|---|--- 2024-03-25 13:00:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6850 2024-03-25 15:32:15+00:00| published-proof-of-concept| https://t.me/CNArsenal/2179 2024-03-25 15:32:50+00:00| published-proof-of-concept|...

CVE-2023-49785

creationtimestamp| type| source ---|---|--- 2024-03-12 01:26:57+00:00| seen| https://t.me/ctinow/205222 2024-03-12 01:26:58+00:00| seen| https://t.me/ctinow/205223 2024-03-13 08:39:26+00:00| seen| https://t.me/arpsyndicate/4186 2024-03-13 14:00:55+00:00| seen| https://t.me/truesecator/5515...

CVE-2024-21899

creationtimestamp| type| source ---|---|--- 2024-03-08 18:26:57+00:00| seen| https://t.me/ctinow/203490 2024-03-08 18:32:03+00:00| seen| https://t.me/ctinow/203502 2024-03-10 08:00:37+00:00| seen| https://t.me/RussianOSINT/3820 2024-03-11 15:40:05+00:00| seen| https://t.me/truesecator/5506...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23225 Apple iOS and iPadOS Memory Corruption Vulnerability CVE-2024-23296 Apple iOS and iPadOS Memory Corruption Vulnerability These types of vulnerabilities a...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-21237 Android Pixel Information Disclosure Vulnerability CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity These types of vulnerabilities are...