Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

Cybersecurity researchers have found that ransomware attacks targeting ESXi systems are also leveraging the access to repurpose the appliances as a conduit to tunnel traffic to command-and-control C2 infrastructure and stay under the radar. "ESXi appliances, which are unmonitored, are increasingl...

PT-2025-2188

Name of the Vulnerable Software and Affected Versions openshift-gitops-operator-container affected versions not specified ArgoCD affected versions not specified Description A flaw was found in the software, allowing a namespace to create a rogue PrometheusRule when the...

Schneider Electric EcoStruxure Power Monitoring Expert cross-site scripting vulnerability

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France for power distribution monitoring in IoT environments. A cross-site scripting vulnerability exists in the Schneider Electric EcoStruxure Power Monitoring Expert, which arises from improper input...

CVE-2024-13484: Exposure of Resource to Wrong Sphere

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

Argo CD security vulnerabilities

Argo CD is an Argo open source declarative GitOps continuous delivery tool for Kubernetes. A security vulnerability exists in Argo CD that stems from the fact that the openshift.io/cluster-monitoring tag is automatically applied to all namespaces where ArgoCD CR instances are deployed, allowing t...

CVE-2024-37526

creationtimestamp| type| source ---|---|--- 2025-01-27 21:58:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113902557559561784 2025-01-27 22:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxpcasxc2b...

CVE-2024-56960

creationtimestamp| type| source ---|---|--- 2025-01-27 19:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnobqxmh27 2025-01-27 19:19:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113901932858609641 2025-01-27 21:52:07+00:00| seen|...

CVE-2024-56948

creationtimestamp| type| source ---|---|--- 2025-01-27 18:49:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113901814745144782 2025-01-27 19:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnnjwp562f 2025-01-27 22:25:00+00:00| seen|...

Virtuozzo Hybrid Infrastructure 6.3 Update 1 (6.3.1-91)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover improvements in the compute service, core and object storage, as well as monitoring and alerting. Additionally, this release delivers stability and security improvements, and addresses issues found in...

CVE-2024-54728

creationtimestamp| type| source ---|---|--- 2025-01-26 15:54:39+00:00| confirmed| https://gist.github.com/xu-yanbo202000460009/00dacd7bfede713a0f052a531da4fabd 2025-01-26 17:57:50+00:00| seen| https://vulnerability.circl.lu/comment/21f63dda-f998-4c51-b7ce-6efc09015c56 2025-01-27 22:23:49+00:00|...

GHSA-36GQ-35J3-P9R9

creationtimestamp| type| source ---|---|--- 2025-01-23 15:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113878382100891566 2025-01-23 15:34:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113878400720241278 2025-04-26 00:07:36+00:00| published-proof-of-concept|...

USN-7226-1: Cacti vulnerability

It was discovered that Cacti did not properly sanitize the 'pollerid' parameter in the "remoteagent.php" file. A remote attacker could possibly use this issue to achieve remote code execution...

CVE-2025-0432

creationtimestamp| type| source ---|---|--- 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-06 2025-01-28 16:01:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113906816185786379 2025-01-28 16:16:26+00:00| seen|...

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Monitoring.

Summary ulnerabilities in IBM® SDK Java™ Technology Edition that is shipped as part of multiple IBM Tivoli Monitoring ITM components. CVEs: CVE-2024-21235, CVE-2024-21217, CVE-2024-21210, CVE-2024-21208 and CVE-2024-10917 Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Ja...

CVE-2025-21524

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics SEC. Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD...

CVE-2025-21524

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics SEC. Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD...

Imperva Protects Against the Exploited CVEs in the Cleo Data Theft Attacks

The Clop ransomware group has once again demonstrated its ability to exploit vulnerabilities to compromise sensitive systems. As Cleo—a managed file transfer provider for businesses—grapples with the aftermath of Clop’s targeted attack on their systems, the spotlight turns to CVE-2024-50623 and...

CVE-2024-45687

creationtimestamp| type| source ---|---|--- 2025-01-21 16:42:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113867340763127015 2025-01-21 17:00:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2427 2025-01-21 17:15:59+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release

A new version of Red Hat OpenShift distributed tracing platform Jaeger has been released Red Hat OpenShift distributed tracing platform based on Jaeger. Jaeger is a project inspired by Dapper and OpenZipkin. It is a distributed tracing system released as open source by Uber Technologies. It is us...

CVE-2025-21656

In the Linux kernel, the following vulnerability has been resolved: hwmon: drivetemp Fix driver producing garbage data when SCSI errors occur scsiexecutecmd function can return both negative linux codes and positive scsicmnd result field error codes. Currently the driver just passes error codes o...