VMware Enhanced Authentication Plug-in Security Vulnerability

The VMware Enhanced Authentication Plug-in is part of the VMware Horizon client from VMware, Inc. and is used to provide an additional authentication layer to enhance the security of access to VMware Horizon virtual desktops and applications. A security vulnerability exists in VMware Enhanced...

PT-2024-1777 · Vmware · Vmware Enhanced Authentication Plug-In

Name of the Vulnerable Software and Affected Versions: VMware Enhanced Authentication Plug-in EAP affected versions not specified Description: The issue is related to arbitrary authentication relay and session hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in EAP. Th...

Microsoft Exchange vulnerability actively exploited

As it turns out, there was another actively exploited vulnerability included in Microsoft’s patch Tuesday updates for February. When Microsoft said in its update guide for CVE-2024-21410 that the vulnerability was likely to be exploited by attackers, they weren’t kidding. Soon after they changed...

Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation

Microsoft on Wednesday acknowledged that a newly disclosed critical security flaw in Exchange Server has been actively exploited in the wild, a day after it released fixes for the vulnerability as part of its Patch Tuesday updates. Tracked as CVE-2024-21410 CVSS score: 9.8, the issue has been...

Schneider Electric Harmony Control Relay Authorization Issue Vulnerability

The Schneider Electric Harmony Control Relay is a three-phase monitoring relay from Schneider Electric France. An authorization issue vulnerability exists in the Schneider Electric Harmony Control Relay RMNF22TB30, which stems from the presence of an incorrect authentication vulnerability that...

CVE-2024-21410

creationtimestamp| type| source ---|---|--- 2024-02-13 20:37:02+00:00| seen| https://t.me/ctinow/184168 2024-02-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1227 2024-02-14 16:13:10+00:00| seen| https://t.me/itsecnews/4112 2024-02-15 06:21:50+00:00| exploited|...

PT-2024-1645

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions prior to 2019 Cumulative Update 14 Description The vulnerability in Microsoft Exchange Server allows attackers to escalate privileges in NTLM relay attacks, potentially leading to unauthorized access to...

The vulnerability of the microprogrammed software of the three-phase voltage control relay Harmony Control Relay RMNF22TB30 and the Harmony Timer Relay RENF22R2MMW allows a intruder to alter the device’s configuration.

The vulnerability of the microprogrammed voltage-controlled relays Harmony Control Relay RMNF22TB30 and Harmony Timer Relay RENF22R2MMW lies in errors during privilege management. Exploiting this vulnerability could allow an attacker to remotely alter the device’s configuration...

HIMA Paul Hildebrandt Multiple Product Access Control Error Vulnerability

The HIMA Paul Hildebrandt F Series and the HIMA Paul Hildebrandt X Series are both a line of electronic components from HIMA Paul Hildebrandt. An access control error vulnerability exists in multiple HIMA Paul Hildebrandt products that originates from an unauthenticated attacker being able to sen...

CVE-2024-24308

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

Prestashop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A SQL injection vulnerability exists in Prestashop boostmyshopagent version 1.1.9 and...

kernel: netfilter: nf_conntrack_irc message handling issue

A flaw was found in the Linux kernel in nfconntrackirc where the message handling can be confused and it incorrectly matches on the message. An attacker could exploit this vulnerability to bypass firewall when users are using unencrypted IRC with nfconntrackirc configured...

Nervos CKB P2P DoS Attacks

The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted txhashes, it will mark it in memory to avoid duplicated requests. code → . It is easy to establish a DoS attach by generating random tx hashes. Impact It affects all nodes connected to the P2P...

GHSA-84X2-2QV6-QG56 Nervos CKB P2P DoS Attacks

The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted txhashes, it will mark it in memory to avoid duplicated requests. code → . It is easy to establish a DoS attach by generating random tx hashes. Impact It affects all nodes connected to the P2P...

GHSA-34Q3-P352-C7Q8 Central Dogma Authentication Bypass Vulnerability via Session Leakage

Vulnerability Overview A vulnerability has been identified in Central Dogma versions prior to 0.64.1, allowing for the leakage of user sessions and subsequent authentication bypass. The issue stems from a Cross-Site Scripting XSS attack vector that targets the RelayState of Security Assertion...

Russian APT28 Hackers Targeting High-Value Orgs with NTLM Relay Attacks

Russian state-sponsored actors have staged NT LAN Manager NTLM v2 hash relay attacks through various methods from April 2022 to November 2023, targeting high-value targets worldwide. The attacks, attributed to an "aggressive" hacking crew called APT28, have set their eyes on organizations dealing...

CVE-2023-47256

ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings...

Code injection

ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings...

CVE-2023-47256

ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings...

PT-2024-7395

Name of the Vulnerable Software and Affected Versions: Windows Remote Registry client affected versions not specified Description: The issue is related to the Windows Remote Registry client, where an elevation of privilege vulnerability exists due to the use of outdated transport protocols,...