2652 matches found
PT-2023-28777 · Proxmox · Proxmox Ve +2
Name of the Vulnerable Software and Affected Versions: Proxmox VE versions 5.4 through 8.0 Proxmox Backup Server versions 1.1 through 3.0 Proxmox Mail Gateway versions 7.1 through 8.0 Description: An issue in Proxmox products allows a remote authenticated attacker to escalate privileges via...
CVE-2023-43320
An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticated attacker to escalate privileges via bypassing the two-factor authentication component...
Zoho ManageEngine ADManager Plus Authorization Issues Vulnerability
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...
Proxmox Virtual Environment Security Vulnerability
Proxmox Virtual Environment Proxmox VE is an open source server virtualization environment Linux distribution from Proxmox. A security vulnerability in Proxmox Server Solutions GmbH Proxmox VE v.5.4 to v.8.0, Proxmox Backup Server v.1.1 to v.3.0, and Proxmox Mail Gateway v.7.1 to v.8.0 has been...
Improper Restriction of Excessive Authentication Attempts
Overview github.com/greenpau/caddy-security is a Security App and Plugin for Caddy v2. Affected versions of this package are vulnerable to Improper Restriction of Excessive Authentication Attempts via the two-factor authentication 2FA. Although the application blocks the user after several failed...
The vulnerability of the Redmine project and task management web application relates to incorrect session expiration times, allowing attackers to continue existing user sessions after two-factor authentication is enabled.
The vulnerability of the Redmine project and task management web application is related to an incorrect session expiration time. Exploiting this vulnerability allows a malicious actor to continue existing user sessions after two-factor authentication is enabled...
PT-2023-27524 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.1 Discourse version 3.2.0.beta1 and earlier in the beta and tests-passed branches Description: A malicious user could add a 2FA or security key with a carefully crafted name to their account, causing a denial o...
SolarWinds Serv-U 15.4 < 15.4 HF2 Authentication Bypass
The version of SolarWinds Serv-U installed on the remote host is prior to 15.4 HF2. It is, therefore, affected by a vulnerability as referenced in the serv-u154hf2 advisory. - A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypass...
Social Security Numbers leaked in ransomware attack on Ohio History Connection
The Ohio History Connection OHC has posted a breach notification in which it discloses that a ransomware attack successfully encrypted internal data servers. During the attack, the cybercriminals may have had access to names, addresses, and Social Security Numbers SSNs of current and former OHC...
CVE-2023-35785
Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange...
CVE-2023-35785
Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange...
PT-2023-25313 · Zoho · Zoho Manageengine Servicedesk Plus +14
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Active Directory 360 versions 4315 and below Zoho ManageEngine ADAudit Plus versions 7202 and below Zoho ManageEngine ADManager Plus versions 7200 and below Zoho ManageEngine Asset Explorer versions 6993 and below Zoho...
"Unable to process your request" error while registering for two-factor authentication
Registerfor two-factor authentication by using the following steps: ------- 1. Open a browser, navigate to the Workspace sign-in page, and select Don’t have a token? 2. Enter their user name in the domain\username format or their company email address and select Next. Citrix Cloud then sends the...
ZOHO ManageEngine ADManager Plus 授权问题漏洞
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...
GitHub’s Hardcore Plan to Roll Out Two-Factor Authentication (2FA)
GitHub has spent two years researching and slowly rolling out its multifactor authentication system. Soon it will be mandatory for all 100 million users—with no opt-out...
Improper Authentication
gitlab is vulnerable to Improper Authentication. The vulnerability exists due to missing authentication which allows an attacker with access to a victim's session to disable two-factor authentication...
Information Disclosure
gitlab is vulnerable to Information Disclosure. The vulnerability results in revealing a users two-factor authentication status to unauthenticated users...
PSA: Wordfence Brand Being Actively Used in Phishing Campaigns
Earlier this week we became aware that malicious actors are using Wordfence brand image to run a phishing scam on WordPress and Wordfence users, posing as unknown login notifications from their own website while linking to a fake login page, clearly aiming to steal WordPress login credentials. If...
Tampa General Hospital half thwarts ransomware attack, but still loses patient data
The Tampa General Hospital TGH has promised to reach out to individuals whose information has been stolen by a ransomware group. In a cybersecurity notice, TGH said it noticed unusual activity on its computer systems on May 31, 2023. "Fortunately, TGHs monitoring systems and experienced technolog...