China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

Cybersecurity researchers have uncovered an updated version of malware called ValleyRAT that's being distributed as part of a new campaign. "In the latest version, ValleyRAT introduced new commands, such as capturing screenshots, process filtering, forced shutdown, and clearing Windows event logs...

CVE-2024-23462

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...

CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

CVE-2023-41971

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...

CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

CVE-2023-41971

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...

CVE-2024-23461

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4...

CVE-2023-41970

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62...

CVE-2024-23462

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...

CVE-2023-41970

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62...

CVE-2023-28798

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution...

CVE-2023-28798

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution...

CVE-2024-23462

Affected software: Zscaler Client Connector on macOS. Vulnerability type: Improper validation of the Integrity Check Value. Impact: Denial of service to the Client Connector binary, removing client functionality (pre-3.4). Versions impacted: before 3.4. Evidence/what is stated: The CVE entry and ...

CVE-2024-23461 ZCC macOS Upgrade ZIP Bomb DoS

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4...

CVE-2024-23461

CVE-2024-23461 affects Zscaler Client Connector on macOS prior to 3.4. The issue is an improper validation of integrity check values during the upgrade process, which may allow local code execution. Affected product: Zscaler Client Connector for macOS (pre-3.4). Impact per provided details: local...

CVE-2024-23459 Multiple Arbitrary Creates/Overwrites by link following

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

CVE-2024-23459

CVE-2024-23459 affects Zscaler Client Connector on macOS prior to 3.7. It is an Improp er Link Resolution Before File Access (Link Following) vulnerability that allows overwriting a system file. Root cause cited: incorrect link resolution before file access. Impact described in the sources as hig...

CVE-2024-23459 Multiple Arbitrary Creates/Overwrites by link following

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

CVE-2023-41971 Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...

CVE-2023-41971

CVE-2023-41971 is a Windows-specific vulnerability in Zscaler Client Connector prior to 3.7, caused by improper link resolution before file access (link following). This can allow overwriting a system file, with CVSSv3.1 metrics indicating local access, low attack complexity, and high impact on c...