557 matches found
CVE-2023-28801
An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r...
Input validation
An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r...
CVE-2023-28801 Improper SAML signature verification
An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r...
CVE-2023-28801 Improper SAML signature verification
An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r...
CVE-2023-28801
CVE-2023-28801 affects Zscaler Admin UI (versions 6.2 before 6.2r). Root cause: improper verification of cryptographic signatures in the SAML authentication, enabling privilege escalation. Public references consistently cite affected versions and suggest upgrading to 6.2r or later as remediation;...
PT-2023-21977 · Zscaler · Zscaler Admin Ui
Name of the Vulnerable Software and Affected Versions: Zscaler Admin UI versions 6.2 before 6.2r Description: The issue is related to an improper verification of cryptographic signature in the SAML authentication of the Zscaler Admin UI, allowing a privilege escalation. Recommendations: For...
CVE-2023-41717: Files or Directories Accessible to External Parties
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
CVE-2023-41717 affects Zscaler Proxy (versions 3.6.1.25 and prior). The vulnerability stems from improper file-type handling that lets local attackers bypass download/upload restrictions. PoC evidence describes bypass via byte-range/partial content reconstruction (Range header) and Microsoft BITS...
Zscaler Proxy 安全漏洞
Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...
Zscaler Admin UI 数据伪造问题漏洞
Zscaler Admin UI is a scaler from Zscaler, Inc. A security vulnerability exists in Zscaler Admin UI versions 6.2 through 6.2r that stems from incorrect cryptographic signature validation in the Admin UI's SAML authentication, resulting in escalation of privileges...
CVE-2023-28801: Improper Verification of Cryptographic Signature
An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
FBI Dismantles QakBot Malware, Frees 700,000 Computers, Seizes $8.6 Million
A coordinated law enforcement effort codenamed Operation Duck Hunt has felled QakBot, a notorious Windows malware family that's estimated to have compromised over 700,000 computers globally and facilitated financial fraud as well as ransomware. To that end, the U.S. Justice Department DoJ said th...
Zscaler Client Connector 输入验证错误漏洞
Zscaler Client Connector is a lightweight agent from Zscaler, Inc. An input validation error vulnerability exists in Zscaler Client Connector, which stems from the vulnerability of URL parameters in the login process to injection attacks...
Zscaler Client Connector 跨站脚本漏洞
Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and comply with the organization's policies, even when not on the corporate network. A security...
Stealthy DBatLoader Malware Loader Spreading Remcos RAT and Formbook in Europe
A new phishing campaign has set its sights on European entities to distribute Remcos RAT and Formbook via a malware loader dubbed DBatLoader. "The malware payload is distributed through WordPress websites that have authorized SSL certificates, which is a common tactic used by threat actors to eva...
Citrix PVS target device BSODs upon installing Zscaler client.
Installing the Zscaler client on Citrix PVS target device causes a blue screen of death. Target device crashes with exception code 7e caused by access violation of Citrix Virtual Hard Disk driver,CVhdMp.sys...
Threat Actors Adopt Havoc Framework for Post-Exploitation in Targeted Attacks
An open source command-and-control C2 framework known as Havoc is being adopted by threat actors as an alternative to other well-known legitimate toolkits like Cobalt Strike, Sliver, and Brute Ratel. Cybersecurity firm Zscaler said it observed a new campaign in the beginning of January 2023...
What’s New in InsightIDR: Q4 2022 in Review
As we continue to empower security teams with the freedom to focus on what matters most, Q4 focused on investments and releases that contributed to that vision. With InsightIDR, Rapid7’s cloud-native SIEM and XDR solution, teams have the scale, comprehensive contextual coverage, and expertly vett...