CVE-2024-44161

creationtimestamp| type| source ---|---|--- 2024-09-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1286/...

CVE-2024-40841

creationtimestamp| type| source ---|---|--- 2024-09-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1284/ 2024-10-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1321/...

CVE-2024-39843

creationtimestamp| type| source ---|---|--- 2024-09-23 22:10:30+00:00| seen| https://t.me/cvedetector/6207 2024-10-08 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1323/ 2024-11-06 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1459/...

CVE-2024-9113

creationtimestamp| type| source ---|---|--- 2024-09-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1274/...

CVE-2024-9112

creationtimestamp| type| source ---|---|--- 2024-09-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1273/ 2025-01-09 14:44:37+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113798930548659828...

CVE-2024-9114

creationtimestamp| type| source ---|---|--- 2024-09-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1275/...

Exploit for NULL Pointer Dereference in Sierrawireless Aleos

CVE-2023-40459 CVE-2023-40459 Unauthenticated DoS PoC Exploit...

CVE-2024-8849

creationtimestamp| type| source ---|---|--- 2024-09-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1272/...

CVE-2024-44176

creationtimestamp| type| source ---|---|--- 2024-09-17 03:04:39+00:00| seen| https://t.me/cvedetector/5789 2024-09-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1283/...

Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability

Ivanti has revealed that a newly patched security flaw in its Cloud Service Appliance CSA has come under active exploitation in the wild. The high-severity vulnerability in question is CVE-2024-8190 CVSS score: 7.2, which allows remote code execution under certain circumstances. "An OS command...

CVE-2024-28990

SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...

CVE-2024-28990

SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...

CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability

SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...

CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability

SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...

CVE-2024-28990

SolarWinds ARM contains a hard-coded credential authentication bypass (CVE-2024-28990) that could allow access to the RabbitMQ management console. The vulnerability affects ARM versions prior to 2024.3.1, and remediation is available in ARM 2024.3.1 (as referenced by multiple sources). No exploit...

Bug Left Some Windows PCs Dangerously Unpatched

Microsoft Corp. today released updates to fix at least 79 security vulnerabilities in its Windows operating systems and related software, including multiple flaws that are already showing up in active attacks. Microsoft also corrected a critical bug that has caused some Windows 10 PCs to remain...

Patch Tuesday - September 2024

Microsoft is addressing 79 vulnerabilities this September 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today; at time of writing, all four are listed on CISA KEV. Microsoft is also patching four critical...

Microsoft and Adobe Patch Tuesday, September 2024 Security Update Review

Microsoft's September Patch Tuesday updates are out, addressing a range of vulnerabilities across multiple products. Let's dive into the key updates and their implications. Microsoft Patch Tuesday for September 2024 Microsoft Patch's Tuesday, September 2024 edition addressed 79 vulnerabilities,...

Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score

Microsoft disclosed four vulnerabilities that are actively being exploited in the wild as part of its regular Patch Tuesday security update this week in what's become a regular occurrence for the company's patches in 2024. Two of the zero-day vulnerabilities, CVE-2024-38226 and CVE-2024-38014,...

CVE-2024-43469

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-10 20:06:24+00:00| seen| https://t.me/cvedetector/5288...