CVE-2024-42171

HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session...

CVE-2024-42170

HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session...

CVE-2024-42171

CVE-2024-42171 affects HCL MyXalytics with a session fixation flaw. Attackers can lure victims through crafted URLs containing a session token to access the login session. Public references report a CVSSv3.1 base score of 6.4 (Network, High confidentiality/Integrity impact, User interaction requi...

CVE-2024-42171 HCL MyXalytics is affected by insufficient session expiration

HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session...

CVE-2024-42170 HCL MyXalytics is affected by a session fixation vulnerability

HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session...

CVE-2024-42170 HCL MyXalytics is affected by a session fixation vulnerability

HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session...

CVE-2024-42170

CVE-2024-42170 affects HCL MyXalytics and involves a session-fixation vulnerability. The described issue allows an attacker to cause a user’s login session to be tied to a crafted URL containing a session token, potentially compromising confidentiality and integrity of the session. The NVD entry ...

PT-2025-2620 · Hcl · Hcl Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL MyXalytics affected versions not specified Description: The issue allows cyber-criminals to exploit a session fixation vulnerability by sending crafted URLs with a session token to access the victim's login session. Recommendations: At th...

CVE-2024-51229

creationtimestamp| type| source ---|---|--- 2025-01-09 21:50:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113800606128034861 2025-01-09 22:15:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1098 2025-01-09 22:15:45+00:00| seen|...

CVE-2024-13282

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiofrkko2a 2025-01-09 20:17:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1063 2025-01-09 21:57:29+00:00| seen| https://t.me/cvedetector/14910...

CVE-2024-43661

creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagxwjoi25 2025-01-09 08:47:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113797527995004670 2025-01-09 10:13:50+00:00| seen|...

US Cyber Trust Mark logo for smart devices is coming

The White House announced the launch of the US Cyber Trust Mark which aims to help buyers make an informed choice about the purchase of wireless internet-connected devices, such as baby monitors, doorbells, thermostats, and more. The cybersecurity labeling program for wireless consumer Internet o...

CISA Adds One Vulnerability to the KEV Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0282link is external Ivanti Connect Secure Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significa...

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

The U.S. government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things IoT consumer devices. "IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission FCC said. "Under thi...

CVE-2025-22349

creationtimestamp| type| source ---|---|--- 2025-01-07 11:18:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jnmznon2f 2025-01-07 13:02:05+00:00| seen| https://t.me/cvedetector/14513 2025-01-07 15:10:29+00:00| seen|...

CVE-2024-56278

creationtimestamp| type| source ---|---|--- 2025-01-07 11:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jjjnao52f 2025-01-07 11:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jjjnao52f 2025-01-07 11:39:13+00:00|...

New EAGERBEE Variant Targets ISPs and Governments with Advanced Backdoor Capabilities

Internet service providers ISPs and governmental entities in the Middle East have been targeted using an updated variant of the EAGERBEE malware framework. The new variant of EAGERBEE aka Thumtais comes fitted with various components that allow the backdoor to deploy additional payloads, enumerat...

CISA: No Wider Federal Impact from Treasury Cyber Attack, Investigation Ongoing

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday said there are no indications that the cyber attack targeting the Treasury Department impacted other federal agencies. The agency said it's working closely with the Treasury Department and BeyondTrust to get a better...

Trend Micro Contributes and Maps Container Security to MITRE ATT&CK: A Game-Changer for Cyber Defense

Trend Micro leads the way by mapping its Container Security detection capabilities to the MITRE ATT&CK framework for Containers and contributing real-world attack data...

Blurring the Lines: How Nation-States and Organized Cybercriminals Are Becoming Alike

Blurring the Lines: How Nation-States and Organized Cybercriminals Are Becoming Alike By Tomer Shloman · January 7, 2025 The distinction between nation-state actors and organized cybercriminals is becoming increasingly blurred in our rapidly evolving cyber landscape. Historically, these groups ha...