CVE-2024-52571

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:37+00:00| seen| https://t.me/cvedetector/11357 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1526/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-52569

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:35+00:00| seen| https://t.me/cvedetector/11355 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1521/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

Most of 2023’s Top Exploited Vulnerabilities Were Zero-Days

Zero-day vulnerabilities are more commonly used, according to the Five Eyes: Key Findings In 2023, malicious cyber actors exploited more zero-day vulnerabilities to compromise enterprise networks compared to 2022, allowing them to conduct cyber operations against higher-priority targets. In 2023,...

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11 - Nov 17)

What do hijacked websites, fake job offers, and sneaky ransomware have in common? They're proof that cybercriminals are finding smarter, sneakier ways to exploit both systems and people. This week makes one thing clear: no system, no person, no organization is truly off-limits. Attackers are...

A week in security (November 11 – November 17)

Last week on Malwarebytes Labs: Malicious QR codes sent in the mail deliver malware 122 million people’s business contact info leaked by data broker Advertisers are pushing ad and pop-up blockers using old tricks Scammer robs homebuyers of life savings in $20 million theft spree Temu must respect...

CVE-2024-49592

creationtimestamp| type| source ---|---|--- 2024-11-15 21:12:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113489027313480593 2024-11-15 23:19:39+00:00| seen| https://t.me/cvedetector/11182 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1517/...

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

On Friday, November 8, 2024, cybersecurity firm Palo Alto Networks PAN published a bulletin PAN-SA-2024-0015 advising firewall customers to take steps to secure their firewall management interfaces amid unverified rumors of a possible new vulnerability. Rapid7 threat intelligence teams have also...

CVE-2024-36488

creationtimestamp| type| source ---|---|--- 2024-11-14 00:28:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113478473299029775 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1613/...

CVE-2024-34787

creationtimestamp| type| source ---|---|--- 2024-11-13 03:22:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113473495529817510 2024-11-13 04:07:31+00:00| seen| https://t.me/cvedetector/10783 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1501/...

CVE-2024-34781

creationtimestamp| type| source ---|---|--- 2024-11-13 03:07:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113473436500635075 2024-11-13 04:07:29+00:00| seen| https://t.me/cvedetector/10780 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1497/...

CVE-2024-32841

creationtimestamp| type| source ---|---|--- 2024-11-13 02:52:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113473377456204144 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1494/ 2024-11-13 09:12:33+00:00| seen|...

PT-2026-2326

Name of the Vulnerable Software and Affected Versions npm cli affected versions not specified Description The npm command-line interface has a flaw related to incorrect permission assignment that can lead to local privilege escalation. This issue allows an attacker to gain elevated privileges on ...

Patch Tuesday - November 2024

Microsoft is addressing 90 vulnerabilities this November 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today, although as with last month’s batch, it does not evaluate any of these zero-day vulnerabilities...

Microsoft Patch Tuesday, November 2024 Edition

Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed...

Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review

Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...

CVE-2024-43613

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review...

CVE-2024-49042

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:24:55+00:00| seen| https://t.me/cvedetector/10700...

CVE-2024-50318

creationtimestamp| type| source ---|---|--- 2024-11-12 18:03:29+00:00| seen| https://t.me/cvedetector/10651 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1489/...

CVE-2024-50330

creationtimestamp| type| source ---|---|--- 2024-11-12 18:03:15+00:00| seen| https://t.me/cvedetector/10642 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1510/ 2024-11-13 09:12:33+00:00| seen|...

CVE-2024-50328

creationtimestamp| type| source ---|---|--- 2024-11-12 18:03:14+00:00| seen| https://t.me/cvedetector/10640 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1508/ 2024-11-13 09:12:33+00:00| seen|...