CrowdStrike Update Causes Havoc, Grounding Flights and Disrupting Businesses

The Biggest IT Outage in Recent Memory? A faulty CrowdStrike update triggered a global tech meltdown, grounding flights,…...

The vulnerabilities of the content scanning and message filtering functions of the Cisco Secure Email Gateway allow attackers to enhance their privileges.

The vulnerability of content scanning and message filtering functions of the Cisco Secure Email Gateway relates to incorrect restrictions on the path name to the directory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, modify the device configuration,...

The vulnerability of the Suricata detection and intrusion prevention mechanism, which allows a intruder to trigger a service failure.

The vulnerability of the httpmemcap parameter in the Suricata intrusion detection and prevention tool is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Navigating Insider Risks: Are your Employees Enabling External Threats?

Attacks on your network are often meticulously planned operations launched by sophisticated threats. Sometimes your technical fortifications provide a formidable challenge, and the attack requires assistance from the inside to succeed. For example, in 2022, the FBI issued a warning1 that SIM swap...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved operating system allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved operating system is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Denial Of Service (DoS)

org.wildfly: wildfly-domain-http is vulnerable to Denial Of Service DoS. The vulnerability is caused by a lack of sockets limits within the management interface, which can result in Denial Of Service DoS due to hitting the nofile limit. An attacker can exploit this by overwhelming the system with...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions using a specially created OpenAPI fil...

The vulnerability of Huawei TC7001-10, WS7200-10, and WS7206-10 Wi-Fi routers lies in the lack of a mechanism to lock sessions. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of Huawei TC7001-10, WS7200-10, and WS7206-10 Wi-Fi routers’ microprogramming software is related to the lack of a session fixation mechanism, due to the absence of reverse address checking and TCP connection tracing. Exploiting this vulnerability can allow an unauthorized actor...

The vulnerability of the gif2rgb converter (util/gif2rgb.c) in the GIFLIB library allows a hacker to induce a service failure.

The vulnerability of the gif2rgb converter util/gif2rgb.c in the GIFLIB library is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure by using specially created GIF files...

CVE-2024-6036

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

PYSEC-2024-317

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

CVE-2024-6036

CVE-2024-6036 affects gaizhenbiao/chuanhuchatgpt v20240410. A vulnerability allows any user to restart the server by sending a request to the /queue/join? endpoint with "fn_index":66, leading to service disruption and potential data integrity issues. Several connected sources corroborate the issu...

CVE-2024-6036 Denial of Service in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

CVE-2024-6150

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...

CVE-2024-6150

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...

CVE-2024-6150

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...

CVE-2024-6150

CVE-2024-6150 affects Citrix Provisioning. A non-admin user can cause short-term disruption of Target VM availability via Citrix Provisioning. Root cause per Citrix bulletin is improper access control. Mitigation: upgrade Citrix Provisioning to CR 2402+ or LTSR CU5 (2203 LTSR) / CU9 (1912 LTSR). ...

CVE-2024-5911

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which...

CVE-2024-5911 PAN-OS: File Upload Vulnerability in the Panorama Web Interface

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which...

CVE-2024-36451

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered,...