Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite

Over the past few weeks, five different vulnerabilities affecting Zimbra Collaboration Suite have come to our attention, one of which is unpatched, and four of which are being actively and widely exploited in the wild by well-organized threat actors. We urge organizations who use Zimbra to patch ...

CVE-2022-37042

creationtimestamp| type| source ---|---|--- 2022-08-12 12:07:32+00:00| exploited| https://t.me/truesecator/3286 2022-08-12 18:43:37+00:00| seen| https://t.me/cibsecurity/48066 2022-08-13 07:34:20+00:00| exploited| https://t.me/itsecnews/1182 2022-08-20 17:15:20+00:00| published-proof-of-concept|...

CVE-2022-38130

creationtimestamp| type| source ---|---|--- 2022-08-11 00:26:35+00:00| seen| https://t.me/cibsecurity/47904 2024-11-16 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-16 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CISA Adds Two Known Exploited Vulnerabilities to Catalog 

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly adde...

Intel Open AMT Cloud Toolkit 安全漏洞

Intel Open AMT Cloud Toolkit is an open source cloud toolkit from Intel Corporation USA. A security vulnerability exists in Intel Open AMT Cloud Toolkit. An attacker exploited the vulnerability to elevate privileges...

CVE-2022-20239

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

PT-2022-4263

Name of the Vulnerable Software and Affected Versions Microsoft Windows Support Diagnostic Tool MSDT affected versions not specified Description The issue is caused by a buffer overflow in memory, allowing an attacker to execute arbitrary code. This can be exploited by remote attackers, affecting...

CISA Adds Two Known Exploited Vulnerabilities to Catalog 

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly adde...

Design/Logic Flaw

Go Ethereum aka geth through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making RUM, as exploited in the wild in 2020 through 2022...

CISA Adds Zimbra Email Vulnerability to its Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a recently disclosed high-severity vulnerability in the Zimbra email suite to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation. The issue in question is CVE-2022-27924 CVSS score:...

Google Android Code Execution Vulnerability (CNVD-2022-65630)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to execute arbitrary code on the system...

CVE-2022-2651

creationtimestamp| type| source ---|---|--- 2022-08-04 12:19:23+00:00| seen| https://t.me/cibsecurity/47534 2022-09-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51013...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

Google Android Information Disclosure Vulnerability (CNVD-2022-65637)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability. The vulnerability stems from inadequate protection of sensitive information and can be exploited by attackers to obtain sensitive information...

VirusTotal Reveals Apps Most Exploited by Hackers to Spread Malware

By Deeba Ahmed According to the latest research findings from VirusTotal, cybercriminals and threat actors are increasingly relying on mimicked versions… This is a post from HackRead.com Read the original post: VirusTotal Reveals Apps Most Exploited by Hackers to Spread Malware...

CVE-2022-31659

creationtimestamp| type| source ---|---|--- 2022-08-03 15:16:01+00:00| seen| https://t.me/proxybar/929 2022-08-04 17:31:05+00:00| published-proof-of-concept| https://t.me/cKure/10036 2022-08-06 05:25:14+00:00| seen| Telegram/iZXzXMpBStbisa9L34EAo9LTJGnfMKnDLPKNAXhem3aOXA 2022-08-10 11:43:18+00:00...

CVE-2022-31656

creationtimestamp| type| source ---|---|--- 2022-08-03 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=846 2022-08-03 10:17:56+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus13/2022 2022-08-03 11:22:13+00:00| published-proof-of-concept|...

F5 NGINX Ingress Controller Input Validation Error Vulnerability

NGINX Ingress Controller is an application from F5 that works with NGINX and NGINX Plus and supports the standard ingress features - content-based routing and TLS / SSL offload. Ingress objects can be exploited by an attacker to obtain all available secret objects in the NGINX Ingress Controller...

F5 BIG-IP Message Routing MQTT Denial of Service Vulnerability

F5 BIG-IP APM Edge Client for Windows is a client access control authentication access client application from F5. A denial of service vulnerability exists in F5 BIG-IP Message Routing MQTT, which stems from an undisclosed Message Routing MR Message Queue Telemetry Transport MQTT profile when...

TCL LinkHub Mesh Wi-Fi ucloud_del_node Function Denial of Service Vulnerability

TCL LinkHub Mesh Wi-Fi is a router from TCL. The TCL LinkHub Mesh Wi-Fi uclouddelnode feature denial of service vulnerability can be exploited by attackers to cause a denial of service...