CVE-2024-6587

creationtimestamp| type| source ---|---|--- 2024-09-13 18:48:15+00:00| seen| https://t.me/cvedetector/5622 2025-03-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-09 2025-03-14 15:30:06+00:00| exploited| https://t.me/truesecator/6843 2026-06-23...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8190link is external Ivanti Cloud Services Appliance OS Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious...

Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

Malicious actors are likely leveraging publicly available proof-of-concept PoC exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks. The activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released f...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. Attackers have exploited the vulnerability to cause devices to crash...

CVE-2024-8529

creationtimestamp| type| source ---|---|--- 2024-09-12 11:51:16+00:00| seen| https://t.me/cvedetector/5454 2024-09-13 05:01:21+00:00| seen| https://t.me/CyberBulletin/630 2024-09-13 05:21:09+00:00| seen| https://t.me/CyberDilara/873 2024-09-13 05:21:16+00:00| seen| https://t.me/InfoSecInsider/282...

Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

Microsoft on Tuesday disclosed that three new security flaws impacting the Windows platform have come under active exploitation as part of its Patch Tuesday update for September 2024. The monthly security release addresses a total of 79 vulnerabilities, of which seven are rated Critical, 71 are...

Patch Tuesday - September 2024

Microsoft is addressing 79 vulnerabilities this September 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today; at time of writing, all four are listed on CISA KEV. Microsoft is also patching four critical...

Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score

Microsoft disclosed four vulnerabilities that are actively being exploited in the wild as part of its regular Patch Tuesday security update this week in what's become a regular occurrence for the company's patches in 2024. Two of the zero-day vulnerabilities, CVE-2024-38226 and CVE-2024-38014,...

PT-2024-6052

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue concerns a security feature bypass vulnerability in the Mark of the Web MOTW protection mechanism of Microsoft Windows. This vulnerability can be exploited by an attacker ...

PT-2024-6304 · Ivanti · Ivanti Cloud Services Appliance

The vulnerable software is Ivanti Cloud Services Appliance, specifically versions 4.6 Patch 518 and earlier. An OS command injection vulnerability in these versions allows a remote authenticated attacker to obtain remote code execution, but the attacker must have admin level privileges to exploit...

CVE-2024-44849

creationtimestamp| type| source ---|---|--- 2024-09-09 20:39:58+00:00| seen| https://t.me/cvedetector/5117 2024-09-10 11:45:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8471 2024-09-21 16:06:49+00:00| published-proof-of-concept| https://t.me/realLulzSec/18823 2024-09-21...

CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices

On August 22, 2024, security firm SonicWall published an advisory on CVE-2024-40766, a critical improper access control vulnerability affecting SonicOS, the operating system that runs on the company’s physical and virtual firewalls. While CVE-2024-40766 was not known to be exploited in the wild a...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2016-3714link is external ImageMagick Improper Input Validation Vulnerability CVE-2017-1000253link is external Linux Kernel PIE Stack Buffer Corruption...

Critical GeoServer Vulnerability Exploited in Global Malware Campaign

A critical GeoServer vulnerability CVE-2024-36401 is being actively exploited, allowing attackers to take control of systems for malware…...

GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botnet malware such as Condi and JenX, and a known backdoor called SideWalk. The security vulnerability is a critical remote code execution bug...

ABB Freelance AC 900F and AC 700F Numeric Range Comparison Without Minimum Check (CVE-2023-0425)

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make th...

CVE-2024-45195: Apache OFBiz Unauthenticated Remote Code Execution (Fixed)

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server. Exploitation is facilitated by bypassing...

CVE-2024-40711

creationtimestamp| type| source ---|---|--- 2024-09-05 07:08:09+00:00| seen| https://t.me/CyberBulletin/552 2024-09-05 17:15:55+00:00| seen| Telegram/JV0n6pLsOT6VJZsgrEwvOevCq5yhBWTCVGtt7W2JJuNFjI 2024-09-05 17:18:44+00:00| seen| https://t.me/CyberSecurityIL/55923 2024-09-05 18:58:23+00:00| seen|...

Android Users Urged to Install Latest Security Updates to Fix Actively Exploited Flaw

Google has released its monthly security updates for the Android operating system to address a known security flaw that it said has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-32896 CVSS score: 7.8, relates to a case of privilege escalation in...

CVE-2024-45507

creationtimestamp| type| source ---|---|--- 2024-09-04 11:53:32+00:00| seen| https://t.me/cvedetector/4778 2024-09-21 16:06:49+00:00| published-proof-of-concept| https://t.me/realLulzSec/18824 2024-09-21 16:06:49+00:00| published-proof-of-concept| https://t.me/realLulzSec/2041 2024-09-21...