KLA78809 DoS vulnerability in Opera

Denial of service vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 116.0.5366.21 Stable update Exploitation Public exploits exist for this vulnerability. Related products Opera CVE list CVE-2024-11395 critical...

CVE-2024-53704

creationtimestamp| type| source ---|---|--- 2025-01-07 12:38:58+00:00| seen| https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0 2025-01-07 12:45:24+00:00| seen| https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3lf5oiexfugk2 2025-01-07 13:41:44+00:00| seen|...

KLA78813 DoS vulnerability in Google Chrome

Denial of service vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Related products Google-Chrome CVE list...

vulnerability-research

vulnerability-resear...

GHSA-2WV9-JQ79-5P63

creationtimestamp| type| source ---|---|--- 2025-01-05 01:30:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/36 2025-01-05 01:32:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/51 2025-01-05 01:35:02+00:00| published-proof-of-concept|...

Photon OS 4.0: Expat PHSA-2025-4.0-0729

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0729. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

New AI Jailbreak Method 'Bad Likert Judge' Boosts Attack Success Rates by Over 60%

Cybersecurity researchers have shed light on a new jailbreak technique that could be used to get past a large language model's LLM safety guardrails and produce potentially harmful or malicious responses. The multi-turn aka many-shot attack strategy has been codenamed Bad Likert Judge by Palo Alt...

Couchbase < 7.2.6 / 7.6.x < 7.6.2 HTTP Host Header Injection

The version of Couchbase installed on the remote host is before 7.2.6, and 7.6.x before 7.6.2. It is, therefore, affected by a HTTP Host header injection. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CVE-2019-8446

creationtimestamp| type| source ---|---|--- 2024-12-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-29 2025-01-14 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-14 2025-01-26 00:00:00+00:00| seen| The Shadowserv...

CBL Mariner 2.0 Security Update: avahi (CVE-2023-38471)

The version of avahi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38471 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the dbussethostname function...

Fedora 41 : moodle (2024-ddb5f7c0a3)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ddb5f7c0a3 advisory. Multiple CVE fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on December 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-354-01 Hitachi Energy RTU500 series CMU ICSA-24-354-02 Hitachi Energy SDM600...

The Mask APT Resurfaces with Sophisticated Multi-Platform Malware Arsenal

A little-known cyber espionage actor known as The Mask has been linked to a new set of attacks targeting an unnamed organization in Latin America twice in 2019 and 2022. "The Mask APT is a legendary threat actor that has been performing highly sophisticated attacks since at least 2007," Kaspersky...

2024 Threat Landscape Statistics: Ransomware Activity, Vulnerability Exploits, and Attack Trends

Now that we’ve reached the end of another year, you may be looking around the cybersecurity infosphere and seeing a glut of posts offering “hot takes” on the 2024 threat landscape and predictions about what’s coming next. At Rapid7, we don’t truck in hot takes, but rather, cold hard facts. Stayin...

2024 Threat Landscape Statistics: Ransomware Activity, Vulnerability Exploits, and Attack Trends

Now that we’ve reached the end of another year, you may be looking around the cybersecurity infosphere and seeing a glut of posts offering “hot takes” on the 2024 threat landscape and predictions about what’s coming next. At Rapid7, we don’t truck in hot takes, but rather, cold hard facts. Stayin...

Fedora 41 : pytest (2024-b747462264)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b747462264 advisory. Update to pytest 8.3.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 41 : open62541 (2024-821c085a14)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-821c085a14 advisory. Update to 1.4.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Careto is back: what’s new after 10 years of silence?

During the first week of October, Kaspersky took part in the 34th Virus Bulletin International Conference, one of the longest-running cybersecurity events. There, our researchers delivered multiple presentations, and one of our talks focused on newly observed activities by the Careto threat actor...

Curl 7.76.0 < 8.11.1 Information Disclosure (CVE-2024-11053)

The version of Curl installed on the remote host is between 7.76.0 and prior to 8.11.1. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...

Oracle Siebel CRM (October 2017 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2017 CPU advisory. - Vulnerability in the Siebel Apps - Field Service component of Oracle Siebel CRM subcomponent: Smart Answer Python. Supported versions that are...