GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: kargo, helm-fips, flux, skopeo, nerdctl, timoni, helm-operator, cadvisor-fips, helm, guac, flux-image-reflector-controller, newrelic-infrastructure-agent, up, pulumi, policy-controller-fips, helm-operator-fips, k9s, kpt, buildkitd, flux-helm-controller, tekton-chains...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: kargo, helm-fips, flux, skopeo, nerdctl, timoni, helm-operator, cadvisor-fips, helm, guac, flux-image-reflector-controller, newrelic-infrastructure-agent, up, pulumi, policy-controller-fips, helm-operator-fips, k9s, kpt, buildkitd, flux-helm-controller, tekton-chains...

U.S. Feds Shut Down China-Linked "KV-Botnet" Targeting SOHO Routers

The U.S. government on Wednesday said it took steps to neutralize a botnet comprising hundreds of U.S.-based small office and home office SOHO routers hijacked by a China-linked state-sponsored threat actor called Volt Typhoon and blunt the impact posed by the hacking campaign. The existence of t...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: kubernetes, podman, wolfictl, grype, runc, skopeo, kaniko, docker, buildkitd, k3d, ctop, zarf, trivy, k3s, skaffold, cadvisor, kubescape, nerdctl, kots, newrelic-infrastructure-agent, k9s, syft, zot...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: kaniko, nerdctl, skopeo, docker, grype, newrelic-infrastructure-agent, runc, k9s, buildkitd, wolfictl, skaffold, syft, zot, zarf, k3d, k3s, kubescape, ctop, kots, trivy, kubernetes, podman, cadvisor...

Guardians of IoT: Addressing IoT security vulnerabilities in electric vehicles and charging stations

The rise of electric vehicles EVs and charging infrastructure necessitates robust security measures, especially in the context of IoT integration. Explore the vulnerabilities in EV systems and potential risks, proposing mitigation strategies like firmware updates, user authentication, intrusion...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 1 (6.0.1-85)

This update provides stability and performance improvements. Vulnerability id: VSTOR-72592 Increased the speed of VM filtering in clusters with a huge number of existing projects. Vulnerability id: VSTOR-79462 Parts of a multipart object are not deleted. Vulnerability id: VSTOR-79650, VSTOR-80493...

Unauthorized Access

Oracle Java SE is vulnerable to Unauthorized Access. The vulnerability is due to a flaw in the security component that allows a low-privileged attacker with logon access to the infrastructure to compromise the system, potentially resulting in unauthorized access to critical data or complete acces...

New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility

Threat hunters have identified a new campaign that delivers the ZLoader malware, resurfacing nearly two years after the botnet's infrastructure was dismantled in April 2022. A new variant of the malware is said to have been in development since September 2023, Zscaler ThreatLabz said in an analys...

Emerson Rosemount GC370XA, GC700XA, GC1500XA

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely Vendor : Emerson Equipment : Rosemount GC370XA, GC700XA, GC1500XA Vulnerabilities : Command Injection, Improper Authentication, Improper Authorization 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

Ukraine Claims Destruction of 280 Russian Servers, 2 Petabytes Lost

By Deeba Ahmed Ukraine Reports Multiple Cyberattacks on Critical Russian Government Infrastructure and Private Companies, Leading to Nationwide Disruption and Massive Data Loss. This is a post from HackRead.com Read the original post: Ukraine Claims Destruction of 280 Russian Servers, 2 Petabytes...

Patch now! Fortra GoAnywhere MFT vulnerability exploit available

On January 22, 2024, software company Fortra warned customers about a new authentication bypass vulnerability impacting GoAnywhere MFT Managed File Transfer that allows an attacker to create a new admin user. Fortra GoAnywhere MFT is a file transfer solution that organizations use to exchange the...

Virtuozzo Hybrid Infrastructure 5.4 Update 4 Hotfix 6 (5.4.4-150)

This update provides stability and performance improvements. Vulnerability id: VSTOR-79658, VSTOR-80254 Reworked eligibility checks for third-party packages. Vulnerability id: VSTOR-79881 For S3 objects uploaded by using multipart upload, replacing one object with another with the same name may...

Announcing the Newest Game-Changing Upgrades of Qualys Cloud Agent

Qualys Cloud Agent Gets Powerful Enhancements for Boosting User Flexibility, Improved Control & Efficiency in VDI Environments, Seamless Updates, and More! We are excited to unveil a major upgrade to the Qualys Cloud Agent, marking a significant stride in cybersecurity management. The four update...

CVE-2023-46343

creationtimestamp| type| source ---|---|--- 2024-01-23 11:21:28+00:00| seen| https://t.me/ctinow/171858 2024-01-24 13:11:25+00:00| seen| https://t.me/ctinow/172729 2024-02-17 07:36:23+00:00| seen| https://t.me/ctinow/186801 2025-08-14 10:00:00+00:00| seen|...

VulnCheck KEV: CVE-2021-33690

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to...

The vulnerability of the Infrastructure component of Oracle Financial Services Analytical Applications Infrastructure (OFSAAI) allows a attacker to gain read, modify, or delete access to data, or cause a service failure.

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure OFSAAI business analytics platform is related to insufficient validation of input data. Exploitation of this vulnerability could allow a malicious actor to gain read, modify, ...

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

Pirated applications targeting Apple macOS users have been observed containing a backdoor capable of granting attackers remote control to infected machines. "These applications are being hosted on Chinese pirating websites in order to gain victims," Jamf Threat Labs researchers Ferdous Saljooki a...

The vulnerability of the Enterprise Infrastructure component of the JD Edwards EnterpriseOne Tools in the enterprise resource management system allows a hacker to trigger a service failure.

The vulnerability of the Enterprise Infrastructure component of the JD Edwards EnterpriseOne Tools system for resource management management lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Vulnerabilities fixed in Oracle Hyperion

Oracle has fixed vulnerabilities in several Hyperion products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Data manipulation. Remote code execution User rights Access to sensitive...