3135 matches found
Metasploit Wrap-Up: 11/08/2024
RISC-V Support This release of Metasploit Framework has added exciting new features such as new payloads that target the RISC-V architecture. These payloads allow for the execution of commands on compromised hardware, allowing Metasploit Framework and Metasploit Payloads to be used in more...
The vulnerability of the software for network monitoring and control of IT infrastructure on the SolarWinds Platform lies in its uncontrolled search algorithm, which allows attackers to escalate their privileges.
The vulnerability of the software for network monitoring and control of IT infrastructure on the SolarWinds Platform is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to enhance their privileges...
THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 - Oct 27)
Cybersecurity news can sometimes feel like a never-ending horror movie, can't it? Just when you think the villains are locked up, a new threat emerges from the shadows. This week is no exception, with tales of exploited flaws, international espionage, and AI shenanigans that could make your head...
SEC Charges 4 Companies Over Misleading SolarWinds Cyber Attack Disclosures
The U.S. Securities and Exchange Commission SEC has charged four current and former public companies for making "materially misleading disclosures" related to the large-scale cyber attack that stemmed from the hack of SolarWinds in 2020. The SEC said the companies – Avaya, Check Point, Mimecast,...
Solarwinds CatTools Installed (Windows)
Binary data solarwindscattoolswininstalled.nbin...
Solarwinds CatTools Information Disclosure (CVE-2024-45713)
SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...
The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to defects in the deserialization mechanism, allows a hacker to execute arbitrary code.
The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by running specially crafted commands remotely...
CVE-2024-45713
SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes...
CVE-2024-45713
SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes...
CVE-2024-45713
SolarWinds Kiwi CatTools is affected by CVE-2024-45713, a sensitive data disclosure vulnerability that occurs when a non-default troubleshooting setting is enabled. The issue is described as information disclosure with a local attack vector; the precise affected versions are not consistently spec...
CVE-2024-45713 SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability
SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes...
CVE-2024-45713 SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability
SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes...
Vulnerabilities fixed in Solarwinds Platform
Solarwinds has fixed vulnerabilities in Solarwinds Platform. An authenticated malicious person could exploit the vulnerabilities to launch a Cross-Site Scripting attack or locally increase permissions. Solarwinds has released updates to fix the vulnerabilities in Solarwinds Platform 2024.4. See...
Vulnerability fixed in Solarwinds Web Helpdesk
Solarwinds has fixed a vulnerability in Web Helpdesk. An unauthenticated malicious person could exploit the vulnerability to execute deserialization code on the system without authentication using Java. Solarwinds developers have released a hotfix to fix the vulnerability. See attached references...
SolarWinds Serv-U 15.4.2.0 < 15.5 / 15.4.0 < 15.5 Multiple Vulnerabilities XSS
The version of SolarWinds Serv-U installed on the remote host is prior to 15.5 / 15.5. It is, therefore, affected by multiple vulnerabilities as referenced in the serv-u155 advisory. - SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible...
SolarWinds Kiwi CatTools 安全漏洞
SolarWinds Kiwi CatTools is a network automation tool from the American company SolarWinds, Inc. It is used to manage configurations on network devices such as routers, switches, and firewalls. A security vulnerability exists in SolarWinds Kiwi CatTools version 3.12 and earlier, which stems from...
SolarWinds Platform 2024.2.0 < 2024.4 Multiple Vulnerabilities XSS
The version of SolarWinds Platform installed on the remote host is prior to 2024.4. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20244 advisory. - SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation...
SolarWinds Web Help Desk < 12.8.3 HF 3 Java Deserialization RCE
The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF3. It is, therefore, affected by a Java deserialization remote-code execution vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested f...