15013 matches found
Metasploit Weekly Wrap-Up
Metasploit 6.3 is out! Earlier this week we announced the release of Metasploit 6.3 which came with a tonne of new modules and improvements. The whole team worked super hard on this and we're very excited that everyone can now get their hands on it and all of the new features it has to offer! I...
CVE-2023-20854
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...
CVE-2023-20854
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...
Arbitrary file deletion
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...
Unveiling the Advanced Rust-based Nevada Ransomware
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new type of ransomware named "Nevada Ransomware" has been identified. The creators of this ransomware have established an affiliate program that was initially introduced in the RAMP underground...
CVE-2023-20854
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...
Vulnerability fixed in VMWare Workstation
VMWare has fixed a vulnerability in VMWare Workstation. A local malicious party could exploit the vulnerability to remove arbitrary delete files from the system on which Workstation is installed. VMWare has released updates to fix the vulnerability in Workstation 17.0.1. For more information, see...
CVE-2023-20854
VMware Workstation 17.x (before 17.0.1) is affected by CVE-2023-20854, an arbitrary file deletion vulnerability that requires local privileges. The issue arises in VMware Workstation and can lead to deletion of arbitrary files on the host running the product. Remediation is to update to version 1...
VMware vRealize Operations 8.6.x < 8.6.4 CSRF (VMSA-2023-0002)
The version of VMware vRealize Operations vROps running on the remote host is 8.6.x prior to 8.6.4. It is, therefore, affected by a CSRF vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user. Note that Nessus has not tested for this...
CVE-2023-20854: Improper Privilege Management
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...
VMware vRealize Log Insight Detection Consolidation
Consolidation of VMware vRealize Log Insight detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if...
VMware Workstation code injection vulnerability
VMware Workstation is a set of virtual machine software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. A code injection vulnerability exists in VMware Workstation 17.x series versions prior to 17.0.1, which can be...
CVE-2023-20854
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...
wdc-vcd04.oc.vmware.com Cross Site Scripting vulnerability OBB-3176344
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
KLA20212 DoS vulnerability in VMware Workstation
Arbitrary file deletion vulnerability was found in VMWare Workstation. Malicious users can exploit this vulnerability to cause denial of service, bypass security restrictions. Original advisories VMSA-2023-0003 Exploitation Related products VMware-Workstation CVE list CVE-2023-20854 critical...
PT-2023-1294
Name of the Vulnerable Software and Affected Versions VMware Workstation affected versions not specified Description The issue is related to errors in access control, allowing a malicious actor with local user privileges to delete arbitrary files from the file system of the machine on which the...
CVE-2023-20856
VMware vRealize Operations vROps contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user...
Design/Logic Flaw
VMware vRealize Operations vROps contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user...
VMware Releases Security Update for VMware vRealize Operations
VMware released a security update that addresses a cross-site request forgery bypass vulnerability affecting VMware vRealize Operations. A malicious user could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review VMware Security...