CVE-2024-12834

creationtimestamp| type| source ---|---|--- 2024-12-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1722/ 2024-12-30 16:54:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113742818750162019 2024-12-30 16:58:29+00:00| seen|...

CVE-2024-12836

creationtimestamp| type| source ---|---|--- 2024-12-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1724/ 2024-12-30 17:13:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113742892883784558 2024-12-30 19:18:38+00:00| seen| https://t.me/cvedetector/13943...

CVE-2024-26256

creationtimestamp| type| source ---|---|--- 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1698/...

CVE-2024-12829

creationtimestamp| type| source ---|---|--- 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1717/ 2024-12-20 00:26:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113682309281147356 2024-12-20 01:15:40+00:00| seen|...

CVE-2024-12832

creationtimestamp| type| source ---|---|--- 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1719/ 2024-12-20 00:26:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113682309323361191 2024-12-20 01:15:48+00:00| seen|...

CVE-2024-12200

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:59+00:00| seen| https://t.me/cvedetector/13110 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1710/...

CVE-2024-12198

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:54+00:00| seen| https://t.me/cvedetector/13108 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1709/ 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-113/...

CVE-2024-12194

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:53+00:00| seen| https://t.me/cvedetector/13106 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1706/...

CVE-2024-12197

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:53+00:00| seen| https://t.me/cvedetector/13107 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1708/...

CVE-2024-12670

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:46+00:00| seen| https://t.me/cvedetector/13101 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1701/...

CVE-2024-12671

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:45+00:00| seen| https://t.me/cvedetector/13100 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1702/...

CVE-2024-11422

creationtimestamp| type| source ---|---|--- 2024-12-17 15:20:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113668837672027134 2024-12-17 17:37:00+00:00| seen| https://t.me/cvedetector/13111 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1699/...

The Mask APT Resurfaces with Sophisticated Multi-Platform Malware Arsenal

A little-known cyber espionage actor known as The Mask has been linked to a new set of attacks targeting an unnamed organization in Latin America twice in 2019 and 2022. "The Mask APT is a legendary threat actor that has been performing highly sophisticated attacks since at least 2007," Kaspersky...

PT-2024-10058

Name of the Vulnerable Software and Affected Versions BeyondTrust Privileged Remote Access PRA and Remote Support RS versions prior to 24.3.1 PostgreSQL affected versions not specified Description A critical command injection vulnerability exists in BeyondTrust Privileged Remote Access PRA and...

Careto is back: what’s new after 10 years of silence?

During the first week of October, Kaspersky took part in the 34th Virus Bulletin International Conference, one of the longest-running cybersecurity events. There, our researchers delivered multiple presentations, and one of our talks focused on newly observed activities by the Careto threat actor...

CVE-2024-12553

creationtimestamp| type| source ---|---|--- 2024-12-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1682/ 2024-12-14 00:58:32+00:00| seen| https://t.me/cvedetector/12905...

CVE-2024-54500

creationtimestamp| type| source ---|---|--- 2024-12-12 00:14:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113636963130468376 2024-12-12 06:24:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113638417612658147 2025-03-18 04:00:00+00:00| seen|...

CVE-2024-54501

creationtimestamp| type| source ---|---|--- 2024-12-12 00:14:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113636963145001217 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-170/...

CVE-2024-54486

creationtimestamp| type| source ---|---|--- 2024-12-11 23:59:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113636904055458729 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-166/...

Modular Java Backdoor Dropped in Cleo Exploitation Campaign

Many thanks to Rapid7 MDR and incident response teams for their contributions to this analysis. While investigating incidents related to Cleo software exploitation, Rapid7 Labs and MDR observed a novel, multi-stage attack that deploys an encoded Java Archive JAR payload. Our investigation reveale...