5779 matches found
A week in security (November 11 – November 17)
Last week on Malwarebytes Labs: Malicious QR codes sent in the mail deliver malware 122 million people’s business contact info leaked by data broker Advertisers are pushing ad and pop-up blockers using old tricks Scammer robs homebuyers of life savings in $20 million theft spree Temu must respect...
CVE-2024-49592
creationtimestamp| type| source ---|---|--- 2024-11-15 21:12:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113489027313480593 2024-11-15 23:19:39+00:00| seen| https://t.me/cvedetector/11182 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1517/...
Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces
On Friday, November 8, 2024, cybersecurity firm Palo Alto Networks PAN published a bulletin PAN-SA-2024-0015 advising firewall customers to take steps to secure their firewall management interfaces amid unverified rumors of a possible new vulnerability. Rapid7 threat intelligence teams have also...
CVE-2024-36488
creationtimestamp| type| source ---|---|--- 2024-11-14 00:28:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113478473299029775 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1613/...
CVE-2024-34787
creationtimestamp| type| source ---|---|--- 2024-11-13 03:22:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113473495529817510 2024-11-13 04:07:31+00:00| seen| https://t.me/cvedetector/10783 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1501/...
CVE-2024-34781
creationtimestamp| type| source ---|---|--- 2024-11-13 03:07:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113473436500635075 2024-11-13 04:07:29+00:00| seen| https://t.me/cvedetector/10780 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1497/...
CVE-2024-32841
creationtimestamp| type| source ---|---|--- 2024-11-13 02:52:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113473377456204144 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1494/ 2024-11-13 09:12:33+00:00| seen|...
PT-2026-2326
Name of the Vulnerable Software and Affected Versions npm cli affected versions not specified Description The npm command-line interface has a flaw related to incorrect permission assignment that can lead to local privilege escalation. This issue allows an attacker to gain elevated privileges on ...
Patch Tuesday - November 2024
Microsoft is addressing 90 vulnerabilities this November 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today, although as with last month’s batch, it does not evaluate any of these zero-day vulnerabilities...
Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed...
Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review
Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...
CVE-2024-49042
creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:24:55+00:00| seen| https://t.me/cvedetector/10700...
CVE-2024-43613
creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review...
CVE-2024-50318
creationtimestamp| type| source ---|---|--- 2024-11-12 18:03:29+00:00| seen| https://t.me/cvedetector/10651 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1489/...
CVE-2024-50330
creationtimestamp| type| source ---|---|--- 2024-11-12 18:03:15+00:00| seen| https://t.me/cvedetector/10642 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1510/ 2024-11-13 09:12:33+00:00| seen|...
CVE-2024-50329
creationtimestamp| type| source ---|---|--- 2024-11-12 18:03:14+00:00| seen| https://t.me/cvedetector/10641 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1509/ 2024-11-13 09:12:33+00:00| seen|...
CVE-2024-50328
creationtimestamp| type| source ---|---|--- 2024-11-12 18:03:14+00:00| seen| https://t.me/cvedetector/10640 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1508/ 2024-11-13 09:12:33+00:00| seen|...
CVE-2024-50322
creationtimestamp| type| source ---|---|--- 2024-11-12 15:42:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113470743557850513 2024-11-12 18:03:23+00:00| seen| https://t.me/cvedetector/10648 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1503/...