CVE-2024-2389

Progress Software Flowmon
02 Apr 2024
Published
02 Apr 2024
Updated
CVSS v3.1
CRITICAL (10.0)
  • 2 Posts
  • 1 Interaction

CVE Info

In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified.  An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.
MITRE
NVD

Fediverse

Profile picture
Privacity@privacity

Flowmon, il software di monitoraggio di rete è afflitto da una vulnerabilità critica
poliverso.org/display/0477a01e
Flowmon, il software di monitoraggio di rete è afflitto da una vulnerabilità critica La falla di sicurezza, identificata come nvd.nist.gov/vuln/detail/CVE-2, permette agli aggressori di eseguire comandi di sistema arbitrari sulle macchine che ospitano il software. Che cos’è Flowmon e perché è flowmon.com/enè

  • 1
  • 0
  • 11 hours ago
Profile picture
Cybersecurity & cyberwarfare@cybersecurity

Flowmon, il software di monitoraggio di rete è afflitto da una vulnerabilità critica

La falla di sicurezza, identificata come CVE-2024-2389, permette agli aggressori di eseguire comandi di sistema arbitrari sulle macchine che ospitano il software. Che cos’è Flowmon e perché è importante? Flowmon è una soluzione di monitoraggio delle prestazioni di rete che supporta le aziende nell’ottimizzare le loro infrastrutture, nell’individuare e prevenire le anomalie, nel controllare il […]

L'articolo Flowmon, il software di monitoraggio di rete è afflitto da una vulnerabilità critica proviene da il blog della sicurezza informatica.

redhotcyber.com/post/flowmon-i
redhotcyber.com/feed

poliverso.org/display/0477a01e

  • 0
  • 0
  • 12 hours ago

CVE-2024-21893

KEV
Ivanti ICS
31 Jan 2024
Published
31 Jan 2024
Updated
CVSS v3.0
HIGH (8.2)
  • 1 Post
  • 1 Interaction

CVE Info

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.
MITRE
NVD

Fediverse

Profile picture
Privacity@privacity

Come Hackerare una Cassaforte Elettronica con Flipper Zero
poliverso.org/display/0477a01e
Come Hackerare una Cassaforte Elettronica con Flipper Zero Pavel Zhovner, un ricercatore di sicurezza, ha dimostrato un modo per hackerare alcune casseforti elettroniche prodotte da SentrySafe utilizzando un dispositivo Flipper Zero e sfruttando una redhotcyber.com/post/vulnerabi

  • 1
  • 0
  • 12 hours ago

CVE-2023-20198

KEV
Cisco IOS XE Software
16 Oct 2023
Published
25 Jan 2024
Updated
CVSS v3.1
CRITICAL (10.0)
  • 1 Post

CVE Info

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log in with normal user access. The attacker then exploited another component of the web UI feature, leveraging the new local user to elevate privilege to root and write the implant to the file system. Cisco has assigned CVE-2023-20273 to this issue. CVE-2023-20198 has been assigned a CVSS Score of 10.0. CVE-2023-20273 has been assigned a CVSS Score of 7.2. Both of these CVEs are being tracked by CSCwh87343.
MITRE
NVD

Fediverse

Profile picture
Dark Web Informer@DarkWebInformer

🚨EXPLOIT POC🚨PoC for CVE-2023-20198 Cisco IOS XE RCE and query released by @W01fh4cker.

GitHub: github.com/W01fh4cker/CVE-2023

X Link: twitter.com/DarkWebInformer/st

  • 0
  • 0
  • 4 hours ago

CVE-2017-8570

KEV
Microsoft Corporation Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, and Office 2016.
11 Jul 2017
Published
04 Mar 2018
Updated
CVSS
Pending
  • 1 Post
  • 5 Interactions

CVE Info

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.
MITRE
NVD

Fediverse

Profile picture
Not Simon 🐐@screaminggoat

Deep Instinct: Uncorking Old Wine: Zero-Day from 2017 + Cobalt Strike Loader in Unholy Alliance
A targeted operation against Ukraine by an unknown threat actor leveraged CVE-2017-8570 (7.8 high, disclosed 11 July 2017 by Microsoft, Microsoft Office RCE) for initial access. The decoy is a PPSX (PowerPoint Slideshow) file of a U.S. Army tank-mounted mine clearing blades manual. There are two stages in the infection chain, with the payload disguised as Cisco AnyConnect VPN file and the loader serves up a Cobalt Strike Beacon. Deep Instinct provides a technical analysis of the DLL, loader, and Cobalt Strike configs. IOC and MITRE ATT&CK TTPs listed.

  • 1
  • 4
  • 14 hours ago