Do Son Researchers have exposed a dangerous set of vulnerabilities within CyberPower's PowerPanel Business Software
Vulnerability
CVE-2024-34346 (CVSS 8.5) presents a significant risk as it allows for permission escalation through the mishandling of privileged files
Trend Micro has released a security update for its Maximum Security software suite, addressing a privilege escalation flaw (CVE-2024-32849)
CVE-2024-29212 carries a high severity rating with a CVSS score of 8.8, primarily due to its potential to allow remote code execution (RCE)
Attackers are weaponizing two critical vulnerabilities, CVE-2023-46805 and CVE-2024-21887, to spread the notorious Mirai botnet malware
Designated as CVE-2024-4367 in PDF.js and CVE-2024-34342 in React-PDF, this flaw hinges on the improper handling of JavaScript
The attackers then deployed a Perl-based web shell, dubbed ROOTROT, which is linked to the China-based hacking group UNC5221
The technical details and proof-of-concept (PoC) code are now available for a high-severity vulnerability (CVE-2024-21006)
The CVE-2024-4041 vulnerability stems from insufficient input sanitization and output escaping mechanisms within the plugin
TunnelVision, officially cataloged as CVE-2024-3661, exploits a fundamental flaw in how devices on a local network handle routing decisions
The CVE-2024-34456 vulnerability in question allowed for the injection of a custom dynamic library (dylib) into the Antivirus One application
The vulnerability, CVE-2023-49606, poses a severe threat to users of the software's most recent versions, with a CVSS rating of 9.8
The vulnerabilities, cataloged as CVE-2024-33788 and CVE-2024-33789, both involve command injection exploits
The vulnerabilities, tracked as CVE-2024-4215 and CVE-2024-4216, both carried a severity rating of 7.4 on the CVSS.
The United States has formally denounced a series of cyberattacks orchestrated by Russia’s GRU, commonly identified as APT28
Hackers are actively exploiting a flaw in the LiteSpeed Cache Plugin for WordPress, a tool installed on over 5 million websites worldwide
CVE-2024-0087 is rated 9.0 on the CVSS scale, involves a vulnerability where users can redirect logging output to any file
CVE-2024-4439 (CVSS score of 7.2) pertains to a stored Cross-Site Scripting (XSS) flaw in the WordPress Core.
Vladimir Tokarev will detail a series of critical zero-day vulnerabilities (OVPNX) in OpenVPN, the world's leading VPN solution
CVE-2024-30251, is a denial of service (DoS) issue that allows attackers to incapacitate web services with a single malformed POST request
CVE-2024-33530 arises when a user, initially placed in a lobby due to the meeting’s settings, is invited into the main conference room
CVE-2024-32114 has been rated with a severity score of 8.5 on the CVSS scale, indicating a high level of risk.