tstinner | Stinner IT Solutions

Critical VMware vCenter Server vulnerability (CVE-2021-22005) being exploited in the wild

by tstinner | 26. Feb 2022 | Threat Report

FortiGuard Labs is aware that VMware disclosed a critical vulnerability (CVE-2021-22005) on September 21st, 2021 that affects vCenter Server versions 6.7 and 7.0. A malicious attacker with network access to port 443 on vCenter Server can exploit the vulnerability and...

Wormable Windows Vulnerability (CVE-2022-21907) Patched by Microsoft

by tstinner | 26. Feb 2022 | Threat Report

UPDATE January 13 2022: Protection section has been updated with an IPS signature information.FortiGuard Labs is aware that a total of 96 vulnerabilities were patched by Microsoft on January 11th, 2022 as part of regular MS Patch Tuesday. In those vulnerabilities,...

Remote Code Execution in H2 Console JNDI – (CVE-2021-42392)

by tstinner | 26. Feb 2022 | Threat Report

Update 1/11 – “What is the Status of Coverage” section updatedFortiGuard Labs is aware of newly discovered vulnerability in H2 Database software. The vulnerability is an unauthenticated remote code execution in the H2 database console and similar to...

BotenaGo Malware Targets Multiple IoT Devices

by tstinner | 26. Feb 2022 | Threat Report

FortiGuard Labs is aware of a report that source code of BotenaGo malware was recently made available on GitHub. BotenaGo is a malware written in Golang and is reportedly capable of exploiting more than 30 vulnerabilities in various IoT devices such as routers,...

Proof-of-Concept Code Now Available for an Exploited Windows Local Privilege Escalation Vulnerability

by tstinner | 26. Feb 2022 | Threat Report

FortiGuard Labs is aware that a Proof-of-Concept (POC) code for a newly patched Windows vulnerability (CVE-2022-21882) that is reported to have been exploited in the wild was released to a publicly available online repository. CVE-2022-21882 is a local privilege (LPE)...

« Older Entries