LR pixel

Windows CLFS Driver Elevation of Privilege

von | 11. Apr. 2025 | Unkategorisiert

What is the Vulnerability?A zero-day vulnerability has recently been identified in the Common Log File System (CLFS) kernel driver. CLFS is a general-purpose logging subsystem within the Windows operating system that provides a high-performance way to store log data...

CrushFTP Authentication Bypass

von | 9. Apr. 2025 | Unkategorisiert

What is the Vulnerability?FortiGuard Labs has observed in-the-wild attack attempts targeting CVE-2025-31161, an authentication bypass vulnerability in CrushFTP managed file transfer (MFT) software. Successful exploitation may grant attackers administrative access to...

Kubernetes Ingress-nginx Controller RCE

von | 3. Apr. 2025 | Unkategorisiert

What is the Vulnerability?On March 24, researchers disclosed a set of five vulnerabilities, collectively known as “IngressNightmare,” affecting Ingress-nginx, one of the popular ingress controllers available for Kubernetes. Using Ingress-NGINX is one of the most...

Apache Tomcat RCE

von | 26. März 2025 | Unkategorisiert

What is the Vulnerability?On March 10, 2025, Apache issued a security advisory regarding a critical vulnerability (CVE-2025-24813) affecting the Apache Tomcat web server. This flaw could allow attackers to view or inject arbitrary content into security-sensitive files...

GitHub Actions Supply Chain Attack

von | 25. März 2025 | Unkategorisiert

What is the Attack?Recently, a popular third-party GitHub Action tj-actions/changed-files GitHub Action (CVE-2025-30066)- used by over 23,000 repositories- was compromised, potentially exposing sensitive workflow secrets in any pipeline that integrated it.It was later...