tstinner | Stinner IT Solutions

Attacks Observed in the Wild Exploiting CVE-2020-0688 (Microsoft Exchange Validation Key Remote Code Execution Vulnerability)

von tstinner | 24. Juli 2025 | Unkategorisiert

FortiGuard Labs is aware of reports of active exploitation of CVE-2020-0688 – Microsoft Exchange Validation Key Remote Code Execution Vulnerability. Active in the wild attacks were first observed by Twitter user Troy Mursch (@bad_packets). The vulnerability was...

Apache TomCat AJP File Inclusion Vulnerability

von tstinner | 24. Juli 2025 | Unkategorisiert

FortiGuard Labs is aware of a new attack on Apache Tomcat Servers dubbed “GhostCat.” Discovered by Chaitin Tech, a vulnerability in Apache Tomcat exists where an attacker has the ability to read and write in the webapp directory of Apache Tomcat. It...

Patch Released for Critical vm2 Sandbox Escape Vulnerability

von tstinner | 23. Juli 2025 | Unkategorisiert

UPDATE April 19 2023: Updated to include another sandbox vulnerability in vm2 (CVE-2023-30547).Earlier this week, an update was released for a critical sandbox escape vulnerabilities in vm2 (CVE-2023-29017 and CVE-2023-29199) , which ultimately allows for remote code...

PaperCut Remote Code Execution Vulnerability Exploited in the Wild

von tstinner | 23. Juli 2025 | Unkategorisiert

UPDATE 04/26/2023: Updated protection section for IPS protection.FortiGuard Labs is aware that a recently disclosed vulnerability in PaperCut MF/NG (CVE-2023-27350) is susceptible to a remote code execution attack and is currently being exploited in the wild. Various...

CISA to the Known Exploited Vulnerabilities Catalog

von tstinner | 23. Juli 2025 | Unkategorisiert

FortiGuard Labs is aware that the Cybersecurity & Infrastructure Security Agency (CISA) added CVE-2020-5741 (Plex Media Server remote code execution vulnerability) and CVE-2021-39144 (XStream Remote Code Execution Vulnerability) to their Known Exploited...

« Ältere Einträge

Nächste Einträge »