IT-Sicherheitsupdates | Stinner IT Solutions

Citrix NetScaler ADC and NetScaler Gateway Unauthenticated Remote Code Execution Vulnerability (CVE-2023-3519)

von tstinner | 5. März 2025 | Unkategorisiert

What is Citrix NetScaler ADC and NetScaler Gateway?Citrix NetScaler ADC, previously known as Citrix ADC, is an Application Delivery Controller (ADC) designed to achieve secure and optimized network traffic. Citrix NetScaler Gateway, previously known as Citrix Gateway,...

VMware Multiple Products Zero-day Vulnerabilities

von tstinner | 4. März 2025 | Unkategorisiert

What is the Vulnerability?Multiple zero-day vulnerabilities have been identified in VMware’s ESXi, Workstation, and Fusion products. VMware has confirmed that these vulnerabilities are being actively exploited in the wild, and the Cybersecurity and...

Hitachi Vantara Pentaho BA Server Vulnerabilities

von tstinner | 4. März 2025 | Unkategorisiert

What is the Vulnerability?Threat actors are actively exploiting vulnerabilities in the Hitachi Vantara Pentaho Business Analytics Server. FortiGuard network sensors have detected attack attempts on over 500 devices, and CISA has added these vulnerabilities to the...

Palo Alto PAN-OS Authentication Bypass

von tstinner | 21. Feb. 2025 | Unkategorisiert

What is the Vulnerability? A recent authentication bypass vulnerability (CVE-2025-0108) in the Palo Alto Networks PAN-OS software is under active exploitation as has been added to CISA’s Known Exploited Vulnerabilities (KEV) Catalog. Successful exploitation of...

Microsoft .NET Framework Information Disclosure Vulnerability

von tstinner | 13. Feb. 2025 | Unkategorisiert

What is the Attack?Threat Actors are targeting a Microsoft .NET Framework information disclosure vulnerability (CVE-2024-29059) that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution. The security vulnerability tracked as CVE-2024-29059,...

Trimble Cityworks Remote Code Execution Attack

von | 7. Feb. 2025 | Unkategorisiert

What is the Attack?Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services (IIS) web server, potentially resulting...

Aviatrix Controllers OS Command Injection Vulnerability

von | 18. Jan. 2025 | Unkategorisiert

What is the Vulnerability?Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. The security vulnerability tracked as CVE-2024-50603, which rates 10 out of 10 on the CVSS scale, has...

Rsync File Synchronization Tool Vulnerabilities

von | 15. Jan. 2025 | Unkategorisiert

What are the Vulnerabilities?Six security vulnerabilities have been disclosed in the popular Rsync tool, an open-source file synchronization and data transferring tool utilized for its ability to perform incremental transfers, reducing data transfer times and...

Ivanti Connect Secure Zero-Day Vulnerability

von | 9. Jan. 2025 | Unkategorisiert

What are the Vulnerabilities?Ivanti disclosed two vulnerabilities, CVE-2025-0282 and CVE-2025-0283, impacting Ivanti Connect Secure (“ICS”) VPN appliances. CVE-2025-0282 is an unauthenticated stack-based buffer overflow affecting Ivanti Connect Secure, Policy Secure,...

EC2 Grouper Attack

von | 2. Jan. 2025 | Unkategorisiert

What is the Attack?FortiGuard Labs Threat Team has observed recent attacks by a Threat Actor dubbed “EC2 Grouper” that leverages AWS tools for PowerShell to carry out cloud-based attacks. It leverages APIs to inventory EC2 types and available regions...