IT-Sicherheitsupdates | Stinner IT Solutions

Citrix NetScaler ADC and NetScaler Gateway Vulnerabilities

von tstinner | 26. Juni 2025 | Unkategorisiert

What is the Vulnerability?Citrix has published security advisories addressing three critical vulnerabilities, CVE-2025-6543, CVE-2025-5349, and CVE-2025-5777, affecting the NetScaler ADC and NetScaler Gateway under specific pre-conditions.CVE-2025-6543: A memory...

Teleport Remote Authentication Bypass

von tstinner | 20. Juni 2025 | Unkategorisiert

What is the Vulnerability?Teleport security engineers have discovered a critical vulnerability affecting Teleport versions earlier than 17.5.2. This flaw allows remote attackers to bypass SSH authentication on servers running Teleport SSH agents, OpenSSH-integrated...

TBK DVRs Botnet Attack

von tstinner | 10. Juni 2025 | Unkategorisiert

What is the Attack?Threat Actors are actively exploiting CVE-2024-3721, a command injection vulnerability in TBK DVR devices (Digital Video Recorders). This flaw allows unauthenticated remote code execution (RCE) via crafted HTTP requests to the endpoint. The...

SimpleHelp Path Traversal Vulnerability

von tstinner | 29. Mai 2025 | Unkategorisiert

What is the Vulnerability?FortiGuard Labs continues to observe ongoing attack attempts targeting SimpleHelp, a Remote Monitoring and Management (RMM) software, due to a critical unauthenticated path traversal vulnerability (CVE-2024-57727) affecting versions 5.5.7 and...

Ivanti EPMM Zero Day Vulnerabilities

von tstinner | 22. Mai 2025 | Unkategorisiert

What is the Vulnerability?On May 15, 2025, Ivanti disclosed two critical vulnerabilities, CVE-2025-4427 and CVE-2025-4428, affecting Ivanti Endpoint Manager Mobile (EPMM) version 12.5.0.0 and earlier. When chained together, these vulnerabilities can allow...

SAP Netweaver Zero-Day Attack

von tstinner | 10. Mai 2025 | Unkategorisiert

What is the Attack?A zero-day SAP vulnerability, CVE-2025-31324, with CVSS score of 10.0 is being actively exploited in the wild. This vulnerability affects SAP Visual Composer, allowing unauthenticated threat actors to upload arbitrary files, resulting in full...

Ivanti Connect Buffer Overflow Vulnerability

von tstinner | 7. Mai 2025 | Unkategorisiert

What is the Vulnerability?CVE-2025-22457 is identified as a buffer overflow vulnerability affecting Ivanti Connect Secure, Policy Secure and ZTA Gateways. If successfully exploited, can result in remote code execution. This exploitation poses significant risks,...

Langflow Missing Authentication Vulnerability

von tstinner | 6. Mai 2025 | Unkategorisiert

What is the Vulnerability?A critical missing authentication vulnerability, identified as CVE-2025-3248, has been discovered in Langflow, a web application designed for creating AI-driven agents. This vulnerability allows remote, unauthenticated attackers to execute...

Commvault Command Center Path Traversal Vulnerability (CVE-2025-34028)

von tstinner | 25. Apr. 2025 | Unkategorisiert

What is the Vulnerability?A critical path traversal vulnerability has been identified in Commvault’s Command Center Innovation Release. The vulnerability, tracked as CVE-2025-34028, has been assigned a CVSS score of 9.0. This flaw allows unauthenticated remote...

Erlang/OTP RCE (CVE-2025-32433)

von tstinner | 21. Apr. 2025 | Unkategorisiert

What is the Vulnerability? A critical SSH vulnerability has recently been identified in the Erlang/Open Telecom Platform (OTP). The vulnerability, tracked as CVE-2025-32433, has been assigned a CVSS score of 10.0. It is unauthenticated, remotely exploitable, and...