IT-Sicherheitsupdates | Stinner IT Solutions

Aviatrix Controllers OS Command Injection Vulnerability

von | 18. Jan. 2025 | Unkategorisiert

What is the Vulnerability?Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. The security vulnerability tracked as CVE-2024-50603, which rates 10 out of 10 on the CVSS scale, has...

Rsync File Synchronization Tool Vulnerabilities

von | 15. Jan. 2025 | Unkategorisiert

What are the Vulnerabilities?Six security vulnerabilities have been disclosed in the popular Rsync tool, an open-source file synchronization and data transferring tool utilized for its ability to perform incremental transfers, reducing data transfer times and...

Ivanti Connect Secure Zero-Day Vulnerability

von | 9. Jan. 2025 | Unkategorisiert

What are the Vulnerabilities?Ivanti disclosed two vulnerabilities, CVE-2025-0282 and CVE-2025-0283, impacting Ivanti Connect Secure (“ICS”) VPN appliances. CVE-2025-0282 is an unauthenticated stack-based buffer overflow affecting Ivanti Connect Secure, Policy Secure,...

EC2 Grouper Attack

von | 2. Jan. 2025 | Unkategorisiert

What is the Attack?FortiGuard Labs Threat Team has observed recent attacks by a Threat Actor dubbed “EC2 Grouper” that leverages AWS tools for PowerShell to carry out cloud-based attacks. It leverages APIs to inventory EC2 types and available regions...

PAN-OS Firewall Denial of Service (DoS) Vulnerability

von | 30. Dez. 2024 | Unkategorisiert

What is the Vulnerability?Attackers are exploiting, a Denial-of-Service vulnerability (CVE-2024-3393) in the DNS Security feature of Palo Alto Networks PAN-OS. This vulnerability allows an unauthenticated attacker to send a malicious packet through the data plane of...

Cleo Multiple Products Unrestricted File Upload Vulnerability (CVE-2024-50623)

von | 16. Dez. 2024 | Unkategorisiert

What is the Vulnerability?An unrestricted file upload and download vulnerability (CVE-2024-50623) that could lead to remote code execution, affecting multiple Cleo products is being actively exploited in the wild. The vulnerability affects the following Cleo products...

Ivanti Cloud Services Application (CSA) Vulnerabilities (CVE-2024-11639, CVE-2024-11772, CVE-2024-11773)

von | 13. Dez. 2024 | Unkategorisiert

What are the Vulnerabilities?Ivanti has released security updates to address multiple critical flaws in its Cloud Services Application (CSA) that could lead to privilege escalation and code execution. More details below:CVE-2024-11639, CVSS: 10.0 (Maximum Severity),...

Mitel MiCollab Unauthorized Access (CVE-2024–35286 & CVE-2024–41713)

von | 11. Dez. 2024 | Unkategorisiert

What is the attack?Two security flaws in Mitel MiCollab, CVE-2024–35286 and CVE-2024–41713, have been found and are being actively exploited, putting many organizations at risk. These vulnerabilities allow attackers bypass authentication and access files on affected...

ProjectSend Improper Authentication Vulnerability (CVE-2024-11680)

von | 5. Dez. 2024 | Unkategorisiert

What is the attack?ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the...

Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

von | 15. Nov. 2024 | Unkategorisiert

What is the Vulnerability?Microsoft Windows contains an NTLMv2 hash spoofing vulnerability (CVE-2024-43451) that could result in disclosing a user’s NTLMv2 hash to an attacker via a file open operation. The attacker can leverage this hash to impersonate that...