IT-Sicherheitsupdates | Stinner IT Solutions

Check Point Quantum Security Gateways Information Disclosure Vulnerability (CVE-2024-24919)

von | 30. Mai 2024 | Unkategorisiert

What is the attack?A zero-day vulnerability affecting Check Point Security Gateways is being exploited by attackers to gain remote access. The vulnerability can allow an attacker to read sensitive information on Check Point Security Gateways enabled with remote Access...

Genesis Market Malware Attack

von | 22. Mai 2024 | Unkategorisiert

What is the attack?FortiGuard Lab’s EDR team recently identified malware infection exhibiting strong similarities to the previously reported Genesis Market malicious campaign that was dismantled by law enforcement in early 2023. The investigation traced some initial...

NextGen Healthcare Mirth Connect RCE (CVE-2023-43208, CVE-2023-37679)

von | 22. Mai 2024 | Unkategorisiert

What is the vulnerability?NextGen Healthcare Mirth Connect is vulnerable to unauthenticated remote code execution (CVE-2023-43208) caused due to an incomplete patch of a Command Injection flaw (CVE-2023-37679). Mirth Connect is an open-source data integration...

Google Chromium in Visuals Use-After-Free Vulnerability (CVE-2024-4671)

von | 13. Mai 2024 | Unkategorisiert

What is the Vulnerability?A new zero-day vulnerability has recently been discovered in the Visuals component of Chrome, which is responsible for rendering and displaying web content. This “use after free” vulnerability tagged as CVE-2024-4671 can cause a browser to...

Tinyproxy use-after-free Vulnerability (CVE-2023-49606)

von | 7. Mai 2024 | Unkategorisiert

What is the vulnerability?A use-after-free vulnerability tagged as CVE-2023-49606 exists in Tinyproxy, a lightweight open-source HTTP proxy daemon. The threat actor may trigger this memory corruption and execute arbitrary code by sending a specially crafted HTTP...

GitLab Password Reset Vulnerability (CVE-2023-7028)

von | 2. Mai 2024 | Unkategorisiert

What is the vulnerability?A critical vulnerability has been discovered in GitLab, a DevOps platform for managing software development lifecycle. A successful exploitation of the vulnerability may allow an attacker to take control of the GitLab administrator account...

Ignite Realtime Openfire Path Traversal Vulnerability (CVE-2023-32315)

von | 1. Mai 2024 | Unkategorisiert

What is the vulnerability?The CVE-2023-32315 is a path traversal vulnerability that affects all Openfire versions since version 3.1.0. Successful exploitation of this vulnerability can allow attackers to bypass authentication and gain access to sections of the...

CrushFTP VFS Sandbox Escape Vulnerability (CVE-2024-4040)

von | 26. Apr. 2024 | Unkategorisiert

What is the Vulnerability ? A zero-day security vulnerability has been uncovered in an enterprise file-transfer software CrushFTP. The vulnerability tagged as CVE-2024-4040 is actively being exploited in targeted attacks and has also been added to the CISA Known...

ArcaneDoor Attack (CVE-2024-20353 and CVE-2024-20359)

von | 24. Apr. 2024 | Unkategorisiert

What is the Attack? Cisco issued an advisory on 24th April, regarding its Adaptive Security Appliances, multifunctional devices combining firewall, VPN, and other security functions. It reported that these appliances had become the focus of state-sponsored espionage,...

Akira Ransomware Attack

von | 20. Apr. 2024 | Unkategorisiert

What is the Akira Ransomware Attack? The Akira ransomware attack has actively and widely impacting businesses. According to CISA advisory, the ransomware group has impacted over 250 organizations and claimed approximately $42 million (USD) in ransomware proceeds. The...