IT-Sicherheitsupdates | Stinner IT Solutions

Polyfill.io Supply Chain Attack

von | 27. Juni 2024 | Unkategorisiert

What is the attack?Over 100,000+ sites have been impacted by a supply chain attack involving the Polyfill.io service. Polyfill is a popular tool used for enhancing browser capabilities by hundreds of thousands of sites to ensure that all website visitors can use the...

CPrime Supply Chain Attack

von | 21. Juni 2024 | Unkategorisiert

What is the attack?FortiGuard Labs’ Recon team is aware of communications on a cybercrime forum known as ‘BreachForums’ with a Threat Actor (TA) known by the alias ‘IntelBroker.’ This threat actor has posted about selling access to...

Oracle WebLogic Server Vulnerabilities (CVE-2023-21839, CVE-2017-3506)

von | 5. Juni 2024 | Unkategorisiert

What is the attack?A threat actor known as “8220 Gang” is seen exploiting two vulnerabilities in the Oracle WebLogic server: CVE-2017-3506, which allows remote OS command execution, and CVE-2023-21839 is an insecure deserialization vulnerability. CISA recently added...

Check Point Quantum Security Gateways Information Disclosure Vulnerability (CVE-2024-24919)

von | 30. Mai 2024 | Unkategorisiert

What is the attack?A zero-day vulnerability affecting Check Point Security Gateways is being exploited by attackers to gain remote access. The vulnerability can allow an attacker to read sensitive information on Check Point Security Gateways enabled with remote Access...

Genesis Market Malware Attack

von | 22. Mai 2024 | Unkategorisiert

What is the attack?FortiGuard Lab’s EDR team recently identified malware infection exhibiting strong similarities to the previously reported Genesis Market malicious campaign that was dismantled by law enforcement in early 2023. The investigation traced some initial...

NextGen Healthcare Mirth Connect RCE (CVE-2023-43208, CVE-2023-37679)

von | 22. Mai 2024 | Unkategorisiert

What is the vulnerability?NextGen Healthcare Mirth Connect is vulnerable to unauthenticated remote code execution (CVE-2023-43208) caused due to an incomplete patch of a Command Injection flaw (CVE-2023-37679). Mirth Connect is an open-source data integration...

Google Chromium in Visuals Use-After-Free Vulnerability (CVE-2024-4671)

von | 13. Mai 2024 | Unkategorisiert

What is the Vulnerability?A new zero-day vulnerability has recently been discovered in the Visuals component of Chrome, which is responsible for rendering and displaying web content. This “use after free” vulnerability tagged as CVE-2024-4671 can cause a browser to...

Tinyproxy use-after-free Vulnerability (CVE-2023-49606)

von | 7. Mai 2024 | Unkategorisiert

What is the vulnerability?A use-after-free vulnerability tagged as CVE-2023-49606 exists in Tinyproxy, a lightweight open-source HTTP proxy daemon. The threat actor may trigger this memory corruption and execute arbitrary code by sending a specially crafted HTTP...

GitLab Password Reset Vulnerability (CVE-2023-7028)

von | 2. Mai 2024 | Unkategorisiert

What is the vulnerability?A critical vulnerability has been discovered in GitLab, a DevOps platform for managing software development lifecycle. A successful exploitation of the vulnerability may allow an attacker to take control of the GitLab administrator account...

Ignite Realtime Openfire Path Traversal Vulnerability (CVE-2023-32315)

von | 1. Mai 2024 | Unkategorisiert

What is the vulnerability?The CVE-2023-32315 is a path traversal vulnerability that affects all Openfire versions since version 3.1.0. Successful exploitation of this vulnerability can allow attackers to bypass authentication and gain access to sections of the...