LR pixel

Apache Tomcat RCE

von | 26. März 2025 | Unkategorisiert

What is the Vulnerability?On March 10, 2025, Apache issued a security advisory regarding a critical vulnerability (CVE-2025-24813) affecting the Apache Tomcat web server. This flaw could allow attackers to view or inject arbitrary content into security-sensitive files...

GitHub Actions Supply Chain Attack

von | 25. März 2025 | Unkategorisiert

What is the Attack?Recently, a popular third-party GitHub Action tj-actions/changed-files GitHub Action (CVE-2025-30066)- used by over 23,000 repositories- was compromised, potentially exposing sensitive workflow secrets in any pipeline that integrated it.It was later...

Hitachi Vantara Pentaho BA Server Vulnerabilities

von | 4. März 2025 | Unkategorisiert

What is the Vulnerability?Threat actors are actively exploiting vulnerabilities in the Hitachi Vantara Pentaho Business Analytics Server. FortiGuard network sensors have detected attack attempts on over 500 devices, and CISA has added these vulnerabilities to the...

Palo Alto PAN-OS Authentication Bypass

von | 21. Feb. 2025 | Unkategorisiert

What is the Vulnerability? A recent authentication bypass vulnerability (CVE-2025-0108) in the Palo Alto Networks PAN-OS software is under active exploitation as has been added to CISA’s Known Exploited Vulnerabilities (KEV) Catalog. Successful exploitation of...

Trimble Cityworks Remote Code Execution Attack

von | 7. Feb. 2025 | Unkategorisiert

What is the Attack?Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services (IIS) web server, potentially resulting...

Aviatrix Controllers OS Command Injection Vulnerability

von | 18. Jan. 2025 | Unkategorisiert

What is the Vulnerability?Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. The security vulnerability tracked as CVE-2024-50603, which rates 10 out of 10 on the CVSS scale, has...

Rsync File Synchronization Tool Vulnerabilities

von | 15. Jan. 2025 | Unkategorisiert

What are the Vulnerabilities?Six security vulnerabilities have been disclosed in the popular Rsync tool, an open-source file synchronization and data transferring tool utilized for its ability to perform incremental transfers, reducing data transfer times and...