⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips
- CVEs
- CVE-2024-50623CVE-2020-12271CVE-2024-11639CVE-2024-49138CVE-2024-44131CVE-2024-54143CVE-2024-11972CVE-2024-11205CVE-2024-12254CVE-2024-53677CVE-2024-23474CVE-2024-43153CVE-2024-43234CVE-2024-43222CVE-2024-54292CVE-2024-47578CVE-2024-54032CVE-2024-53552CVE-2024-55884CVE-2024-28025CVE-2024-28026CVE-2024-28027CVE-2024-21786CVE-2024-21855CVE-2024-28892CVE-2024-29224CVE-2023-46604
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-12271 | SQL Injection RCE in Sophos SFOS Firewalls with WAN-Exposed Admin or User Portal | 9.8 | 42% | KEVRansomwarePoC | KEV |
| CVE-2023-46604 | Unauthenticated RCE in Apache ActiveMQ via OpenWire Deserialization | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2024-11205 | The WPForms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpforms_is_admin_page' function… | 6.5 | <1% | ||
| CVE-2024-11639 | An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access | 9.8 | 5% | ||
| CVE-2024-11972 | Missing Authorization in Hunk Companion Plugin Allows Unauthenticated Plugin Install | 9.8 | 59% | PoC | |
| CVE-2024-12254 | Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to… | 8.7 | 2% | ||
CVE-2024-21786+3 related CVEs | An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies MC LR Router 2.10.5 | 7.2 | 10% | PoC ×2 | |
CVE-2024-28892+2 related CVEs | An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3 | 9.8 | 6% | ||
| CVE-2024-23474 | The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability | 8.8 | 2% | ||
| CVE-2024-43153 | Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice | 9.8 | <1% | ||
| CVE-2024-43222 | Missing Authorization vulnerability in SeventhQueen Sweet Date sweetdate allows Privilege Escalation.This issue affects Sweet Date | 9.8 | <1% | ||
| CVE-2024-43234 | Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects Woffice | 9.8 | <1% | ||
| CVE-2024-44131 | This issue was addressed with improved validation of symlinks | 5.5 | <1% | ||
| CVE-2024-47578 | Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application | 9.1 | <1% | ||
| CVE-2024-49138 | Local Privilege Escalation via Heap Overflow in Microsoft Windows CLFS Driver | 7.8 | 26% | KEVPoC ×2 | KEV |
| CVE-2024-50623 | Unauthenticated RCE via Unrestricted File Upload in Cleo Harmony, VLTrader, LexiCom | 9.8 | 99% | KEVRansomware | KEV |
| CVE-2024-53552 | CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover | 9.8 | <1% | ||
| CVE-2024-53677 | Path Traversal in Apache Struts File Upload Leading to RCE (CVE-2024-53677) | 9.5 | 78% | ||
| CVE-2024-54032 | Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject… | 9.3 | <1% | ||
| CVE-2024-54143 | openwrt/asu is an image on demand server for OpenWrt based distributions | 9.3 | 2% | ||
| CVE-2024-54292 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsplate Appsplate appsplate allows SQL Injection.This… | 9.3 | <1% | ||
| CVE-2024-55884 | In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate stack can be exhausted, leading to… | 9.0 | 1% |
From the original article
9 min read at thehackernews.com
Ravie Lakshmanan Dec 16, 2024 Cyber Threats / Weekly Recap This past week has been packed with unsettling developments in the world of cybersecurity. From silent but serious attacks on popular business tools to unexpected flaws lurking in everyday devices, there’s a lot that might have flown under your radar. Attackers are adapting old tricks, uncovering new ones, and targeting systems both large and small.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.