Exploit / PoCcritical
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [30 Dec]
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-3568 | Buffer Overflow RCE in WhatsApp VoIP Stack via Crafted RTCP Packets | 9.8 | 30% | KEV | KEV |
| CVE-2024-12856 | OS Command Injection in Four-Faith F3x24/F3x36 Routers | 7.2 | 84% | PoC ×2 | |
| CVE-2024-3393 | Unauthenticated Remote DoS via DNS Packet Parsing in Palo Alto Networks PAN-OS | 8.7 | 29% | KEV | KEV |
| CVE-2024-43441 | Authentication Bypass in Apache HugeGraph-Server (CVE-2024-43441) | 9.8 | 69% | ||
| CVE-2024-45387 | Authenticated SQL Injection in Apache Traffic Control Traffic Ops | 8.8 | 42% | ||
CVE-2024-47547+2 related CVEs | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaves authentication… | 9.3 group max | <1% | ||
| CVE-2024-52046 | Unauthenticated RCE in Apache MINA via Insecure Java Deserialization | 10.0 | 24% | ||
| CVE-2024-56337 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat | 9.8 | 9% |
From the original article
9 min read at thehackernews.com
Ravie Lakshmanan Dec 30, 2024 Cybersecurity / Hacking News Every week, the digital world faces new challenges and changes. Hackers are always finding new ways to breach systems, while defenders work hard to keep our data safe. Whether it's a hidden flaw in popular software or a clever new attack method, staying informed is key to protecting yourself and your organization.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.