Ransomwarecritical
THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-28461 | Unauthenticated RCE in Array Networks AG/vxAG SSL VPN Gateways (ArrayOS) | 9.8 | 68% | KEVRansomware | KEV |
CVE-2024-10542+1 related CVE | The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization… | 7.5 | 15% | ||
| CVE-2024-11103 | The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7 | 9.8 | <1% | ||
| CVE-2024-11680 | Unauthenticated Config Tampering and Webshell Upload in ProjectSend (pre-r1720) | 9.8 | 92% | KEVPoC | KEV |
| CVE-2024-42327 | SQL Injection in Zabbix Frontend User API (CUser.get) | 9.9 | 79% | ||
| CVE-2024-49035 | Unauthenticated Privilege Escalation in Microsoft Partner Center | 9.8 | 1% | KEV | KEV |
| CVE-2024-49039 | Windows Task Scheduler Elevation-of-Privilege Flaw Actively Exploited in the Wild | 8.8 | 14% | KEVRansomware | KEV |
CVE-2024-49805+2 related CVEs | IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own… | 9.8 group max | <1% | ||
| CVE-2024-50357 | FutureNet NXR series routers provided by Century Systems Co., Ltd | 9.8 | <1% | ||
| CVE-2024-52338 | Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution | 9.8 | 2% | ||
| CVE-2024-52490 | Unrestricted Upload of File with Dangerous Type vulnerability in pathomation Pathomation pathomation allows Upload a Web Shell to a Web Server.This issue… | 10.0 | <1% | ||
| CVE-2024-53676 | Unauthenticated Directory Traversal to RCE in HPE Insight Remote Support | 9.8 | 56% | ||
| CVE-2024-8672 | Authenticated RCE via eval() in WordPress Widget Options Plugin (≤ 4.0.7) | 9.9 | 44% | ||
| CVE-2024-9680 | Use-After-Free in Mozilla Firefox Animation Timelines Allows Code Execution | 9.8 | 23% | KEVRansomware | KEV |
From the original article
10 min read at thehackernews.com
Ravie Lakshmanan Dec 02, 2024 Cyber Threats / Weekly Recap Ever wonder what happens in the digital world every time you blink? Here's something wild - hackers launch about 2,200 attacks every single day, which means someone's trying to break into a system somewhere every 39 seconds.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.