THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11
- CVEs
- CVE-2024-5910CVE-2024-9463CVE-2024-9465CVE-2024-10924CVE-2024-10470CVE-2024-10979CVE-2024-43451CVE-2024-49039CVE-2024-8068CVE-2024-8069CVE-2023-28649CVE-2023-31241CVE-2023-28386CVE-2024-50381CVE-2024-7340CVE-2024-47574CVE-2023-3519CVE-2023-4966CVE-2023-20198CVE-2023-20273CVE-2023-27997CVE-2023-34362CVE-2023-22515CVE-2021-44228CVE-2023-2868CVE-2022-47966CVE-2023-27350CVE-2020-1472CVE-2023-42793CVE-2023-23397CVE-2023-49103CVE-2024-11120
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
| CVE-2021-44228 | JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell) | 10.0 | 100% | KEVRansomwarePoC ×9 | KEV |
| CVE-2022-47966 | Unauthenticated SAML RCE in Zoho ManageEngine On-Premise Products | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
| CVE-2023-20198 | Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited) | 10.0 | 100% | KEV | KEV |
| CVE-2023-20273 | Authenticated Command Injection (Root) in Cisco IOS XE Web UI | 7.2 | 93% | KEV | KEV |
| CVE-2023-22515 | Unauthenticated Broken Access Control in Atlassian Confluence Data Center/Server | 9.8 | 99% | KEVRansomwarePoC | KEV |
| CVE-2023-23397 | Zero-Click Elevation of Privilege in Microsoft Outlook (Forced NTLM Credential Leak) | 9.8 | 97% | KEV | KEV |
| CVE-2023-27350 | Authentication Bypass Leading to SYSTEM RCE in PaperCut MF/NG | 9.8 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2023-27997 | Pre-Auth Heap Buffer Overflow RCE in Fortinet FortiOS/FortiProxy SSL-VPN | 9.8 | 86% | KEVRansomware | KEV |
CVE-2023-31241+2 related CVEs | Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright | 10.0 group max | <1% | ||
| CVE-2023-2868 | Unauthenticated Command Injection in Barracuda Email Security Gateway Appliances via .tar Files | 9.8 | 87% | KEV | KEV |
| CVE-2023-34362 | Unauthenticated SQL Injection in Progress MOVEit Transfer | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-3519 | Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-42793 | Authentication bypass in JetBrains TeamCity enables unauthenticated RCE | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2023-49103 | Unauthenticated phpinfo credential leak in ownCloud graphapi | 7.5 | 78% | KEV | KEV |
| CVE-2023-4966 | Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway | 7.5 | 100% | KEVRansomware | KEV |
| CVE-2024-10470 | Unauthenticated File Read/Deletion Leading to RCE in WPLMS WordPress Theme | 9.8 | 34% | ||
| CVE-2024-10924 | Unauthenticated Authentication Bypass in Really Simple Security WordPress Plugin | 9.8 | 82% | ||
| CVE-2024-10979 | Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g | 8.8 | 4% | PoC | |
| CVE-2024-11120 | Unauthenticated OS Command Injection in GeoVision Devices | 9.8 | 28% | KEVPoC | KEV |
CVE-2024-49039+1 related CVE | Windows Task Scheduler Elevation-of-Privilege Flaw Actively Exploited in the Wild | 8.8 group max | 14% | KEVRansomware | KEV |
| CVE-2024-47574 | A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through… | 7.8 | <1% | ||
| CVE-2024-50381 | A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices | 8.8 | <1% | ||
| CVE-2024-5910 | Unauthenticated Admin Account Takeover in Palo Alto Networks Expedition | 9.3 | 92% | KEVPoC | KEV |
| CVE-2024-7340 | The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak… | 8.8 | 5% | ||
CVE-2024-8069+1 related CVE | Insecure Deserialization RCE in Citrix Session Recording | 5.1 | 21% | KEV | KEV |
CVE-2024-9463+1 related CVE | Unauthenticated OS Command Injection in Palo Alto Networks Expedition | 9.9 group max | 99% | KEV | KEV |
From the original article
10 min read at thehackernews.com
What do hijacked websites, fake job offers, and sneaky ransomware have in common? They’re proof that cybercriminals are finding smarter, sneakier ways to exploit both systems and people. This week makes one thing clear: no system, no person, no organization is truly off-limits.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.