Malwarecritical
Infostealers increasingly impact global security
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-0130 | Directory Traversal Arbitrary File Read in Ruby on Rails (actionpack) | — | 54% | KEV | — KEV |
| CVE-2014-0780 | Directory Traversal in InduSoft Web Studio NTWebServer Enables Password Theft and RCE | — | 75% | KEV | — KEV |
| CVE-2015-0666 | Directory Traversal in Cisco Prime Data Center Network Manager (DCNM) | — | 40% | KEV | — KEV |
| CVE-2015-4068 | Directory Traversal Vulnerability in Arcserve Unified Data Protection (UDP) | — | 64% | KEV | — KEV |
| CVE-2016-4523 | Remote Denial-of-Service in Trihedral VTScada WAP Interface | 7.5 | 31% | KEV | KEV |
| CVE-2016-8530 | A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found | 7.5 | 48% | ||
| CVE-2017-11512 | The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the… | 7.5 | 80% | ||
| CVE-2018-3948 | An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server | 7.5 | 23% | PoC | |
| CVE-2018-3949 | An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN | 7.5 | 53% | PoC | |
| CVE-2019-18952 | SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload | 9.8 | 44% | PoC ×2 | |
| CVE-2020-5410 | Directory Traversal in VMware Spring Cloud Config Server | 7.5 | 96% | KEV | KEV |
| CVE-2020-8260 | Authenticated RCE in Ivanti Pulse Connect Secure admin web interface (pre-9.1R9) | 7.2 | 96% | KEVPoC | KEV |
| CVE-2021-43936 | The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's… | 9.8 | 36% | PoC | |
| CVE-2022-24086 | Unauthenticated RCE via checkout input-validation flaw in Adobe Commerce/Magento | 9.8 | 99% | KEV | KEV |
| CVE-2023-28771 | Unauthenticated OS Command Injection in Zyxel ATP, USG FLEX, VPN, and ZyWALL Firewalls | 9.8 | 99% | KEVPoC | KEV |
From the original article
5 min read at helpnetsecurity.com
Check Point Software’s latest threat index reveals a significant rise in infostealers like Lumma Stealer, while mobile malware like Necro continues to pose a significant threat, highlighting the evolving tactics used by cybercriminals across the globe.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.