Ransomwarecritical
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]
- CVEs
- CVE-2025-21333CVE-2025-21334CVE-2025-21335CVE-2024-55591CVE-2024-10811CVE-2024-13161CVE-2024-13160CVE-2024-13159CVE-2024-7344CVE-2024-52320CVE-2024-48871CVE-2024-12084CVE-2024-57726CVE-2024-57727CVE-2024-57728CVE-2024-44243CVE-2024-9042CVE-2024-12365CVE-2025-23013CVE-2024-57579CVE-2024-57580CVE-2024-57581CVE-2024-57582CVE-2024-57011CVE-2024-57012CVE-2024-57013CVE-2024-57014CVE-2024-57015CVE-2024-57016CVE-2024-57017CVE-2024-57018CVE-2024-57019CVE-2024-57020CVE-2024-57021CVE-2024-57022CVE-2024-57023CVE-2024-57024CVE-2024-57025CVE-2025-22785
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-10811 | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated… | 7.5 | 4% | PoC | |
| CVE-2024-12084 | Heap-Based Buffer Overflow in rsync Daemon Enables Potential Remote Code Execution | 9.8 | 73% | PoC | |
| CVE-2024-12365 | The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in… | 8.5 | 2% | ||
CVE-2024-13159+2 related CVEs | Unauthenticated Absolute Path Traversal Info Leak in Ivanti Endpoint Manager (EPM) | 7.5 | 100% | KEVPoC | KEV |
| CVE-2024-44243 | A configuration issue was addressed with additional restrictions | 5.5 | <1% | ||
| CVE-2024-48871 | The affected product is vulnerable to a stack-based buffer overflow | 9.3 | 1% | ||
| CVE-2024-52320 | The affected product is vulnerable to a command injection | 9.3 | 2% | ||
| CVE-2024-55591 | Unauthenticated Super-Admin Bypass in Fortinet FortiOS and FortiProxy | 9.8 | 94% | KEVRansomware | KEV |
| CVE-2024-57011 | TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "minute" parameters in setScheduleCfg | 8.8 group max | 2% | PoC | |
CVE-2024-57580+3 related CVEs | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function | 9.8 | <1% | PoC | |
CVE-2024-57726+2 related CVEs | Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7 | 9.9 group max | 66% | KEVRansomware | KEV |
| CVE-2024-7344 | Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path | 8.2 | 1% | PoC | |
| CVE-2024-9042 | This CVE affects only Windows worker nodes | 5.9 | 1% | ||
CVE-2025-21333+2 related CVEs | Actively Exploited Heap Overflow in Windows Hyper-V VSP Enables Privilege Escalation | 7.8 | 10% | KEVPoC | KEV |
| CVE-2025-22785 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ComMotion Course Booking System course-booking-system… | 9.3 | 3% | ||
| CVE-2025-23013 | In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur | 7.3 | <1% |
From the original article
10 min read at thehackernews.com
As the digital world becomes more complicated, the lines between national security and cybersecurity are starting to fade. Recent cyber sanctions and intelligence moves show a reality where malware and fake news are used as tools in global politics. Every cyberattack now seems to have deeper political consequences.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.