⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [3 February]
- CVEs
- CVE-2025-24085CVE-2024-41710CVE-2025-0626CVE-2024-12248CVE-2025-0683CVE-2025-22217CVE-2025-22218CVE-2025-22219CVE-2025-22220CVE-2025-22221CVE-2025-22222CVE-2024-55415CVE-2024-55416CVE-2024-55417CVE-2025-22604CVE-2024-40891CVE-2025-23040CVE-2024-52012CVE-2025-0065CVE-2024-12647CVE-2024-12648CVE-2024-12649CVE-2025-0493CVE-2024-12822CVE-2025-0851CVE-2025-20061CVE-2025-20014CVE-2024-13448CVE-2025-0357CVE-2024-1354CVE-2024-56404CVE-2024-53299CVE-2024-12857
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-12248 | Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order… | 9.3 | 1% | ||
CVE-2024-12647+2 related CVEs | Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network… | 9.8 | 1% | ||
| CVE-2024-12822 | The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing… | 9.8 | <1% | ||
| CVE-2024-12857 | The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8 | 9.8 | <1% | ||
| CVE-2024-13448 | The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data'… | 9.8 | <1% | ||
| CVE-2024-1354 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain… | 8.0 | 2% | ||
| CVE-2024-40891 | Post-Authentication OS Command Injection in Zyxel DSL CPE Devices | 8.8 | 23% | KEV | KEV |
| CVE-2024-41710 | Argument Injection RCE in Mitel 6800/6900/6900w Series SIP Phones | 7.2 | 42% | KEVPoC | KEV |
| CVE-2024-52012 | Zipslip Path Traversal in Apache Solr Configset Upload on Windows | 5.4 | 47% | ||
| CVE-2024-53299 | The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources | 6.5 | 2% | ||
CVE-2024-55415+2 related CVEs | DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass | 5.7 group max | 16% | PoC | |
| CVE-2024-56404 | In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privilege escalation | 9.9 | <1% | ||
| CVE-2025-0065 | Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior version 15.62 for Windows allows an attacker… | 7.8 | <1% | ||
| CVE-2025-0357 | The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the… | 9.8 | 1% | ||
| CVE-2025-0493 | The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all versions… | 9.8 | 1% | ||
| CVE-2025-0626 | The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings… | 7.7 | 1% | ||
| CVE-2025-0683 | In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded public IP address when a patient is… | 8.2 | <1% | ||
| CVE-2025-0851 | Path Traversal (Zip/Tar Slip) in Deep Java Library (DJL) Archive Extraction | 9.3 | 23% | ||
| CVE-2025-20014 | mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information | 9.3 | 1% | ||
| CVE-2025-20061 | mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information | 9.3 | 1% | ||
| CVE-2025-22217 | Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware | 8.6 | <1% | ||
CVE-2025-22219+3 related CVEs | VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability | 9.0 group max | <1% | ||
| CVE-2025-22222 | VMware Aria Operations contains an information disclosure vulnerability | 6.5 | <1% | ||
| CVE-2025-22604 | Cacti: Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by… | 7.2 | 5% | PoC | |
| CVE-2025-23040 | GitHub Desktop: An attacker convincing a user to clone a repository directly or through a submodule can allow the attacker access to the user's… | 6.6 | <1% | ||
| CVE-2025-24085 | Use-After-Free Privilege Escalation in Apple iOS, iPadOS, macOS and Other Platforms | 10.0 | 18% | KEV | KEV |
From the original article
11 min read at thehackernews.com
This week, our news radar shows that every new tech idea comes with its own challenges. A hot AI tool is under close watch, law enforcement is shutting down online spots that help cybercriminals, and teams are busy fixing software bugs that could let attackers in. From better locks on our devices to stopping sneaky tricks online, simple steps are making a big difference.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.