Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories

The Hacker Newsby @TheHackersNews ()13 min read2 · 1 read
Analyze CVE-2024-36401 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2002-0367
Local Privilege Escalation in Microsoft Windows smss.exe Debugging Subsystem
—5%KEV—
KEV
CVE-2007-0671
Remote Code Execution in Microsoft Office Excel via Crafted Spreadsheet Files
—43%KEV—
KEV
CVE-2024-36401
Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection
9.8100%KEVPoC ×3
KEV

From the original article

13 min read at thehackernews.com

The internet never stays quiet. Every week, new hacks, scams, and security problems show up somewhere. This week’s stories show how fast attackers change their tricks, how small mistakes turn into big risks, and how the same old tools keep finding new ways to break in.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.