Aggregator

A vulnerability, which was classified as critical, has been found in Adobe Acrobat Reader up to 11.0.16/15.006.30174/15.016.20045. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2016-4254. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Ransomware attacks have seen a significant resurgence, disrupting multiple sectors and affecting global supply chains. Despite efforts to disrupt major ransomware groups, incidents continue to rise, signaling an ongoing and growing threat into 2024. In this Help Net Security round-up, industry experts discuss the rise in ransomware attacks, their impact on critical systems like Microsoft Active Directory, and the growing resilience of the threat despite ongoing mitigation efforts. Craig Birch, Technology Evangelist, and Principal Security … More →

The post Ransomware activity shows no signs of slowing down appeared first on Help Net Security.

error code: 1106

Counter Ransomware Group Focuses on Timely Reporting, Avoiding Paying the Ransom
New voluntary ransomware guidance released during the International Counter Ransomware Initiative meeting this week calls for victims to report attacks to law enforcement on a more timely basis - and involve more advisers in deciding whether to pay a ransom.

A 2023 Breach Exposed Personal Details of All PSNI Officers and Staff
The U.K. data regulator fined the Northern Ireland's Police Service 750,000 pounds following a 2023 data breach that exposed personal details of the entire workforce. The U.K. Information Commissioner's Office determined the breach occurred when police attempted to respond to two open records requests.

A vulnerability classified as critical was found in Adobe Acrobat Reader up to 11.0.16/15.006.30174/15.016.20045. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2016-4252. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Nitro PDF Pro Local Privilege EscalationSEC Consult Vulnerability Lab Security Advisory < 20240930

[CVE-ID]:CVE-2024-46409---------------------------------------------------------------------[Sugge

MIDIA Unrestricted File Upload / Arbitrary File Upload# Exploit Title: MIDIA Unrestricted Fil

The cybersecurity skills gap presents ongoing challenges worldwide, so organizations are scrambling to fill cloud security positions. Having a subject matter expert on staff qualified to advise on cloud security requirements is more important now than ever. Because of this demand, cybersecurity professionals are presented with promising career opportunities when they specialize in cloud security. Learn more in the whitepaper, including: Why demand for multicloud security professionals is exploding How continuous learning benefits cyber professionals … More →

The post Whitepaper: Reach higher in your career with cloud security appeared first on Help Net Security.

# Exploit Title: reNgine 2.2.0 - Command Injection (Authenticated)# Date: 2024-09-29# Exploit Auth

Microsoft Office NTLMv2 Disclosure# Exploit Title: Microsoft Office NTLMv2 Disclosure Vulnerabilit

A vulnerability classified as critical has been found in woodpecker-ci woodpecker up to 2.6.x. This affects an unknown part. The manipulation leads to injection. This vulnerability is uniquely identified as CVE-2024-41122. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Cisco IOS XR 24.1.1/24.1.2/24.2.1/24.2.11/24.3.1 and classified as critical. This vulnerability affects unknown code of the component Routed PON Controller Software. The manipulation leads to os command injection. This vulnerability was named CVE-2024-20483. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Cisco IOS XR 24.1.1/24.1.2/24.2.1/24.2.11/24.3.1. This vulnerability affects unknown code of the component Configuration File Handler. The manipulation leads to unprotected storage of credentials. This vulnerability was named CVE-2024-20489. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Palo Alto Networks PAN-OS, Cloud NGFW and Prisma Access and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to os command injection. This vulnerability is handled as CVE-2024-8686. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Palo Alto Networks Cortex XDR Agent up to 7.9.102-CE on Windows. Affected is an unknown function of the component Detection Mechanism. The manipulation leads to expected behavior violation. This vulnerability is traded as CVE-2024-8690. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Jupiter X Core Plugin up to 4.7.5 on WordPress. It has been classified as critical. This affects an unknown part. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2024-7781. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in PLANEX MZK-DP300N up to 1.04. Affected is an unknown function of the component Web Management Page. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2024-45372. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability has been found in artbees Jupiter X Core Plugin up to 4.6.5 on WordPress and classified as critical. Affected by this vulnerability is the function validate. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2024-7772. The attack can be launched remotely. There is no exploit available.