SecuriTricks - 2024-09-03

Attack Reports

Title	Published	Tags	Description	Number of indicators
Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloads	Sept. 3, 2024, 8 p.m.	havoc phantomcore 2024-09-03 brute ratel vba macros macropack	Multiple Microsoft Office documents generated by the MacroPack framework have been discovered, likely used by malicious actors to…	16
Zharkbot Strings	Sept. 3, 2024, 8:09 a.m.	persistence anti-analysis amadey downloader 2024-09-03 anti-sandbox string encryption c2 communication zharkbot	Zharkbot is a C++ downloader with extensive anti-analysis and anti-sandbox features. It uses in-line string encryption and API ca…	2
Advanced Persistent Threat Targeting Vietnamese Human Rights Defenders	Sept. 3, 2024, 8:02 a.m.	backdoor apt cobalt strike persistence steganography vietnam 2024-09-03 dll side-loading com hijacking human rights	A long-term intrusion targeting a Vietnamese human rights non-profit organization has been discovered, likely spanning at least f…	46

» Click here to see all Attack Reports «

Vulnerabilities

CVE	CVSS	Published	Product impacted	Tags
CVE-2024-7261	9.8	Sept. 3, 2024, 3:15 a.m.	Zyxel NWA1123ACv3	CWE-78 security@zyxel.com.tw 2024-09-03 CVE-2024-7261
CVE-2024-44921	9.8	Sept. 3, 2024, 12:15 p.m.	SeaCMS	cve@mitre.org CWE-89 2024-09-03 CVE-2024-44921
CVE-2024-8381	9.8	Sept. 3, 2024, 1:15 p.m.	Firefox	CWE-843 security@mozilla.org 2024-09-03 CVE-2024-8381
CVE-2024-8384	9.8	Sept. 3, 2024, 1:15 p.m.	Firefox	CWE-416 security@mozilla.org 2024-09-03 CVE-2024-8384
CVE-2024-8385	9.8	Sept. 3, 2024, 1:15 p.m.	Firefox	CWE-843 security@mozilla.org 2024-09-03 CVE-2024-8385
CVE-2024-8387	9.8	Sept. 3, 2024, 1:15 p.m.	Firefox	CWE-119 security@mozilla.org 2024-09-03 CVE-2024-8387
CVE-2024-8389	9.8	Sept. 3, 2024, 1:15 p.m.	Firefox	CWE-119 security@mozilla.org 2024-09-03 CVE-2024-8389
CVE-2024-41433	9.8	Sept. 3, 2024, 9:15 p.m.	PingCAP TiDB	cve@mitre.org CWE-120 2024-09-03 CVE-2024-41433
CVE-2024-38811	8.8	Sept. 3, 2024, 10:15 a.m.	VMware Fusion	CWE-20 security@vmware.com 2024-09-03 CVE-2024-38811
CVE-2024-45586	8.8	Sept. 3, 2024, 10:15 a.m.	Symphony XTS Web Trading and Mobile Trading platforms	CWE-863 vdisclose@cert-in.org.in NVD-CWE-Other 2024-09-03 CVE-2024-45586
CVE-2024-45587	8.8	Sept. 3, 2024, 10:15 a.m.	Symphony XTS Web Trading platform	CWE-863 vdisclose@cert-in.org.in NVD-CWE-Other 2024-09-03 CVE-2024-45587
CVE-2023-49233	8.8	Sept. 3, 2024, 5:15 p.m.	Visual Planning Admin Center	cve@mitre.org CWE-284 2024-09-03 CVE-2023-49233
CVE-2024-42902	8.8	Sept. 3, 2024, 6:15 p.m.	LimeSurvey	cve@mitre.org CWE-94 2024-09-03 CVE-2024-42902
CVE-2024-45307	8.8	Sept. 3, 2024, 7:15 p.m.	SudoBot	security-advisories@github.com CWE-285 2024-09-03 CVE-2024-45307
CVE-2024-45394	8.8	Sept. 3, 2024, 9:15 p.m.	Authenticator browser extension	security-advisories@github.com CWE-261 2024-09-03 CVE-2024-45394
CVE-2024-7345	8.3	Sept. 3, 2024, 3:15 p.m.	OpenEdge	CWE-94 security@progress.com 2024-09-03 CVE-2024-7345
CVE-2024-7654	8.3	Sept. 3, 2024, 3:15 p.m.	OpenEdge Management	CWE-79 security@progress.com 2024-09-03 CVE-2024-7654
CVE-2024-42057	8.1	Sept. 3, 2024, 2:15 a.m.	Zyxel ATP series	CWE-78 security@zyxel.com.tw 2024-09-03 CVE-2024-42057
CVE-2024-45588	8.1	Sept. 3, 2024, 11:15 a.m.	Symphony XTS Web Trading platform	CWE-863 vdisclose@cert-in.org.in 2024-09-03 CVE-2024-45588
CVE-2024-42991	8.1	Sept. 3, 2024, 4:15 p.m.	MCMS	cve@mitre.org CWE-434 2024-09-03 CVE-2024-42991
CVE-2024-3655	7.8	Sept. 3, 2024, 10:15 a.m.	Arm Ltd Bifrost GPU Kernel Driver	CWE-416 arm-security@arm.com 2024-09-03 CVE-2024-3655
CVE-2024-8374	7.8	Sept. 3, 2024, 10:15 a.m.	Ultimaker Cura slicer	CWE-94 596c5446-0ce5-4ba2-aa66-48b3b757a647 2024-09-03 CVE-2024-8374
CVE-2024-38456	7.8	Sept. 3, 2024, 6:15 p.m.	HIGH-LEIT	cve@mitre.org CWE-732 2024-09-03 CVE-2024-38456
CVE-2024-42058	7.5	Sept. 3, 2024, 2:15 a.m.	Zyxel ATP series	CWE-476 security@zyxel.com.tw 2024-09-03 CVE-2024-42058
CVE-2024-5412	7.5	Sept. 3, 2024, 2:15 a.m.	Zyxel VMG8825-T50K firmware	CWE-120 security@zyxel.com.tw 2024-09-03 CVE-2024-5412
CVE-2024-6119	7.5	Sept. 3, 2024, 4:15 p.m.	OpenSSL	CWE-843 openssl-security@openssl.org 2024-09-03 CVE-2024-6119
CVE-2024-41435	7.5	Sept. 3, 2024, 7:15 p.m.	YugabyteDB	cve@mitre.org CWE-120 2024-09-03 CVE-2024-41435
CVE-2024-41436	7.5	Sept. 3, 2024, 7:15 p.m.	ClickHouse	cve@mitre.org CWE-120 2024-09-03 CVE-2024-41436
CVE-2024-45391	7.5	Sept. 3, 2024, 8:15 p.m.	@tinacms/cli	security-advisories@github.com CWE-200 2024-09-03 CVE-2024-45391
CVE-2024-45390	7.3	Sept. 3, 2024, 8:15 p.m.	@blakeembrey/template	security-advisories@github.com CWE-94 2024-09-03 CVE-2024-45390
CVE-2024-42059	7.2	Sept. 3, 2024, 2:15 a.m.	Zyxel ATP series	CWE-78 security@zyxel.com.tw 2024-09-03 CVE-2024-42059
CVE-2024-42060	7.2	Sept. 3, 2024, 2:15 a.m.	Zyxel ATP series	CWE-78 security@zyxel.com.tw 2024-09-03 CVE-2024-42060
CVE-2024-7203	7.2	Sept. 3, 2024, 2:15 a.m.	Zyxel ATP series	CWE-78 security@zyxel.com.tw 2024-09-03 CVE-2024-7203
CVE-2024-7346	7.2	Sept. 3, 2024, 3:15 p.m.	OpenEdge	security@progress.com CWE-297 2024-09-03 CVE-2024-7346
CVE-2024-37136	6.8	Sept. 3, 2024, 6:15 a.m.	Dell Path to PowerProtect	security_alert@emc.com CWE-359 2024-09-03 CVE-2024-37136
CVE-2024-4629	6.5	Sept. 3, 2024, 8:15 p.m.	Keycloak	secalert@redhat.com 2024-09-03 CVE-2024-4629 CWE-837
CVE-2024-45389	6.4	Sept. 3, 2024, 8:15 p.m.	Pagefind	security-advisories@github.com CWE-79 2024-09-03 CVE-2024-45389
CVE-2024-8380	6.3	Sept. 3, 2024, 1:15 a.m.	SourceCodester Contact Manager with Export to VCF	CWE-89 cna@vuldb.com 2024-09-03 CVE-2024-8380
CVE-2024-42061	6.1	Sept. 3, 2024, 3:15 a.m.	Zyxel ATP series	CWE-79 security@zyxel.com.tw 2024-09-03 CVE-2024-42061
CVE-2024-44920	6.1	Sept. 3, 2024, 12:15 p.m.	SeaCMS	cve@mitre.org CWE-79 2024-09-03 CVE-2024-44920
CVE-2024-34463	5.1	Sept. 3, 2024, 2:15 p.m.	BPL Personal Weighing Scale PWS-01BT IND/09/18/599	cve@mitre.org CWE-285 2024-09-03 CVE-2024-34463
CVE-2024-6343	4.9	Sept. 3, 2024, 2:15 a.m.	Zyxel ATP series	CWE-120 security@zyxel.com.tw 2024-09-03 CVE-2024-6343
CVE-2024-43803	4.9	Sept. 3, 2024, 7:15 p.m.	Bare Metal Operator (BMO)	security-advisories@github.com CWE-200 2024-09-03 CVE-2024-43803
CVE-2024-42901	4.8	Sept. 3, 2024, 6:15 p.m.	Lime Survey	cve@mitre.org CWE-79 2024-09-03 CVE-2024-42901
CVE-2024-43412	4.6	Sept. 3, 2024, 5:15 p.m.	Xibo CMS	security-advisories@github.com CWE-79 2024-09-03 CVE-2024-43412
CVE-2024-41434	4.3	Sept. 3, 2024, 8:15 p.m.	PingCAP TiDB	cve@mitre.org CWE-400 2024-09-03 CVE-2024-41434
CVE-2024-45615	3.9	Sept. 3, 2024, 10:15 p.m.	OpenSC	secalert@redhat.com CWE-457 2024-09-03 CVE-2024-45615
CVE-2024-45616	3.9	Sept. 3, 2024, 10:15 p.m.	OpenSC	secalert@redhat.com CWE-457 2024-09-03 CVE-2024-45616
CVE-2024-45617	3.9	Sept. 3, 2024, 10:15 p.m.	OpenSC	secalert@redhat.com CWE-457 2024-09-03 CVE-2024-45617
CVE-2024-45618	3.9	Sept. 3, 2024, 10:15 p.m.	OpenSC	secalert@redhat.com CWE-457 2024-09-03 CVE-2024-45618
CVE-2024-45619	3.9	Sept. 3, 2024, 10:15 p.m.	OpenSC	secalert@redhat.com CWE-120 2024-09-03 CVE-2024-45619
CVE-2024-45620	3.9	Sept. 3, 2024, 10:15 p.m.	OpenSC	secalert@redhat.com CWE-120 2024-09-03 CVE-2024-45620
CVE-2024-45310	3.6	Sept. 3, 2024, 7:15 p.m.	Docker	security-advisories@github.com 2024-09-03 CVE-2024-45310 CWE-363
CVE-2024-43413	3.5	Sept. 3, 2024, 7:15 p.m.	Xibo CMS	security-advisories@github.com CWE-79 2024-09-03 CVE-2024-43413
CVE-2024-41718	None	Sept. 3, 2024, 11:15 a.m.	UNKNOWN	vultures@jpcert.or.jp 2024-09-03 CVE-2024-41718
CVE-2024-6473	None	Sept. 3, 2024, 11:15 a.m.	Yandex Browser for Desktop	CWE-426 2024-09-03 CVE-2024-6473 browser-security@yandex-team.ru
CVE-2024-6232	None	Sept. 3, 2024, 1:15 p.m.	CPython	cna@python.org CWE-1333 2024-09-03 CVE-2024-6232
CVE-2024-8371	None	Sept. 3, 2024, 1:15 p.m.	UNKNOWN	secalert@redhat.com 2024-09-03 CVE-2024-8371
CVE-2024-8382	None	Sept. 3, 2024, 1:15 p.m.	Firefox	security@mozilla.org 2024-09-03 CVE-2024-8382
CVE-2024-8383	None	Sept. 3, 2024, 1:15 p.m.	Firefox	security@mozilla.org 2024-09-03 CVE-2024-8383
CVE-2024-8386	None	Sept. 3, 2024, 1:15 p.m.	Firefox	security@mozilla.org 2024-09-03 CVE-2024-8386
CVE-2024-8388	None	Sept. 3, 2024, 1:15 p.m.	Firefox for Android	security@mozilla.org 2024-09-03 CVE-2024-8388
CVE-2024-4259	None	Sept. 3, 2024, 2:15 p.m.	AKOS	CWE-269 iletisim@usom.gov.tr 2024-09-03 CVE-2024-4259
CVE-2024-42903	None	Sept. 3, 2024, 6:15 p.m.	LimeSurvey	cve@mitre.org 2024-09-03 CVE-2024-42903
CVE-2024-42904	None	Sept. 3, 2024, 6:15 p.m.	SysPass	cve@mitre.org 2024-09-03 CVE-2024-42904
CVE-2024-7619	None	Sept. 3, 2024, 6:15 p.m.	UNKNOWN	security@wordfence.com 2024-09-03 CVE-2024-7619
CVE-2024-45180	None	Sept. 3, 2024, 8:15 p.m.	SquaredUp DS for SCOM	cve@mitre.org 2024-09-03 CVE-2024-45180
CVE-2024-45678	None	Sept. 3, 2024, 8:15 p.m.	Yubico YubiKey 5 Series devices	cve@mitre.org 2024-09-03 CVE-2024-45678
CVE-2024-8399	None	Sept. 3, 2024, 8:15 p.m.	Focus for iOS	security@mozilla.org 2024-09-03 CVE-2024-8399
CVE-2024-44809	None	Sept. 3, 2024, 10:15 p.m.	Pi Camera project	cve@mitre.org 2024-09-03 CVE-2024-44809

» Click here to see all Vulnerabilities «

Tag : 2024-09-03