Tag: 2024-11-18

5 Attack Reports | 184 Vulnerabilities

Attack reports

Chinese hackers exploit Fortinet VPN zero-day to steal credentials

Chinese threat actors, known as BrazenBamboo, are exploiting a zero-day vulnerability in Fortinet's FortiClient Windows VPN client to steal credentials. The hackers use a custom post-exploitation toolkit called DeepData, which includes a FortiClient plugin to extract usernames, passwords, and VPN s…
espionage
lightspy
zero-day
credential theft
vpn
post-exploitation
chinese hackers
2024-11-18
deeppost
deepdata
forticlient
Published: November 18, 2024
Downloadable IOCs: 0

November 18 Advisory: Active Exploitation of Critical RCE in Palo Alto Networks PAN-OS [CVE-2024-0012 and CVE-2024-9474]

Two critical vulnerabilities in Palo Alto Networks PAN-OS, CVE-2024-0012 and CVE-2024-9474, have been disclosed. CVE-2024-0012 is an authentication bypass allowing unauthenticated remote attackers to gain admin privileges, while CVE-2024-9474 is an authenticated privilege escalation bug. These can …
vpn
privilege escalation
2024-11-18
CVE-2024-0012
CVE-2024-9474
rce
authentication bypass
pan-os
critical vulnerability
Published: November 18, 2024
Downloadable IOCs: 0

Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012

A critical authentication bypass vulnerability (CVE-2024-0012) in Palo Alto Networks PAN-OS software allows unauthenticated attackers to gain administrator privileges on affected devices. The issue affects PAN-OS versions 10.2, 11.0, 11.1, and 11.2, but not Cloud NGFW or Prisma Access. Limited expl…
vpn
privilege escalation
webshell
2024-11-18
CVE-2024-0012
CVE-2024-9474
authentication bypass
pan-os
Published: November 18, 2024
Downloadable IOCs: 0

Inside Water Barghest's Rapid Exploit-to-Market Strategy for IoT Devices

Water Barghest, a cybercriminal group, has developed a highly automated system for exploiting and monetizing IoT devices. Their botnet, comprising over 20,000 devices as of October 2024, uses automated scripts to identify and compromise vulnerable IoT devices from public internet scan databases. On…
iot
botnet
proxy
vulnerability exploitation
ngioweb
2024-11-18
residential proxy marketplace
Published: November 18, 2024
Downloadable IOCs: 66

Security Brief: ClickFix Social Engineering Technique Floods Threat Landscape

Proofpoint researchers have identified a surge in the ClickFix social engineering technique across the threat landscape. This technique uses dialogue boxes with fake error messages to trick users into copying, pasting, and running malicious content on their computers. Multiple threat actors are emp…
xworm
phishing
social engineering
powershell
darkgate
lumma stealer
asyncrat
danabot
latrodectus
netsupport
cybersecurity
clickfix
threat actors
brute ratel c4
2024-11-18
malware delivery
lucky volunteer
recaptcha phish
threat landscape
Published: November 18, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-52427

9.9
    Vollstart
  • Event Tickets With Ticket Scanner
Published: November 18, 2024

CVE-2024-52429

9.9
    Antonhoelstad
  • Wp Quick Setup
Published: November 18, 2024

CVE-2015-20111

9.8
    Bitcoin Core
    miniupnp
Published: November 18, 2024

CVE-2024-11311

9.8
    Trcore
  • Dvc
Published: November 18, 2024

CVE-2024-11312

9.8
    Trcore
  • Dvc
Published: November 18, 2024

CVE-2024-11313

9.8
    Trcore
  • Dvc
Published: November 18, 2024

CVE-2024-11314

9.8
    Trcore
  • Dvc
Published: November 18, 2024

CVE-2024-11315

9.8
    Trcore
  • Dvc
Published: November 18, 2024

CVE-2024-47208

9.8
    Apache OFBiz
Published: November 18, 2024

CVE-2024-52316

9.8
    Apache Tomcat
Published: November 18, 2024

CVE-2024-52430

9.8
    Lis
  • Video Gallery
Published: November 18, 2024

CVE-2024-52432

9.8
    Nixsolutions
  • Nix Anti-Spam Light
Published: November 18, 2024

CVE-2024-52433

9.8
    Mindstien
  • My Geo Posts Free
Published: November 18, 2024

CVE-2024-0012

9.8
    Paloaltonetworks
  • Pan-Os
Published: November 18, 2024

CVE-2024-47533

9.8
    Cobbler
Published: November 18, 2024

CVE-2024-50919

9.8
    Jpress
Published: November 18, 2024

CVE-2024-51053

9.8
    AVSCMS
Published: November 18, 2024

CVE-2024-51051

9.8
    AVSCMS
Published: November 18, 2024

CVE-2024-52431

9.3
    Pressaholic
  • Wordpress Video Robot
Published: November 18, 2024

CVE-2024-52434

9.1
    Supsystic
  • Popup
Published: November 18, 2024

CVE-2024-52946

8.8
    LemonLDAP::NG
Published: November 18, 2024

CVE-2024-41151

8.8
    Apache HertzBeat
Published: November 18, 2024

CVE-2024-41969

8.8
    CODESYS V3
Published: November 18, 2024

CVE-2024-45505

8.8
    Apache HertzBeat (incubating)
Published: November 18, 2024

CVE-2024-48292

8.8
    QuickHeal Antivirus Pro
    Quick Heal Total Security
Published: November 18, 2024

CVE-2024-51743

8.8
    MarkUs
Published: November 18, 2024

CVE-2024-52587

8.8
    Harden-Runner
Published: November 18, 2024

CVE-2024-3370

8.6
    Egebilgi Software Website Template
Published: November 18, 2024

CVE-2020-27124

8.6
    Cisco Adaptive Security Appliance (ASA) Software
Published: November 18, 2024

CVE-2024-43704

8.4
    UNKNOWN
Published: November 18, 2024

CVE-2020-26071

8.4
    Cisco SD-WAN Software
Published: November 18, 2024

CVE-2024-49574

8.3
    Zohocorp
  • Manageengine Adaudit Plus
Published: November 18, 2024

CVE-2024-42386

8.2
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-52583

8.2
    WesHacks GitHub repository for Muweilah Wesgreen Hackathon website
Published: November 18, 2024

CVE-2024-41967

8.1
    UNKNOWN
Published: November 18, 2024

CVE-2024-41971

8.1
    UNKNOWN
Published: November 18, 2024

CVE-2024-41973

8.1
    UNKNOWN
Published: November 18, 2024

CVE-2024-52428

8.1
    Scripteo
  • Ads Booster By Ads Pro
Published: November 18, 2024

CVE-2024-52945

7.8
    Veritas NetBackup
Published: November 18, 2024

CVE-2020-26074

7.8
    Cisco SD-WAN vManage Software
Published: November 18, 2024

CVE-2024-52565

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52566

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52567

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52568

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52569

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52570

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52571

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52572

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52573

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-52574

7.8
    Siemens
  • Tecnomatix Plant Simulation
Published: November 18, 2024

CVE-2024-50804

7.8
    Micro-star International MSI Center Pro
Published: November 18, 2024

CVE-2024-52435

7.6
    Wpdownloadmanager
  • Premium Packages - Sell Digital Products Securely
Published: November 18, 2024

CVE-2024-52436

7.6
    Wpexperts
  • Post Smtp
Published: November 18, 2024

CVE-2019-25220

7.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52912

7.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52914

7.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52915

7.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52916

7.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52920

7.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52940

7.5
    AnyDesk
Published: November 18, 2024

CVE-2024-11309

7.5
    Trcore
  • Dvc
Published: November 18, 2024

CVE-2024-11310

7.5
    Trcore
  • Dvc
Published: November 18, 2024

CVE-2024-45791

7.5
    Apache HertzBeat
Published: November 18, 2024

CVE-2023-39179

7.5
    Linux Kernel
Published: November 18, 2024

CVE-2024-42384

7.5
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-11318

7.5
    AbsysNet
Published: November 18, 2024

CVE-2024-28058

7.5
    RSA NetWitness Platform
Published: November 18, 2024

CVE-2020-26073

7.5
    Cisco SD-WAN vManage Software
Published: November 18, 2024

CVE-2024-43416

7.5
    GLPI
Published: November 18, 2024

CVE-2024-44757

7.5
    NUS-M9 ERP Management Software
Published: November 18, 2024

CVE-2024-47873

7.5
    PhpSpreadsheet
Published: November 18, 2024

CVE-2023-49952

7.5
    Mastodon
Published: November 18, 2024

CVE-2024-48917

7.5
    PhpSpreadsheet
Published: November 18, 2024

CVE-2024-52303

7.5
    aiohttp
Published: November 18, 2024

CVE-2024-21287

7.5
    Oracle
  • Agile Product Lifecycle Management
Published: November 18, 2024

CVE-2021-1285

7.4
    Cisco Snort detection engine
Published: November 18, 2024

CVE-2024-52926

7.3
    Delinea Privilege Manager
Published: November 18, 2024

CVE-2024-9474

7.2
    Paloaltonetworks
  • Pan-Os
Published: November 18, 2024

CVE-2024-41974

7.1
    BACNet
Published: November 18, 2024

CVE-2024-52424

7.1
    Sureshkumar
  • Wp-Login Customizer
Published: November 18, 2024

CVE-2024-52417

7.1
    BoldThemes ReConstruction
Published: November 18, 2024

CVE-2024-52418

7.1
    Gameplan
Published: November 18, 2024

CVE-2024-22067

6.8
    Zte
  • Nh8091 Firmware
  • Nh8091
Published: November 18, 2024

CVE-2021-1440

6.8
    Cisco IOS XR Software
Published: November 18, 2024

CVE-2024-52917

6.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52918

6.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52919

6.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52922

6.5
    Bitcoin Core
Published: November 18, 2024

CVE-2024-41972

6.5
    UNKNOWN
Published: November 18, 2024

CVE-2024-52317

6.5
    Apache Tomcat
Published: November 18, 2024

CVE-2024-37155

6.5
    OpenCTI
Published: November 18, 2024

CVE-2021-1232

6.5
    Cisco SD-WAN vManage Software
Published: November 18, 2024

CVE-2021-1379

6.5
    Cisco IP Phone Series 68xx/78xx/88xx
Published: November 18, 2024

CVE-2024-52419

6.5
    Maheshwaghmare
  • Copy Anything To Clipboard
Published: November 18, 2024

CVE-2024-52422

6.5
    Terryl
  • Wp Githuber Md
Published: November 18, 2024

CVE-2024-52423

6.5
    Themify
  • Builder
Published: November 18, 2024

CVE-2024-52425

6.5
    Urchenko
  • Drozd
Published: November 18, 2024

CVE-2024-52426

6.5
    Linear
  • Linear
Published: November 18, 2024

CVE-2020-26066

6.5
    Cisco SD-WAN vManage Software
Published: November 18, 2024

CVE-2024-48293

6.5
    QuickHeal Antivirus Pro
Published: November 18, 2024

CVE-2024-50848

6.5
    WorldServer
Published: November 18, 2024

CVE-2024-52341

6.5
    OS Our Team
Published: November 18, 2024

CVE-2024-52342

6.5
    OS BXSlider
Published: November 18, 2024

CVE-2024-52343

6.5
    OS Pricing Tables
Published: November 18, 2024

CVE-2024-52344

6.5
    Provide Forex Signals
Published: November 18, 2024

CVE-2024-52345

6.5
    ra_qrcode
Published: November 18, 2024

CVE-2024-52346

6.5
    SimpleGMaps
Published: November 18, 2024

CVE-2024-52347

6.5
    UNKNOWN
    WordPress Website creator
Published: November 18, 2024

CVE-2024-52348

6.5
    AA Audio Player
Published: November 18, 2024

CVE-2024-52349

6.5
    Awesome Tool Tip
Published: November 18, 2024

CVE-2024-52389

6.5
    WP Job Portal
Published: November 18, 2024

CVE-2024-52394

6.5
    nopea.Media Print PDF Generator and Publisher
Published: November 18, 2024

CVE-2024-51939

6.5
    Stylish Internal Links
Published: November 18, 2024

CVE-2024-51940

6.5
    WP Responsive Video
Published: November 18, 2024

CVE-2024-52339

6.5
    Mage Cast Mage Front End Forms
Published: November 18, 2024

CVE-2024-52340

6.5
    Photographer Connections
Published: November 18, 2024

CVE-2024-10390

6.4
    Elfsight Telegram Chat CC plugin for WordPress
Published: November 18, 2024

CVE-2024-11305

6.3
    Altenergy Power Control Software
Published: November 18, 2024

CVE-2020-3539

6.3
    Cisco Data Center Network Manager (DCNM)
Published: November 18, 2024

CVE-2024-11308

6.2
    Trcore
  • Dvc
Published: November 18, 2024

CVE-2024-52318

6.1
    Apache Tomcat
Published: November 18, 2024

CVE-2020-3431

6.1
    Cisco Small Business RV042 Dual WAN VPN Routers
    Cisco Small Business RV042G Dual Gigabit WAN VPN Routers
Published: November 18, 2024

CVE-2020-3532

6.1
    Cisco Unified Communications Manager
    Cisco Unified Communications Manager Session Management Edition
    Cisco Unified Communications Manager IM & Presence Service
    Cisco Unity Connection
Published: November 18, 2024

CVE-2021-1444

6.1
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: November 18, 2024

CVE-2023-39176

5.8
    Linux Kernel
Published: November 18, 2024

CVE-2024-41970

5.7
    UNKNOWN
Published: November 18, 2024

CVE-2024-47820

5.7
    MarkUs
Published: November 18, 2024

CVE-2024-48294

5.5
    Wondershare PDF Reader
Published: November 18, 2024

CVE-2024-52941

5.4
    Veritas Enterprise Vault
Published: November 18, 2024

CVE-2024-52942

5.4
    Veritas Enterprise Vault
Published: November 18, 2024

CVE-2024-52943

5.4
    Veritas Enterprise Vault
Published: November 18, 2024

CVE-2024-52944

5.4
    Veritas Enterprise Vault
Published: November 18, 2024

CVE-2024-52947

5.4
    LemonLDAP::NG
Published: November 18, 2024

CVE-2024-41968

5.4
    Docker
Published: November 18, 2024

CVE-2020-26063

5.4
    Cisco Integrated Management Controller
Published: November 18, 2024

CVE-2020-3420

5.4
    Cisco Unified Communications Manager
    Cisco Unified Communications Manager Session Management Edition
Published: November 18, 2024

CVE-2020-26067

5.4
    Cisco Webex Teams
Published: November 18, 2024

CVE-2024-33231

5.4
    Ferozo Email
Published: November 18, 2024

CVE-2024-11306

5.3
    Altenergy Power Control Software
Published: November 18, 2024

CVE-2024-38828

5.3
    Spring Framework
Published: November 18, 2024

CVE-2024-52913

5.3
    Bitcoin Core
Published: November 18, 2024

CVE-2024-52921

5.3
    Bitcoin Core
Published: November 18, 2024

CVE-2024-42387

5.3
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-42388

5.3
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-42389

5.3
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-11023

5.3
    Firebase JavaScript SDK
Published: November 18, 2024

CVE-2020-26062

5.3
    Cisco Integrated Management Controller
Published: November 18, 2024

CVE-2020-3548

5.3
    Cisco Email Security Appliance (ESA)
Published: November 18, 2024

CVE-2021-1132

5.3
    Cisco Network Services Orchestrator (NSO)
Published: November 18, 2024

CVE-2021-1234

5.3
    Cisco SD-WAN vManage Software
Published: November 18, 2024

CVE-2021-1424

5.3
    Cisco ASR 5000 Series Software (StarOS)
Published: November 18, 2024

CVE-2024-10486

5.3
    Google for WooCommerce plugin for WordPress
Published: November 18, 2024

CVE-2021-1461

4.9
    Cisco SD-WAN Software
Published: November 18, 2024

CVE-2024-52390

4.9
    CYAN Backup
Published: November 18, 2024

CVE-2024-50849

4.8
    WordServer
Published: November 18, 2024

CVE-2020-3538

4.6
    Cisco Data Center Network Manager (DCNM) Software
Published: November 18, 2024

CVE-2021-1462

4.4
    Cisco SD-WAN vManage Software
Published: November 18, 2024

CVE-2024-42390

4.3
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-42391

4.3
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-48896

4.3
    Moodle
  • Moodle
Published: November 18, 2024

CVE-2024-48897

4.3
    Moodle
  • Moodle
Published: November 18, 2024

CVE-2024-48898

4.3
    Moodle
  • Moodle
Published: November 18, 2024

CVE-2024-48901

4.3
    Moodle
  • Moodle
Published: November 18, 2024

CVE-2020-3525

4.3
    Cisco Identity Services Engine (ISE)
Published: November 18, 2024

CVE-2021-1410

4.3
    Cisco Webex Meetings
Published: November 18, 2024

CVE-2021-1425

4.3
    Cisco Content Security Management Appliance (SMA)
Published: November 18, 2024

CVE-2021-1465

4.3
    Cisco SD-WAN vManage Software
Published: November 18, 2024

CVE-2024-42383

4.2
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2023-39180

4.0
    Linux Kernel
Published: November 18, 2024

CVE-2024-42385

4.0
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-42392

4.0
    Cesanta
  • Mongoose
Published: November 18, 2024

CVE-2024-5030

3.8
    CM Table Of Contents WordPress plugin
Published: November 18, 2024

CVE-2024-11319

3.8
    Django-Cms
  • Django Cms
Published: November 18, 2024

CVE-2024-48962

None
    Apache OFBiz
Published: November 18, 2024

CVE-2024-11303

None
    Korenix JetPort 5601
Published: November 18, 2024

CVE-2024-8781

None
    TR7 Application Security Platform (ASP)
Published: November 18, 2024

CVE-2024-9526

None
    Kubeflow
Published: November 18, 2024

CVE-2024-11304

None
    SEH Computertechnik utnserver Pro
    SEH Computertechnik utnserver ProMAX
    SEH Computertechnik INU-100
Published: November 18, 2024

CVE-2024-44756

None
    NUS-M9 ERP Management Software
Published: November 18, 2024

CVE-2024-51499

None
    MarkUs
Published: November 18, 2024

CVE-2024-52304

None
    aiohttp
Published: November 18, 2024

CVE-2024-52506

None
    Graylog
Published: November 18, 2024

CVE-2024-52584

None
    Autolab
Published: November 18, 2024

CVE-2024-52585

None
    Autolab
Published: November 18, 2024
Click here to see more Vulnerabilities