Tag: 2024-11-25

1 Attack Reports | 73 Vulnerabilities

Attack reports

Threat Campaign Targeting Palo Alto Networks Firewall Devices Observed

Arctic Wolf has identified multiple intrusions across various industries involving Palo Alto Network firewall devices. The attacks likely exploit recently disclosed PAN-OS vulnerabilities CVE-2024-0012 and CVE-2024-9474 for initial access. Affected devices downloaded payloads including the Sliver C…
xmrig
data exfiltration
vulnerability exploitation
webshells
CVE-2024-0012
CVE-2024-9474
2024-11-25
sliver c2
palo alto networks
Published: November 25, 2024
Downloadable IOCs: 14
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-50672

9.8
    Adapt Learning Adapt Authoring Tool
  • Version(s): <= 0.11.3
Published: November 25, 2024

CVE-2024-52787

9.1
    libre-chat
  • Version(s): 0.0.6
Published: November 25, 2024

CVE-2024-11664

8.8
    Enms
  • Enms
Published: November 25, 2024

CVE-2024-52811

8.2
    ngtcp2
  • Version(s): 1.9.1 and below
Published: November 25, 2024

CVE-2024-53554

8.0
    Taiga
  • Version(s): 8.6.1
Published: November 25, 2024

CVE-2024-7915

7.8
    Sensei Mac Cleaner
Published: November 25, 2024

CVE-2024-8272

7.8
    UNKNOWN
Published: November 25, 2024

CVE-2024-53098

7.8
    Linux
  • Linux Kernel
Published: November 25, 2024

CVE-2024-53916

7.5
    OpenStack Neutron
  • Version(s): through 25.0.0
Published: November 25, 2024

CVE-2024-11646

7.3
    1000projects
  • Beauty Parlour Management System
Published: November 25, 2024

CVE-2024-11647

7.3
    1000projects
  • Beauty Parlour Management System
Published: November 25, 2024

CVE-2024-11648

7.3
    1000projects
  • Beauty Parlour Management System
Published: November 25, 2024

CVE-2024-11649

7.3
    1000projects
  • Beauty Parlour Management System
Published: November 25, 2024

CVE-2024-11663

7.3
    Codezips
  • E-Commerce Site
Published: November 25, 2024

CVE-2024-45755

7.2
    Centreon DSM Server
  • Version(s): 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, 22.10.x before 22.10.2
Published: November 25, 2024

CVE-2024-45756

7.2
    Centreon centreon-open-tickets
  • Version(s): 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x before 23.04.3, 22.10.x before 22.10.2
Published: November 25, 2024

CVE-2024-53268

7.2
    Joplin
  • Version(s): < 3.0.3
Published: November 25, 2024

CVE-2024-53099

7.1
    Linux
  • Linux Kernel
Published: November 25, 2024

CVE-2024-27134

7.0
    MLflow
Published: November 25, 2024

CVE-2024-10709

6.8
    YaDisk Files WordPress plugin
  • Version(s): through 1.2.5
Published: November 25, 2024

CVE-2022-33862

6.7
    IPP software
  • Version(s): before 1.71
Published: November 25, 2024

CVE-2024-11650

6.5
    Tenda i9
  • Version(s): 1.0.0.8(3828)
Published: November 25, 2024

CVE-2024-10270

6.5
    Keycloak
Published: November 25, 2024

CVE-2024-11662

6.3
    OpsManage
  • Version(s): 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5
Published: November 25, 2024

CVE-2024-53597

6.3
    masterstack_imgcap
  • Version(s): 0.0.1
Published: November 25, 2024

CVE-2023-45181

6.1
    IBM Jazz Foundation
  • Version(s): 7.0.2, before 7.0.2
Published: November 25, 2024

CVE-2024-53556

6.1
    Taiga
  • Version(s): 6.8.1
Published: November 25, 2024

CVE-2024-53096

6.1
    Linux
  • Linux Kernel
Published: November 25, 2024

CVE-2024-10451

5.9
    Keycloak
  • Version(s): up to 26.0.2
Published: November 25, 2024

CVE-2024-52529

5.8
    Cilium
  • Version(s): v1.16.0 - v1.16.3
Published: November 25, 2024

CVE-2024-53097

5.5
    Linux
  • Linux Kernel
Published: November 25, 2024

CVE-2024-53101

5.5
    Linux
  • Linux Kernel
Published: November 25, 2024

CVE-2024-53930

5.4
    WikiDocs
  • Version(s): before 1.0.65
Published: November 25, 2024

CVE-2024-11670

5.4
    Devolutions Remote Desktop Manager
  • Version(s): 2024.2.21 and earlier
Published: November 25, 2024

CVE-2024-11671

5.4
    Devolutions Remote Desktop Manager
  • Version(s): 2024.3.17, before 2024.3.17
Published: November 25, 2024

CVE-2024-32468

5.4
    Deno
Published: November 25, 2024

CVE-2024-53599

5.4
    LafeLabs Chaos
  • Version(s): 0.0.1
Published: November 25, 2024

CVE-2024-6538

5.3
    OpenShift Console
Published: November 25, 2024

CVE-2023-26280

5.3
    IBM Jazz Foundation
  • Version(s): 7.0.2, 7.0.3
Published: November 25, 2024

CVE-2021-23282

5.2
    Eaton Intelligent Power Manager
  • Version(s): before 1.70
Published: November 25, 2024

CVE-2022-33861

5.1
    IPP software
  • Version(s): before v1.71
Published: November 25, 2024

CVE-2024-11483

5.0
    Ansible Automation Platform
Published: November 25, 2024

CVE-2024-6393

4.8
    Photo Gallery, Sliders, Proofing and WordPress plugin
  • Version(s): before 3.59.5
Published: November 25, 2024

CVE-2024-7056

4.8
    WPForms WordPress plugin
  • Version(s): before 1.9.1.6
Published: November 25, 2024

CVE-2024-11651

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-11652

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-11653

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-11654

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-11655

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-11656

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-11657

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-11658

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-11659

4.7
    Engeniustech
  • Enh1350ext Firmware
  • Enh1350ext
  • Ens500-Ac Firmware
  • Eens500-Ac
  • Ens620ext Firmware
  • Ens620ext
Published: November 25, 2024

CVE-2024-9666

4.7
    Keycloak Server
Published: November 25, 2024

CVE-2024-53100

4.7
    Linux
  • Linux Kernel
Published: November 25, 2024

CVE-2024-51723

4.6
    BlackBerry AtHoc
  • Version(s): 7.15
Published: November 25, 2024

CVE-2024-11661

4.3
    Codezips
  • Free Exam Hall Seating Management System
Published: November 25, 2024

CVE-2024-11672

4.3
    Devolutions Remote Desktop Manager
  • Version(s): 2024.2.21 and earlier
Published: November 25, 2024

CVE-2024-50671

4.3
    Adapt Learning Adapt Authoring Tool
  • Version(s): <= 0.11.3
Published: November 25, 2024

CVE-2024-11673

4.3
    1000projects
  • Bookstore Management System
Published: November 25, 2024

CVE-2024-10710

3.5
    YaDisk Files WordPress plugin
  • Version(s): through 1.2.5
Published: November 25, 2024

CVE-2024-11660

3.5
    Anisha
  • Farmacia
Published: November 25, 2024

CVE-2024-10492

2.7
    Keycloak
Published: November 25, 2024

CVE-2020-11311

None
    UNKNOWN
Published: November 25, 2024

CVE-2020-12491

None
    UNKNOWN
Published: November 25, 2024

CVE-2020-12492

None
    Vivo smartphones
Published: November 25, 2024

CVE-2024-11403

None
    LibJXL
  • Version(s): before commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99
    jpegli
Published: November 25, 2024

CVE-2024-11498

None
    libjxl
Published: November 25, 2024

CVE-2024-53255

None
    BoidCMS
  • Version(s): 2.1.2
Published: November 25, 2024

CVE-2024-53258

None
    Autolab
  • Version(s): 3.0.0, 3.0.1, 3.0.2
Published: November 25, 2024

CVE-2024-53261

None
    SvelteKit
  • Version(s): 2.8.3
Published: November 25, 2024

CVE-2024-53262

None
    SvelteKit
  • Version(s): 2.8.3
Published: November 25, 2024

CVE-2024-53102

None
    Linux kernel
Published: November 25, 2024
Click here to see more Vulnerabilities