Skip to main content
Customer Support Customer Support

Vulnerability Vault

Learn about new vulnerabilities in software, systems, devices, and share new patches, workarounds, and mitigation strategies.

  • 331 Topics
  • 153 Replies
Blog

Fast Flux: The Evasive DNS Tactic Now Considered a National Security Th...

  • 5
  • 5

Vulnerable Moxa devices expose industrial networks to attacks

  • 5
  • 0

Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vuln...

  • 3
  • 0
331 Topics
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Vulnerability Vault
Fast Flux: The Evasive DNS Tactic Now Considered a National Security ThreatBlog

Listen to the podcast HERE In April 2025, a joint advisory from the NSA, CISA, FBI, and allied international agencies elevated a longstanding cyber evasion technique fast flux to the status of a national security threat. While fast flux isn’t new, its persistent use in high-impact attacks and the defensive blind spots it exposes have prompted this global call to action. What is Fast Flux?At its core, fast flux is a method attackers use to stay one step ahead of defenders. It works by rapidly rotating the IP addresses associated with a single domain, often every few minutes. This dynamic resolution makes malicious infrastructure, such as phishing sites or command-and-control (C2) servers, extremely hard to locate and shut down. There are two variants: single flux, which changes the IPs behind a domain, and double flux, which also rotates the DNS name servers. Both approaches rely on networks of compromised devices, often forming large botnets that serve as proxies for malicious activity

2595
Ssherjj
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft October 2024 Security Updates (Patch Tuesday)

This is what I got for today on my Windows 10 Pro. More info will follow.  

12115
TripleHelix
Moderator
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Vulnerability Vault
Log4j Aftermath: Lessons Learned and Steps Forward for the Community and IndustryBlog

In the wake of the Log4j vulnerability—arguably one of the most significant security breaches of recent years—the tech world is left grappling with its aftermath. Known as Log4Shell, the Log4j vulnerability had a profound impact due to its ubiquity in enterprise software worldwide. The crux of the issue was its exploitation allowing remote code execution, and with the widespread use of Log4j in various systems, this presented an almost unprecedented level of risk. Now, as the dust settles, it's vital to take a step back and consider what we can learn from this incident and what needs to be done by the community and industry moving forward. The Log4j vulnerability is a stark reminder of the extent of potential security threats in open-source software. The sheer scale of applications and systems using Log4j was immense, and it highlighted how deeply integrated and dependent our technology ecosystem is on such components. Therefore, the first step is acknowledging the scale of potential i

1134
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft April 2024 Security Updates (Patch Tuesday)

 This release consists of the following 149 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Windows BitLocker CVE-2024-20665Windows Secure Boot CVE-2024-20669Microsoft Office Outlook CVE-2024-20670Azure Private 5G Core CVE-2024-20685Windows Secure Boot CVE-2024-20688Windows Secure Boot CVE-2024-20689Windows Kernel CVE-2024-20693Microsoft Defender for IoT CVE-2024-21322Microsoft Defender for IoT CVE-2024-21323Microsoft Defender for IoT CVE-2024-21324.NET and Visual Studio CVE-2024-21409Azure Compute Gallery CVE-2024-21424Windows Authentication Methods CVE-2024-21447Microsoft Install Service CVE-2024-26158Windows Secure Boot CVE-2024-26168Windows Secure Boot CVE-2024-26171Windows DWM Core Library CVE-2024-26172Windows Secure Boot CVE-2024-26175Windows Routing and Remote Access Service (RRAS) CVE-2024-26179Windows Secure Boot CVE-2024-26180Windows Kerberos CVE-2024-26183Windows Secure Boot CVE-2024-26189Azure Migrate CVE-2024-26193Windows Secure

9717
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft September 2024 Security Updates (Patch Tuesday)

This release consists of the following 79 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations? Windows TCP/IP CVE-2024-21416 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No SQL Server CVE-2024-26186 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No SQL Server CVE-2024-26191 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No Windows Security Zone Mapping CVE-2024-30073 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No SQL Server CVE-2024-37335 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No SQL Server CVE-2024-37337 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C Exploitation Less Likely Yes No

7813
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft December 2024 Security Updates (Patch Tuesday)

This release consists of the following 72 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?System Center Operations Manager CVE-2024-43594Microsoft Office CVE-2024-43600Microsoft Edge (Chromium-based) CVE-2024-49041Microsoft Defender for Endpoint CVE-2024-49057Microsoft Office CVE-2024-49059Microsoft Office SharePoint CVE-2024-49062GitHub CVE-2024-49063Microsoft Office SharePoint CVE-2024-49064Microsoft Office Word CVE-2024-49065Microsoft Office SharePoint CVE-2024-49068Microsoft Office Excel CVE-2024-49069Microsoft Office SharePoint CVE-2024-49070Windows Task Scheduler CVE-2024-49072Windows Mobile Broadband CVE-2024-49073Windows Kernel-Mode Drivers CVE-2024-49074Windows Remote Desktop Services CVE-2024-49075Windows Virtualization-Based Security (VBS) Enclave CVE-2024-49076Windows Mobile Broadband CVE-2024-49077Windows Mobile Broadband CVE-2024-49078Microsoft Office Publisher CVE-2024-49079Windows IP Routing Management Snapin CVE-2024-49080Win

6712
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft March 2024 Security Updates (Patch Tuesday)

March 2024 Security UpdatesThis release consists of the following 61 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Windows Defender CVE-2024-20671Open Management Infrastructure CVE-2024-21330Open Management Infrastructure CVE-2024-21334Microsoft Authenticator CVE-2024-21390.NET CVE-2024-21392Microsoft Azure Kubernetes Service CVE-2024-21400Role: Windows Hyper-V CVE-2024-21407Role: Windows Hyper-V CVE-2024-21408Skype for Consumer CVE-2024-21411Software for Open Networking in the Cloud (SONiC) CVE-2024-21418Microsoft Dynamics CVE-2024-21419Azure SDK CVE-2024-21421Microsoft Office SharePoint CVE-2024-21426Windows Kerberos CVE-2024-21427Windows USB Hub Driver CVE-2024-21429Windows USB Serial Driver CVE-2024-21430Windows Hypervisor-Protected Code Integrity CVE-2024-21431Windows Update Stack CVE-2024-21432Windows Print Spooler Components CVE-2024-21433Microsoft Windows SCSI Class System File CVE-2024-21434Windows OLE CVE-2024-21435Windows Install

588
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
February 2024 Security Updates This release consists of the following 73 Microsoft CVEs (Patch Tuesday)

February 2024 Security UpdatesThis release consists of the following 73 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Azure DevOps CVE-2024-20667Microsoft Office CVE-2024-20673Azure Stack CVE-2024-20679Windows Hyper-V CVE-2024-20684Skype for Business CVE-2024-20695Trusted Compute Base CVE-2024-21304Microsoft Defender for Endpoint CVE-2024-21315Microsoft Dynamics CVE-2024-21327Microsoft Dynamics CVE-2024-21328Azure Connected Machine Agent CVE-2024-21329Windows Kernel CVE-2024-21338Windows USB Serial Driver CVE-2024-21339Windows Kernel CVE-2024-21340Windows Kernel CVE-2024-21341Role: DNS Server CVE-2024-21342Windows Internet Connection Sharing (ICS) CVE-2024-21343Windows Internet Connection Sharing (ICS) CVE-2024-21344Windows Kernel CVE-2024-21345Windows Win32K - ICOMP CVE-2024-21346SQL Server CVE-2024-21347Windows Internet Connection Sharing (ICS) CVE-2024-21348Microsoft ActiveX CVE-2024-21349Microsoft WDAC OLE DB provider for SQL CVE-2024-2

5311
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft security update summary for May 2025

CVEs have been published or revised in the Security Update Guide May 2, 2025 These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide: CVE-2025-29825 Title: Microsoft Edge (Chromium-based) Spoofing Vulnerability Version: 1.0 Reason for revision: Information published. Originally released: May 1, 2025 Last updated: May 1, 2025 Aggregate CVE severity rating: Low Customer action required: Yes CVE-2025-4050 Title: Chromium: CVE-2025-4096 Heap buffer overflow in HTML Version: 1.0 Reason for revision: Information published. Originally released: May 1, 2025 Last updated: May 1, 2025 Aggregate CVE severity rating: Customer action required: Yes CVE-2025-4051 Title: Chr

528
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft March 2025 Security Updates

March 2025 Security UpdatesThis release consists of the following 57 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Windows exFAT File System CVE-2025-21180Azure Agent Installer CVE-2025-21199Windows MapUrlToZone CVE-2025-21247Windows Remote Desktop Services CVE-2025-24035.NET CVE-2025-24043Windows Win32 Kernel Subsystem CVE-2025-24044Windows Remote Desktop Services CVE-2025-24045Microsoft Streaming Service CVE-2025-24046Role: Windows Hyper-V CVE-2025-24048Azure CLI CVE-2025-24049Role: Windows Hyper-V CVE-2025-24050Windows Routing and Remote Access Service (RRAS) CVE-2025-24051Windows NTLM CVE-2025-24054Windows USB Video Driver CVE-2025-24055Windows Telephony Server CVE-2025-24056Microsoft Office CVE-2025-24057Windows Common Log File System Driver CVE-2025-24059Windows Mark of the Web (MOTW) CVE-2025-24061Role: DNS Server CVE-2025-24064Windows Kernel-Mode Drivers CVE-2025-24066Microsoft Streaming Service CVE-2025-24067ASP.NET Core & Visu

528
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft November 2024 Security Updates (Patch Tuesday)

This release consists of the following 89 Microsoft CVEs: Microsoft security update summary for November 2024November 12, 2024Here’s a summary of Microsoft security updates released on this date.Critical security updates.NET 9.0 installed on Linux .NET 9.0 installed on Mac OS .NET 9.0 installed on Windows Microsoft Visual Studio 2022 version 17.10 Microsoft Visual Studio 2022 version 17.11 Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.8 Windows 11 Version 22H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server

507
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft June 2024 Security Updates (Patch Tuesday)

June 2024 Security UpdatesThis release consists of the following 49 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Visual Studio CVE-2024-29060Visual Studio CVE-2024-30052Windows Server Service CVE-2024-30062Windows Distributed File System (DFS) CVE-2024-30063Windows Kernel CVE-2024-30064Windows Themes CVE-2024-30065Winlogon CVE-2024-30066Winlogon CVE-2024-30067Windows Kernel CVE-2024-30068Windows Remote Access Connection Manager CVE-2024-30069Windows DHCP Server CVE-2024-30070Windows Event Logging Service CVE-2024-30072Windows Link Layer Topology Discovery Protocol CVE-2024-30074Windows Link Layer Topology Discovery Protocol CVE-2024-30075Windows Container Manager Service CVE-2024-30076Microsoft WDAC OLE DB provider for SQL CVE-2024-30077Windows Wi-Fi Driver CVE-2024-30078Windows Server Service CVE-2024-30080Windows Win32K - GRFX CVE-2024-30082Windows Standards-Based Storage Management Service CVE-2024-30083Windows Kernel-Mode Drivers CVE-2

496
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft August 2024 Security Updates (Patch Tuesday)

August 2024 Security UpdatesThis release consists of the following 90 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Windows Secure Kernel Mode CVE-2024-21302Windows Kerberos CVE-2024-29995Microsoft Windows DNS CVE-2024-37968Windows TCP/IP CVE-2024-38063Microsoft Office CVE-2024-38084Azure Connected Machine Agent CVE-2024-38098Windows Kernel CVE-2024-38106Windows Power Dependency Coordinator CVE-2024-38107Azure Stack CVE-2024-38108Azure Health Bot CVE-2024-38109Windows IP Routing Management Snapin CVE-2024-38114Windows IP Routing Management Snapin CVE-2024-38115Windows IP Routing Management Snapin CVE-2024-38116Windows NTFS CVE-2024-38117Microsoft Local Security Authority Server (lsasrv) CVE-2024-38118Windows Routing and Remote Access Service (RRAS) CVE-2024-38120Windows Routing and Remote Access Service (RRAS) CVE-2024-38121Microsoft Local Security Authority Server (lsasrv) CVE-2024-38122Microsoft Bluetooth Driver CVE-2024-38123Microsoft St

466
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft security update summary for April 2025

April 2025 Security UpdatesThis release consists of the following 126 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Visual Studio Code CVE-2025-20570Windows Standards-Based Storage Management Service CVE-2025-21174Windows Local Security Authority (LSA) CVE-2025-21191Windows NTFS CVE-2025-21197Windows Routing and Remote Access Service (RRAS) CVE-2025-21203Windows Update Stack CVE-2025-21204Windows Telephony Service CVE-2025-21205Windows Telephony Service CVE-2025-21221Windows Telephony Service CVE-2025-21222Windows DWM Core Library CVE-2025-24058Windows DWM Core Library CVE-2025-24060Windows DWM Core Library CVE-2025-24062Windows DWM Core Library CVE-2025-24073Windows DWM Core Library CVE-2025-24074Microsoft Edge (Chromium-based) CVE-2025-25000Microsoft Edge (Chromium-based) CVE-2025-25001Azure Local Cluster CVE-2025-25002Azure Local Cluster CVE-2025-26628Windows Hello CVE-2025-26635Windows BitLocker CVE-2025-26637Windows USB Print Driver CV

449
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft Patch Tuesday for January 2024

What I’m getting for my Windows 10 Pro! More info to come!   

435
russell.harris
Popular Voice
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft security update summary's for June 2025

CVEs have been published or revised in the Security Update Guide June 4, 2025 These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide: CVE-2025-21174 Title: Windows Standards-Based Storage Management Service Denial of Service Vulnerability Version: 1.3 Reason for revision: In the Security Updates table, corrected the Download and Article links for Windows Server 2012 R2 and Windows Server 2012 R2 (Server Core installation). This is an informational change only. Originally released: April 8, 2025 Last updated: May 30, 2025 Aggregate CVE severity rating: Important Customer action required: Yes CVE-2025-21204 Title: Windows Process Activation Elevation of Privilege Vulnerability Version: 2.2 Reason for revision: Added an FAQ to exp

374
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft May 2024 Security Updates (Patch Tuesday)

May 2024 Security UpdatesThis release consists of the following 60 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Windows Task Scheduler CVE-2024-26238Microsoft Windows SCSI Class System File CVE-2024-29994Windows Common Log File System Driver CVE-2024-29996Windows Mobile Broadband CVE-2024-29997Windows Mobile Broadband CVE-2024-29998Windows Mobile Broadband CVE-2024-29999Windows Mobile Broadband CVE-2024-30000Windows Mobile Broadband CVE-2024-30001Windows Mobile Broadband CVE-2024-30002Windows Mobile Broadband CVE-2024-30003Windows Mobile Broadband CVE-2024-30004Windows Mobile Broadband CVE-2024-30005Microsoft WDAC OLE DB provider for SQL CVE-2024-30006Microsoft Brokering File System CVE-2024-30007Windows DWM Core Library CVE-2024-30008Windows Routing and Remote Access Service (RRAS) CVE-2024-30009Windows Hyper-V CVE-2024-30010Windows Hyper-V CVE-2024-30011Windows Mobile Broadband CVE-2024-30012Windows Routing and Remote Access Service (RRA

325
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft Febuary 2025 Security Updates

February 2025 Security UpdatesThis release consists of the following 63 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Microsoft Dynamics 365 Sales CVE-2025-21177Windows DHCP Client CVE-2025-21179Windows Message Queuing CVE-2025-21181Windows Resilient File System (ReFS) Deduplication Service CVE-2025-21182Windows Resilient File System (ReFS) Deduplication Service CVE-2025-21183Windows CoreMessaging CVE-2025-21184Azure Network Watcher CVE-2025-21188Windows Telephony Service CVE-2025-21190Microsoft Surface CVE-2025-21194Microsoft High Performance Compute Pack (HPC) Linux Node Agent CVE-2025-21198Windows Telephony Service CVE-2025-21200Windows Telephony Server CVE-2025-21201Visual Studio CVE-2025-21206Windows Routing and Remote Access Service (RRAS) CVE-2025-21208Windows Internet Connection Sharing (ICS) CVE-2025-21212Windows Internet Connection Sharing (ICS) CVE-2025-21216Microsoft Edge for iOS and Android CVE-2025-21253Windows Internet Connec

212
TripleHelix
Moderator
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Vulnerability Vault
WinRAR flaw bypasses Windows Mark of the Web security alerts

April 5,  2025 By Ionut Ilascu A vulnerability in the WinRAR file archiver solution could be exploited to bypass the Mark of the Web (MotW) security warning and execute arbitrary code on a Windows machine.The security issue is tracked as CVE-2025-31334 and affects all WinRAR versions except the most recent release, which is currently 7.11.Mark of the Web is a security function in Windows in the form of a metadata value (an alternate data stream named ‘zone-identifier’) to tag as potentially unsafe files downloaded from the internet.When opening an executable with the MotW tag, Windows warns the user that it was downloaded from the internet and could be harmful and offers the option to continue execution or terminate it. >>Full Article<<

151
TripleHelix
Moderator
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Vulnerability Vault
Exploit Code Published for Potentially Dangerous Windows LDAP Vulnerability

Proof-of-concept (PoC) code was published for CVE-2024-49113, a denial-of-service (DoS) vulnerability in Windows LDAP. January 3, 2025 By Ionut Arghire SafeBreach has published proof-of-concept (PoC) exploit code targeting a recently resolved denial-of-service (DoS) vulnerability in Windows Lightweight Directory Access Protocol (LDAP).The issue, tracked as CVE-2024-49113 (CVSS score of 7.5), was patched on December 10 along with a critical remote code execution (RCE) flaw in LDAP (CVE-2024-49112, CVSS score of 9.8).Neither of the defects has been marked as exploited, but Microsoft warned that the RCE bug could allow unauthenticated attackers to execute arbitrary code using crafted LDAP calls, urging administrators to disconnect Domain Controllers from the internet to mitigate exposure. >>Full Article<<

132
Jasper_The_Rasper
Moderator
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
published in Vulnerability Vault
Vulnerable Moxa devices expose industrial networks to attacks

January 6, 2025 By Bill Toulas Industrial networking and communications provider Moxa is warning of a high-severity and a critical vulnerability that impact various models of its cellular routers, secure routers, and network security appliances.The two seurity issues allow remote attackers to get root privileges on vulnerable devices and to execute arbitrary commands, which could lead to arbitrary code execution.Risks on Moxa routersMoxa devices are used in environments with industrial automation and control systems from transportation, utilities and energy, and telecommunications sectors.On Friday, the vendor issued an urgent warning for the following two vulnerabilities:CVE-2024-9138 (8.6, high severity score): Hard-coded credentials that enable authenticated users to escalate privileges to rootCVE-2024-9140 (9.3, critical severity score): OS command injection flaw caused by exploiting improper input restrictions, leading to arbitrary code executionThe second flaw is particularly dan

120
Jasper_The_Rasper
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Microsoft Power Pages vulnerability exploited in the wild

Published Feb. 24, 2025 The high-severity privilege escalation flaw in Microsoft’s website-building application was disclosed and patched last week. David Ryder / Stringer via Getty ImagesA zero-day vulnerability in Microsoft Power Pages has been exploited in the wild.The vulnerability, listed as CVE-2025-24989, is an improper access control flaw that allows privilege escalation in Microsoft Power Pages, a low-code SaaS development platform for enterprise website-building. Microsoft disclosed and patched the high-severity vulnerability on Wednesday.In a security advisory, Microsoft warned the flaw has been exploited in the wild. Additionally, the Cybersecurity and Infrastructure Security Agency added CVE-2025-24989 to its known exploited vulnerabilities catalog on Friday and gave federal agencies a March 14 deadline to apply mitigations.“These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise,” CISA said

110
TripleHelix
Moderator
TripleHelix
Moderator
TripleHelixModerator
posted in Vulnerability Vault
Vulnerability Summary for the Week of February 10, 2025 Released Feb 18, 2025

Document IDSB25-049 The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded in the past week. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores.Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:High: vulnerabilities with a CVSS base score of 7.0–10.0 Medium: vulnerabilities with a CVSS base score of 4.0–6.9 Low: vulnerabilities with a CVSS base score of 0.0–3.9Entries may include additional information provided by organizations and efforts sponsored by CISA. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletin is comp

100
TripleHelix
Moderator
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Vulnerability Vault
New Mirai botnet targets industrial routers with zero-day exploits

January 7, 2025 By Bill Toulas A relatively new Mirai-based botnet has been growing in sophistication and is now leveraging zero-day exploits for security flaws in industrial routers and smart home devices.Exploitation of previously unknown vulnerabilities started in November 2024, according to Chainxin X Lab researchers who monitored the botnet's development and attacks.One of the security issues is CVE-2024-12856, a vulnerability in Four-Faith industrial routers that VulnCheck discovered in late December but noticed efforts to exploit it around December 20.to leverage zero-day exploits has been leveraging a zero-day exploit for CVE-2024-12856, impacting Four-Faith routers, alongside other custom exploits for flaws in Neterbit routers and Vimar smart home devices. >>Full Article<<

100
Jasper_The_Rasper
Moderator
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Vulnerability Vault
SonicWall warns of a critical CVE-2025-23006 zero-day likely exploited in the wild

January 24, 2025 By Pierluigi Paganini  SonicWall warns customers of a critical zero-day vulnerability in SMA 1000 Series appliances, likely exploited in the wild.SonicWall is waring customers of a critical security vulnerability, tracked as CVE-2025-23006 (CVSS score of 9,8) impacting its Secure Mobile Access (SMA) 1000 Series appliances. The vulnerability is a Pre-authentication deserialization of untrusted data issue in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) that has been likely exploited in attacks in the wild as a zero-day.“Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.” reads the advisory. “IMPORTANT: “SonicWall PSIRT has been notified of possible active exploitation of the referenced vulne

101
TripleHelix
Moderator

Badges

  • Posted 100 comments!
    SXR6has earned the badge Posted 100 comments!
  • Most Wanted
    Tarnakhas earned the badge Most Wanted
  • Beta To The Max
    Tarnakhas earned the badge Beta To The Max
  • Most Wanted
    Muddy7has earned the badge Most Wanted
  • Beta To The Max
    Muddy7has earned the badge Beta To The Max
Show all badges

Join the Conversation

Terms & Conditions