Threat Intelligence Report Archives | Page 2 of 5 | Cloud-Based Platform AIONCLOUD

[2024.12 Vulnerability Report] Critical RCE Vulnerability in jsonpath-plus (CVE-2024-21534)

Vulnerability report written by the TA team by analyzing “Critical RCE Vulnerability in jsonpath-plus (CVE-2024-21534)” CVE-2024-21534 is a remote code execution (RCE) vulnerability in the jsonpath-plus package due to improper input sanitization. This vulnerability can cause serious security threats to the system by allowing a malicious user to execute arbitrary code through input. Systems with Read more about [2024.12 Vulnerability Report] Critical RCE Vulnerability in jsonpath-plus (CVE-2024-21534)[…]

[2024.12 Vulnerability Report] Cleo Harmony, VLTrader and LexiCom File Read/Write Vulnerability

Vulnerability report written by the TA team by analyzing “Cleo Harmony, VLTrader and LexiCom File Read/Write Vulnerability” The vulnerability is a file read/write vulnerability in the software provided by Cleo that attempts to access or upload malicious files in the service using the software through a manipulated VLSync header. The vulnerabilities were patched in Harmony, Read more about [2024.12 Vulnerability Report] Cleo Harmony, VLTrader and LexiCom File Read/Write Vulnerability[…]

[2024.11 Vulnerability Report] Joomla! CMS Security Bypass (CVE-2023-23752)

Vulnerability report written by the TA team by analyzing “Joomla! CMS Security Bypass (CVE-2023-23752)” CVE-2023-23752 is a vulnerability found in Joomla! versions 4.0.0 through 4.2.7 that allows unauthorized access to web service endpoints due to incorrect access validation. This can lead to a risk that a malicious user can access the system without authentication or Read more about [2024.11 Vulnerability Report] Joomla! CMS Security Bypass (CVE-2023-23752)[…]

[2024.11 Vulnerability Report] Github Enterprise Server Authentication Bypass

Vulnerability report written by the TA team by analyzing “Github Enterprise Server Authentication Bypass” The vulnerability is an authentication bypass vulnerability in the Github Enterprise Server (GHES), which can lead to an attack that bypasses signature verification operations and accesses GHES arbitrary accounts by sending crafted SAML requests to GHES services with SAML SSO authentication Read more about [2024.11 Vulnerability Report] Github Enterprise Server Authentication Bypass[…]

[2024.10 Vulnerability Report] PHP Stack Buffer Overflow Vulnerability

Vulnerability report written by the TA team by analyzing “PHP Stack Buffer Overflow Vulnerability” CVE-2023-3824 is a stack buffer overflow vulnerability in PHP that occurs when reading PHAR (PHP Archive) files. This vulnerability could allow attackers to cause memory corruption or execute remote code on the affected system. To mitigate this risk, it is crucial Read more about [2024.10 Vulnerability Report] PHP Stack Buffer Overflow Vulnerability[…]

Scroll Up