0day Archives - CyberConvoy Blog

Atlassian patches critical RCE flaws across multiple products

System administrators should prioritize applying the available updates

6 December

Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws

Apple has released software updates for iOS, iPadOS, macOS, and Safari web browser to address two security flaws that it said have come under active exploitation in the wild on older versions of its software.

1 December

VMware fixes critical Cloud Director auth bypass unpatched for 2 weeks

12/01/2023
Cyber News
0day, Hardening

Cloud Director is a VMware platform that enables admins to manage data centers spread across multiple locations as Virtual Data Centers

1 December

Google Chrome emergency update fixes 5th zero-day exploited in 2023

11/28/2023
Cyber News
0day, Security

Google says that access to the zero-day's details might remain restricted until most users have updated their browser

28 November

Hackers start exploiting critical ownCloud flaw, patch now

In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key

28 November

VMware discloses critical VCD Appliance auth bypass

11/15/2023
Cyber News
0day, Security

While VMware doesn't have a patch for this critical authentication bypass, the company provided admins with a temporary workaround until security updates are released

15 November

Critical Azure CLI flaw found that leaked credentials in logs

They found that successful exploitation enables unauthenticated attackers to remotely access plain text contents written by Azure CLI to Continuous Integration and Continuous Deployment (CI/CD) logs

14 November

Critical Flaws Discovered in Veeam ONE IT Monitoring Software – Patch Now

Over the past few months, critical flaws in the Veeam backup software have been exploited by multiple threat actors, including FIN7 and BlackCat ransomware, to distribute malware

7 November