0day Archives - CyberConvoy Blog

High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server

Several security flaws were discovered that could be exploited to achieve denial-of-service (DoS) and remote code execution

22 September

Apple emergency updates fix 3 new zero-days exploited in attacks

Local attackers can exploit this flaw (CVE-2023-41992) to escalate privileges

22 September

GitLab Releases Urgent Security Patches for Critical Vulnerability

The vulnerability has been addressed in GitLab versions 16.3.4 and 16.2.7.

22 September

Microsoft September 2023 Patch Tuesday fixes 2 zero-days, 59 flaws

Microsoft has fixed an actively exploited local privilege elevation vulnerability that allows attackers to gain SYSTEM privileges

12 September

Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild – Update Now

09/12/2023
Cyber News
0day, Exploit

CVE-2023-41064 relates to a buffer overflow issue in the Image I/O component that could lead to arbitrary code execution when processing a maliciously crafted image

12 September

CISA warns of critical Apache RocketMQ bug exploited in attacks

Multiple threat actors are possibly exploiting the vulnerability at the moment to install various payloads on impacted systems

9 September

Apple zero-click iMessage exploit used to infect iPhones with spyware

The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim

7 September

WordPress migration add-on flaw could lead to data breaches

09/01/2023
Cyber News
0day, Security

The flaw, tracked as CVE-2023-40004, allows unauthenticated users to access and manipulate token configurations on the affected extensions

1 September

VMware Aria vulnerable to critical SSH authentication bypass flaw

08/30/2023
Cyber News
0day, Hardening, RCE

A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI

30 August

Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software

08/26/2023
Cyber News
0day, Exploit

If exploited, this vulnerability enables an unauthenticated actor to access some sensitive APIs that are used to configure the Ivanti Sentry on the administrator portal

26 August