0day Archives - Page 2 of 12 - CyberConvoy Blog

Dell Compellent hardcoded key exposes VMware vCenter admin creds

This AES encryption key is used to encrypt the CITV configuration file containing the program's settings, including the entered vCenter admin credentials

12 August

Malicious extensions can abuse VS Code flaw to steal auth tokens

08/12/2023
Cyber News
0day, Security

Any extension running in VS Code, even malicious ones, can gain access to the Secret Storage and abuse Keytar to retrieve any stored tokens

12 August

Microsoft August 2023 Patch Tuesday warns of 2 zero-days, 87 flaws

This month's Patch Tuesday fixes two zero-day vulnerabilities, with both exploited in attacks and one of them publicly disclosed

8 August

New PaperCut critical bug exposes unpatched servers to RCE attacks

08/04/2023
Cyber News
0day, Patching, RCE

PaperCut recently fixed a critical security vulnerability in its NG/MF print management software that allows unauthenticated attackers to gain remote code execution on unpatched Windows servers

4 August

Atlassian Releases Patches for Critical Flaws in Confluence and Bamboo

If successfully exploited, could result in remote code execution on susceptible systems

29 July

VMware fixes bug exposing CF API admin credentials in audit logs

Threat actors who exploit this vulnerability can use the stolen credentials to push malicious app versions

29 July

Apple fixes new zero-day used in attacks against iPhones, Macs

Attackers could exploit it on unpatched devices to modify sensitive kernel states

25 July

Ivanti patches MobileIron zero-day bug exploited in attacks

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication

25 July