Exploit Archives - CyberConvoy Blog

Exploit released for Veeam bug allowing cleartext credential theft

It is important to note that this vulnerability should be taken seriously, and patches should be applied as soon as possible to ensure the organization's security

23 March

Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware

03/22/2023
Cyber News
Breach, Crypto Malware, Exploit, Malware

This proves that no open-source repository is safe from malicious actors.

22 March

CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to obtain access to files and credentials, escalate privileges, and remotely execute arbitrary code

22 March

New Cryptojacking Operation Targeting Kubernetes Clusters for Dero Mining

The novel Dero crypto jacking operation concentrates on locating Kubernetes clusters with anonymous access enabled on a Kubernetes API and listening on non-standard ports accessible from the internet

18 March

Critical Microsoft Outlook bug is easy exploitable

The issue is a privilege escalation vulnerability with a 9.8 severity rating affecting all Microsoft Outlook versions on Windows

15 March

Microsoft March 2023 Patch Tuesday fixes 2 zero-days, 83 flaws

Nine vulnerabilities have been classified as 'Critical' for allowing remote code execution, denial of service, or elevation of privileges attacks

15 March

CISA adds three new bugs to Known Exploited Vulnerabilities Catalog

CISA added actively exploited flaws in Teclib GLPI, Apache Spark, and Zoho ManageEngine ADSelfService Plus to its Known Exploited Vulnerabilities Catalog

10 March

Six critical vulnerabilities fixed in ArubaOS

The flaws impact Aruba Mobility Conductor, Aruba Mobility Controllers, and Aruba-managed WLAN Gateways and SD-WAN Gateways

4 March

Cisco announced a critical Web UI RCE flaw in multiple IP phones

The RCE flaw (CVE-2023-20078) allows attackers to inject arbitrary commands that will be executed with root privileges following successful exploitation

1 March

First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

This bootkit can run even on fully up-to-date Windows 11 systems with UEFI Secure Boot enabled

1 March