Exploits and vulnerabilities – Page 14

Update now! Apple patches vulnerabilities in MacOS and iOS

February 15, 2023 0 Comments 13.2.1, 16.3.1, Apple, cve-2023-23514, cve-2023-23522, cve-2023-23529, Exploits and vulnerabilities, iOS, ipados, macos ventura, type confusion, use-after-free

Categories: Apple

Categories: Exploits and vulnerabilities

Tags: Apple

Tags: macOS Ventura

Tags: 13.2.1

Tags: iOS

Tags: iPadOS

Tags: 16.3.1

Tags: CVE-2023-23514

Tags: CVE-2023-23522

Tags: CVE-2023-23529

Tags: use after free

Tags: type confusion

Apple has released patches for macOS Ventura, iPadOs, and iOS. Among the patched vulnerabilities is a WebKit vulnerability which may have been exploited in the wild.

MalwareBytes Security

[update]Two year old vulnerability used in ransomware attack against VMware ESXi

February 8, 2023 0 Comments cve-2021-21974, esxi, Exploits and vulnerabilities, Linux, nevada, news, Ransomware, vmware

Categories: Exploits and vulnerabilities

Categories: News

Categories: Ransomware

Tags: VMware

Tags: ESXi

Tags: Nevada

Tags: ransomware

Tags: Linux

Tags: CVE-2021-21974

Over the weekend, several CERTs warned about ongoing ransomware attacks against unpatched VMware ESXi virtual machines.

MalwareBytes Security

Two year old vulnerability used in ransomware attack against VMware ESXi

February 6, 2023 0 Comments cve-2021-21974, esxi, Exploits and vulnerabilities, Linux, nevada, news, Ransomware, vmware

Categories: Exploits and vulnerabilities

Categories: News

Categories: Ransomware

Tags: VMware

Tags: ESXi

Tags: Nevada

Tags: ransomware

Tags: Linux

Tags: CVE-2021-21974

Over the weekend, several CERTs warned about ongoing ransomware attacks against unpatched VMware ESXi virtual machines.

MalwareBytes Security

How the CISA catalog of vulnerabilities can help your organization

February 3, 2023 0 Comments Exploits and vulnerabilities, news

Categories: Exploits and vulnerabilities

Categories: News

The CISA catalog of known exploited vulnerabilities is designed for the federal government and useful to everyone.

MalwareBytes Security

Update vRealize now! VMware patches critical RCE vulnerabilities

January 28, 2023 0 Comments broken access control, cve-2022-31702, cve-2022-31704, cve-2022-31706, directory traversal, Exploits and vulnerabilities, news, path traversal, vmware, vrealize

Categories: Exploits and vulnerabilities

Categories: News

Tags: vRealize

Tags: VMware

Tags: CVE-2022-31706

Tags: CVE-2022-31704

Tags: CVE-2022-31702

Tags: path traversal

Tags: directory traversal

Tags: broken access control

VMware has issued a security advisory for vRealize Log Insight that covers four vulnerabilities, including two critical RCEs

MalwareBytes Security

Own an older iPhone? Check you’re on the latest version to avoid this bug

January 24, 2023 0 Comments Apple, cve-2022-42856, Exploits and vulnerabilities, ios 12.5.7, news, type confusion, webkit

Categories: Apple

Categories: Exploits and vulnerabilities

Categories: News

Tags: iOS 12.5.7

Tags: CVE-2022-42856

Tags: type confusion

Tags: WebKit

Apple has now released security content for iOS 12.5.7 which includes a patch for an actively exploited vulnerability in WebKit and many other updates.

MalwareBytes Security

Update now! Proof of concept code to be released for Zoho ManageEngine vulnerability

January 17, 2023 0 Comments apache santuario, cve-2022-35405, cve-2022-47966, Exploits and vulnerabilities, manageengine, news, poc, rce, saml, zoho

Categories: Exploits and vulnerabilities

Categories: News

Tags: Zoho

Tags: ManageEngine

Tags: PoC

Tags: RCE

Tags: CVE-2022-47966

Tags: CVE-2022-35405

Tags: SAML

Tags: Apache Santuario

Proof of Concept code is about to be released for a vulnerability in many ManageEngine products which could enable RCE with SYSTEM privileges.

MalwareBytes Security

Update now! Patch Tuesday January 2023 includes one actively exploited vulnerability

January 12, 2023 0 Comments aplc, bitlocker, cve-2023-21563, cve-2023-21674, cve-2023-21743, Exploits and vulnerabilities, news, Patch Tuesday, sharepoint

Categories: Exploits and vulnerabilities

Categories: News

Tags: patch Tuesday

Tags: CVE-2023-21674

Tags: APLC

Tags: CVE-2023-21743

Tags: Sharepoint

Tags: CVE-2023-21563

Tags: BitLocker

The second Tuesday of the year brings us many updates, including one for an actively exploited vulnerability that could lead to elevation of privileges