CVE-2024-38077: Uzak Masaüstü Lisans Servisi RCE (9.8)
RDL servisindeki kritik zafiyet, ağdan kimlik doğrulamasız kod çalıştırılmasına izin veriyor. Tüm WS2012–2022 etkileniyor.
Altyapının nabzı, tehditlerin ekranı.
Ubuntu Server, Windows Server, Proxmox VE, Plesk, FortiGate / FortiOS ve 6 platform daha için güvenlik açıkları, kritik yamalar ve sürüm gelişmeleri — tek ekranda, doğrulanmış ve işlem yapılabilir.
RDL servisindeki kritik zafiyet, ağdan kimlik doğrulamasız kod çalıştırılmasına izin veriyor. Tüm WS2012–2022 etkileniyor.
PVE 9.0; Debian 13 Trixie tabanı, QEMU 10.0, LXC 6.0 ve Ceph Squid 19.2 ile geliyor. 8→9 yükseltme yolu resmi olarak destekleniyor.
Yeni LTS sürümü; çekirdek 6.8, sertleştirilmiş paketler ve Ubuntu Pro ile 12 yıla kadar güvenlik bakımı sunuyor.
Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.
Ubuntu 24.04 LTS için yayınlanan çekirdek güncellemesi, nf_tables bileşenindeki use-after-free zafiyetini kapatıyor.
Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API.
A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before 9.1.7 and 8.x before 8.4.7; and pve-container before 6.1.3 (PVE 9.x) and before 5.3.4 (PVE 8.x) allows an attacker with privileges to call "vncproxy" to hijack a VNC session that is established in parallel by a different user for a different VM.
A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environment (PVE) 8.x 4.3.16 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to 0.23.0, Kopia's HTTP server started with --without-password accepts unauthenticated requests to /api/v1/repo/exists and forwards attacker-supplied SFTP storage configuration to blob.NewStorage, where externalSSH: true and sshArguments containing -oProxyCommand=<cmd> can cause exec.CommandContext("ss
Panel, web sunucusu ve DNS bileşenleri için çeşitli güvenlik iyileştirmeleri içeren mikro-güncelleme paketi.
Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.
Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location.
Buckle up for the story of how we went from drowning in snmpwalk output to building a device-centric path toward Zabbix 7 walk-based templates. The original problem Every monitoring engineer knows this moment. You get a new device on the network – a firewall, a NAS, a UPS, a switch from a vendor you have […] The post The Evolution of an SNMP Auto-Discovery Tool appeared first on Zabbix Blog.
Takip ettiğiniz platformlarda çıkan güvenlik açıkları ve sürüm duyuruları her sabah tek e-postada. Hangi platformları izleyeceğinizi siz seçersiniz, istediğiniz an bırakırsınız.
Zaten abone misiniz? Tercihlerinizi yönetin