CCNPSecurity | ccnp_security | News

🆘FortiOS & FortiProxy – Authorization bypass in SSLVPN bookmarks 🐙Link(s): - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23112 - https://www.fortiguard.com/psirt/FG-IR-24-013 🔥CVE(s): - CVE-2024-23112 #FortiOS #FortiProxy #Fortigate #SSLVPN #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

March 2024 Security Updates, This release consists of the following 61 Microsoft CVEs: Link(s): - https://msrc.microsoft.com/update-guide/releaseNote/2024-Mar #Microsoft #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

Multiple vulnerabilities in VMware ESXi, Workstation, and Fusion were privately reported to VMware. Updates are available to remediate these vulnerabilities in affected VMware products. Link(s): - https://www.vmware.com/security/advisories/VMSA-2024-0006.html CVE(s): - CVE-2024-22252 - CVE-2024-22253 - CVE-2024-22254 - CVE-2024-22255 #Vmware #ESXi #Fusion #CloudFoundation #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

🔥CVE-2024-1709 : ConnectWise SecureConnect <= 23.9.7  - Authentication Bypass & Unauthenticated Remote Code Execution module (Updated) 🟢POC : https://github.com/horizon3ai/SecureConnect-Auth-Bypass [2] , [3] 📺Blog : https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/ ☠️Analysis (CVE-2024-1709 & CVE-2024-1708) :  https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass 🔥Module RCE : https://github.com/rapid7/metasploit-framework/pull/18870 #ConnectWise #RCE #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

ConnectWise urges ScreenConnect admins to patch critical RCE flaw Link(s) https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/ Patch Link(s): - https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 #ConnectWise #RCE #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation Link(s) https://thehackernews.com/2024/02/fortinet-warns-of-critical-fortios-ssl.html CVE(s): - CVE-2024-21762 #Fortinet #Firewall #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

RCE Vulnerability In Confluence Data Center and Confluence Server Link(s): - https://confluence.atlassian.com/security/cve-2023-22522-rce-vulnerability-in-confluence-data-center-and-confluence-server-1319570362.html CVE(s): - CVE-2023-22522 #RCE #Atlassian #AtlassianConfluence #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

Critical Flaws Discovered in Veeam ONE IT Monitoring Software Link(s): - https://www.veeam.com/kb4508 CVE(s): - CVE-2023-38547 - CVE-2023-38548 - CVE-2023-38549 - CVE-2023-41723 #Veeam #VeeamBackup #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

Detecting and Mitigating CVE-2023-4911: Local Privilege Escalation Vulnerability Link(s): - https://access.redhat.com/security/cve/cve-2023-4911 - https://sysdig.com/blog/cve-2023-4911/ CVE(s): - CVE-2023-4911 #Privilege #Linux #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

Windows IIS Server Elevation of Privilege Vulnerability Link(s): https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36434 CVE(s): - CVE-2023-36434 #IIS #Microsoft #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

Hello everyone 😄 Please, those who have a premium account, boost the channel to activate the channel's stories

Millions of Exim mail servers exposed to zero-day RCE attacks Link(s): https://www.bleepingcomputer.com/news/security/millions-of-exim-mail-servers-exposed-to-zero-day-rce-attacks/ CVE(s): - CVE-2023-42115 #Exim #CVE #MailServer #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

Microsoft SharePoint Server Elevation of Privilege Vulnerability Link(s): https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29357 Exploit Link: https://github.com/Chocapikk/CVE-2023-29357/tree/main CVE(s): CVE-2023-29357 #CVE #Microsoft #CVE #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity