PSAUX Ransomware exploits CyberPanel Vulnerabilities

The PSAUX ransomware has seen exploiting CyberPanel vulnerabilities affects versions 2.3.6 and 2.3.7 and permits unauthenticated attackers to gain root access, enabling complete control over affected systems. The vulnerabilities are tracked as CVE-2024-51567, CVE-2024-51568, and CVE-2024-51378, each with a CVSS v3.1 score of 10, to compromise servers and deploy PSAUX ransomware. These vulnerabilities, allows unauthenticated […]

Apache CloudStack fixes several vulnerabilities

thecyberthrone.in - 17/Oct 08:35

Apache CloudStack project has announced the release of LTS security releases 4.18.2.4 and 4.19.1.2 to address four security vulnerabilities The most...

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

Grafana fixes a critical vulnerability CVE-2024-9264

thecyberthrone.in - 19/Oct 04:04

Grafana has been affected by critical security vulnerability , could allow attackers to execute arbitrary code on affected systems, potentially...

A critical flaw in Kubernetes Image Builder could allow attackers to gain root access

securityaffairs.co - 17/Oct 09:49

A critical flaw in Kubernetes Image Builder could allow attackers to gain root access if exploited under specific conditions. A critical, Kubernetes...

U.S. CISA adds Veeam Backup and Replication flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 19/Oct 15:22

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Veeam Backup and Replication vulnerability to its Known Exploited Vulnerabilities...

Trend Micro fixes Critical Vulnerability CVE-2024-48904

thecyberthrone.in - 19/Oct 13:02

Trend Micro has patched a command injection vulnerability in its Cloud Edge appliance that could allow a remote attacker to execute arbitrary code on...

Massive PSAUX ransomware attack targets 22,000 CyberPanel instances

bleepingcomputer.com - 29/Oct 19:15

Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware...

BIG-IP F5 affected by a vulnerability CVE-2024-45844

thecyberthrone.in - 20/Oct 16:18

A critical vulnerability has been identified in F5 BIG-IP that could allow authenticated attackers to bypass access control restrictions and...

Apache Solr fixes Critical Vulnerability CVE-2024-45216

thecyberthrone.in - 18/Oct 05:34

Apache Solr, has been affected by two security vulnerabilities that could present serious risks for organizations running affected Solr...

Fog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766

securityaffairs.co - 29/Oct 11:51

Fog and Akira ransomware operators are exploiting SonicWall VPN flaw CVE-2024-40766 to breach enterprise networks. Fog and Akira ransomware operators...

Rubriques :