#knownexploitedvulnerabilities — Public Fediverse posts

Gitea Flaw Exploited to Deploy Miner-Like Payload

Hackers are actively exploiting a critical flaw in Gitea to deploy malicious payloads, including miner-like attacks, by abusing the diffpatch endpoint to install and execute Git hooks. This vulnerability allows attackers with repository write access to inject code and run shell commands, prompting a warning from the US Cybersecurity and…

https://osintsights.com/gitea-flaw-exploited-to-deploy-miner-like-payload?utm_source=mastodon&utm_medium=social

#Gitea #CodeInjection #SupplyChain #KnownExploitedVulnerabilities #Cisa

CISA, NIST Researchers Develop Metric to Determine Likelihood of Vulnerability Exploitation https://thecyberexpress.com/cisa-nist-vulnerability-exploit-metric/ #knownexploitedvulnerabilities #TheCyberExpressNews #TheCyberExpress #Vulnerabilities #FirewallDaily #Vulnerability #KEVCatalog #CyberNews #CISA #NIST

Newly Exploited Vulnerabilities Target Cisco, Microsoft, and More – CISA Warns https://thecyberexpress.com/new-known-exploited-vulnerabilities-to-catalog/ #knownexploitedvulnerabilities #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202243769 #CVE202243939 #CVE202320118 #CVE20188639 #CVE20244885 #CyberNews

CISA Flags Critical Trimble Cityworks Vulnerability (CVE-2025-0994) in KEV Catalog https://thecyberexpress.com/cve-2025-0994-trimble-cityworks-vulnerability/ #TrimbleCityworksDeserializationvulnerability #knownexploitedvulnerabilities #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE20250994 #CyberNews #CISA

Turning Data into Decisions: How CVE Management Is Changing https://thecyberexpress.com/cve-data-vulnrichment-program/ #CommonVulnerabilitiesandExposures #knownexploitedvulnerabilities #VulnerabilityManagement #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnrichment #CyberNews #CVEData #CISA #CVE

Microsoft, Ivanti, and More: 2024 KEV Catalog Highlights Vendor Vulnerabilities https://thecyberexpress.com/cisas-2024-kev-catalog-update/ #knownexploitedvulnerabilities #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #KEVCatalog #CISA

CISA Flags CVE-2021-44207 in Exploited Vulnerabilities Catalog: High Impact Alert https://thecyberexpress.com/cisa-flags-cve-2021-44207/ #AcclaimSystemsUSAHERDSwebapplication #knownexploitedvulnerabilities #CybersecurityBestPractices #ransomwarecampaigns #remotecodeexecution #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #cybersecurity #DecryptionKey #ValidationKey #Vulnerability #CVE202144207 #KEVCatalog #CyberNews #CISA

CISA Adds Three Critical Vulnerabilities to KEV Catalog: Immediate Action Urged https://thecyberexpress.com/new-flaws-to-known-exploited-vulnerabilities/ #knownexploitedvulnerabilities #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #authentication #FirewallDaily #CVE202345727 #CVE202411667 #CVE202411680 #CyberNews #KEV

CISA Releases New List of Known Exploited Vulnerabilities, Urges Immediate Actions https://cyble.com/blog/cisa-known-exploited-vulnerabilities-updated/ #KnownExploitedVulnerabilities #Vulnerability #CVE202411680 #CVE202423113 #CVE202447575 #Exploit #CISA #KEV

CISA Flags Critical Security Flaws in PTZOptics Cameras, Urges Swift Action by Federal Agencies https://thecyberexpress.com/cve-2024-8957-in-ptzoptics-cameras/ #knownexploitedvulnerabilities #CISAvulnerabilities #TheCyberExpressNews #CISArecommendation #VulnerabilityNews #TheCyberExpress #Vulnerabilities #FirewallDaily #CVE20248956 #CVE20248957 #CyberNews #CISA

CVE-2024-9537: CISA Warns of Unpatched ScienceLogic SL1 Exploit in Active Use https://thecyberexpress.com/cve-2024-9537-sciencelogic-sl1-exploit/ #CybersecurityandInfrastructureSecurityAgency #knownexploitedvulnerabilities #ScienceLogicSL1vulnerability #VulnerabilityManagement #TheCyberExpressNews #Vulnerabilities #ScienceLogicSL1 #TheCyberExpress #FirewallDaily #KEVCatalog #CyberNews #CISA

SolarWinds, Firefox, Windows Face Active Exploitation: CISA Issues Urgent Warning https://thecyberexpress.com/cisa-adds-3-known-exploited-vulnerabilities/ #knownexploitedvulnerabilities #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202428987 #CVE202430088 #CVE20249680 #CyberNews #CISA

Patch Now! CISA Adds Critical Flaws to Exploited Vulnerabilities Catalog https://thecyberexpress.com/cisa-adds-new-known-exploited-vulnerabilities/ #knownexploitedvulnerabilities #DLinkroutervulnerability #ExploitedVulnerability #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE2014100005 #CVE202140655 #CVE20244761 #DLinkDIR600

Die #Schwachstelle CVE-2022-27926 in der #Zimbra Collaboration Suite wird von einer russischen #Hackergruppe, die als Winter Vivern und TA473 bekannt ist, bei Angriffen auf #NATO-Regierungsbehörden ausgenutzt, warnt die #CISA in den #USA.

#KnownExploitedVulnerabilities #KEV

https://www.bleepingcomputer.com/news/security/cisa-warns-of-zimbra-bug-exploited-in-attacks-against-nato-countries/