home.social

#loadmaster — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #loadmaster, aggregated by home.social.

fetched live
  1. Tactical Training Team @[email protected] ·

    Von Theorie zu Funk-Praxis: unsere Community hat gestern gelernt, wie man Lastenflüge korrekt einweist, mit Briefing, Platzorganisation und Ausführung bis zur Abschlussübung auf See.

    #Arma3 #MilSim #Loadmaster #Gaming

    #arma3 #milsim #loadmaster #gaming
  2. The New Oil @[email protected] ·

    Critical Progress #LoadMaster flaw now actively exploited in attacks

    bleepingcomputer.com/news/secu

    #cybersecurity

    #loadmaster #cybersecurity
  3. Sam Stepanyan :verified: 🐘 @[email protected] ·

    Progress Kemp #LoadMaster contains an OS Command #Injection #vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution (CVE-2024-1212):
    thehackernews.com/2024/11/cisa

    #loadmaster #injection #vulnerability
  4. Not Simon @[email protected] ·

    Rhino Security Labs disclosed vulnerability details and proofs of concept for CVE-2024-2448 (8.4 high) authenticated command injection and CVE-2024-2449* (7.5 high) Cross-Site Request Forgery (CSRF) protection bypass in Progress Kemp Loadmaster. The CSRF could be combined with the command injection and leveraged to execute commands on LoadMaster load balancers by targeting a user of the administration web user interface (WUI). h/t @buherator 🔗 rhinosecuritylabs.com/research

    #CVE_2024_2448 #CVE_2024_2449 #Progress #Loadmaster #vulnerability #proofofconcept

    #cve_2024_2448 #cve_2024_2449 #progress #loadmaster #vulnerability #proofofconcept
  5. Not Simon @[email protected] ·

    SonicWall alleges that CVE-2024-1212 (CVSS: 10.0 critical, disclosed 08 February 2024 by Progress) is being exploited in the wild. "SonicWall sensors have confirmed active exploitation of these vulnerabilities." 🔗 blog.sonicwall.com/en-us/2024/

    cc: @buherator @campuscodi

    EDIT: SonicWall took down the blog post as of 1300 US Eastern 28 March 2024.

    #CVE_2024_1212 #eitw #activeexploitation #vulnerability #Kemp #LoadMaster #Progress

    #cve_2024_1212 #eitw #activeexploitation #vulnerability #kemp #loadmaster
  6. Not Simon @[email protected] ·

    Rhino Security Labs, submitters of CVE-2024-1212 (CVSS: 10.0 critical, disclosed 08 February 2024 by Progress) unauthenticated Command Injection
    In Progress Kemp LoadMaster, released vulnerability details and a Proof of Concept. 🔗 rhinosecuritylabs.com/research H/T @buherator

    #CVE_2024_1212 #vulnerability #progress #loadmaster #proofofconcept #POC

    #cve_2024_1212 #vulnerability #progress #loadmaster #proofofconcept #poc