A vulnerability was found in Cisco AppDynamics. It has been declared as problematic. This vulnerability affects unknown code of the component Web-based Management Interface. The manipulation leads to cross site scripting.
This vulnerability was named …
A vulnerability was found in Cisco Duo up to 2.0.0 on Windows. It has been classified as problematic. This affects an unknown part of the component Authentication. The manipulation leads to information disclosure.
This vulnerability is uniquely identi…
A vulnerability was found in Cisco Secure Client on Linux and classified as critical. Affected by this issue is some unknown functionality of the component ISE Posture Module. The manipulation leads to uncontrolled search path.
This vulnerability is h…
A vulnerability has been found in Cisco AppDynamics and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Request Handler. The manipulation leads to path traversal: ‘/dir/../filename’.
This vulnerability is known as CVE-2024-20345. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
A vulnerability, which was classified as critical, was found in Cisco Secure Client. Affected is an unknown function of the component SAML Authentication. The manipulation leads to crlf injection.
This vulnerability is traded as CVE-2024-20337. It is …
A vulnerability, which was classified as critical, has been found in Cisco Business Wireless Access Point Software up to 1.0.5.0. This issue affects some unknown processing of the component Web-based User Interface. The manipulation leads to stack-base…
A vulnerability classified as critical was found in Cisco Business Wireless Access Point. This vulnerability affects unknown code of the component Web-based Management Interface. The manipulation leads to os command injection.
This vulnerability was n…
Threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services as part of an emerging malware campaign designed to deliver a cryptocurrency miner and spawn a reverse shell f…
The ALPHV gang’s attempt to cover up an exit scam isn’t going well.
The threat actors behind the BlackCat ransomware have shut down their darknet website and likely pulled an exit scam after uploading a bogus law enforcement seizure banner.
“ALPHV/BlackCat did not get seized. They are exit scamming their affi…
