May 29, 2024
1 new incident, 2 with updates.
Started
- ClosedPatched
Progress Telerik Report Server Authentication Bypass by Spoofing
Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access. Added to the CISA KEV catalog on 2024-06-13.
Progress Telerik Report ServerClosed Jun 13, 2024
Updated
- ClosedPatched
Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code
Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server. Added to the CISA KEV catalog on 2024-05-29.
Justice AV Solutions ViewerClosed May 29, 2024
- ClosedPatched
xz-utils backdoor (CVE-2024-3094)
A maintainer persona, 'Jia Tan', slipped a backdoor into the release tarballs of XZ Utils 5.6.0 and 5.6.1. Through liblzma it targeted OpenSSH's sshd on distributions that link sshd against libsystemd, so a key holder could get unauthenticated remote code execution. Andres Freund spotted it after noticing SSH logins using a lot of CPU on Debian sid. It reached only bleeding-edge distributions such as Fedora 41/Rawhide and Debian unstable before it was caught.
XZ Utils (liblzma)Closed May 29, 2024
