Nov 7, 2024
2 new incidents, 2 with updates.
Started
- ClosedPatched
Nostromo nhttpd Directory Traversal
Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for remote code execution. Added to the CISA KEV catalog on 2024-11-07. CVE-2019-16278 was assigned before 2024; the KEV listing came in 2024.
Nostromo nhttpdClosed Nov 7, 2024
- ClosedPatched
Android Framework Privilege Escalation
Android Framework contains an unspecified vulnerability that allows for privilege escalation. Added to the CISA KEV catalog on 2024-11-07.
Android FrameworkClosed Nov 7, 2024
Updated
- ClosedPatched
CyberPersons CyberPanel: 2 actively exploited vulnerabilities
CVE-2024-51567: CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root. CVE-2024-51378: CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property. Added to the CISA KEV catalog on 2024-11-07, 2024-12-04. CISA lists known use in ransomware campaigns.
CyberPersons CyberPanelClosed Dec 4, 2024
- ClosedPatched
Palo Alto Networks Expedition: 3 actively exploited vulnerabilities
CVE-2024-5910: Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data. CVE-2024-9463: Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. CVE-2024-9465: Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system. Added to the CISA KEV catalog on 2024-11-07, 2024-11-14.
Palo Alto Networks ExpeditionClosed Nov 14, 2024
