Apr 8, 2025
2 new incidents, 1 with updates.
Started
- ClosedPatched
Gladinet CentreStack: CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution. Added to CISA KEV on 2025-04-08.
Gladinet CentreStackClosed Apr 8, 2025
- ClosedPatched
Microsoft Windows: Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. Added to CISA KEV on 2025-04-08.
Microsoft WindowsClosed Apr 8, 2025
Updated
- ClosedHighNo fix needed
Oracle Cloud login servers breached: ~6M SSO/LDAP records offered for sale
A hacker using the name rose87168 claimed in March 2025 to have stolen about 6 million SSO and LDAP records from Oracle Cloud login servers. Oracle first denied an OCI breach, then told customers privately that two obsolete servers (reportedly Oracle Cloud Classic / Gen 1) were accessed, exposing usernames and hashed or encrypted passwords.
Oracle Cloud Classic (Gen 1) login/IDM serversClosed Apr 8, 2025
