Cisco Security Advisories پنجشنبه ۷ آبان ۱۴۰۵ · ۰۱:۲۴

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mec…

آسیب‌پذیری و روز صفر امنیت هویت و دسترسی

خواندن متن کامل در Cisco Security Advisories درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Tenable Blog جمعه ۸ آبان ۱۴۰۵ · ۰۵:۱۲

php2shell one week later: Why one exploit doesn’t work everywhere

php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the exception: one tuned exploit can reach every device that runs it.Key takeawaysThe five vulnerable PHP sites we exposed to the internet were not compromised, and public proofs-of-concept (PoCs…

آسیب‌پذیری و روز صفر امنیت ابری هوش تهدید

منبع

CSO Online جمعه ۸ آبان ۱۴۰۵ · ۰۴:۲۵

PHP2Shell plus Fragnesia: A dangerous new route from web server to root

The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high severity Linux kernel privilege escalation flaw that attackers are chaining with PHP2Shell bugs in the wild. Identified as CVE-2026-46300, it could allow attackers to run malicious code…

بدافزار و آلودگی آسیب‌پذیری و روز صفر نشت داده

منبع

CSO Online جمعه ۸ آبان ۱۴۰۵ · ۰۳:۴۰

A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructure

In a deep dive into the Silent Train attack tactic used by China’s Volt Typhoon cybercrime group, Lumen’s Black Lotus Labs highlighted evidence of efforts to pre-position access within what it described as “strategic communications, critical infrastructure and other ecosystems that become essential during geopolitical tensions or crises.” The report, released on Wednesday, said that Silent Train is built around “rapi…

بدافزار و آلودگی آسیب‌پذیری و روز صفر بات‌نت و DDoS

منبع

Wordfence Blog جمعه ۸ آبان ۱۴۰۵ · ۰۱:۲۸

WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release

TL;DR: WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an unauthenticated race condition in the Core update process that can lead to remote code execution. Threat actors are already actively attempting to exploit it, so site owners should verify that WordPress ...Read More The post WordPress 7.1.4 Patches Unauthenticated…

آسیب‌پذیری و روز صفر

منبع