Tenable Blog چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۹:۲۵

Able2Shell: Frequently asked questions for reported N-able N-central zero-day vulnerabilities

N-able released a hotfix for N-central that fixes seven CVEs after a researcher published proof-of-concept code for 33 alleged zero-day vulnerabilities. The researcher says one attack chain needs no credentials.Key TakeawaysAble2Shell is a set of 33 alleged vulnerabilities in N-able N-central, published with proof-of-concept code. The researcher says one chain lets an unauthenticated attacker run commands on the serv…

آسیب‌پذیری و روز صفر هوش تهدید برنامه‌نویسی و زبان‌ها امنیت وب و نرم‌افزار امنیت هویت و دسترسی

خواندن متن کامل در Tenable Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Ubuntu Security Notices چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۵۷

USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی توسعه موبایل

منبع

CSO Online چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۵۵

What will it take to make VulnOps a reality?

Just over a year ago, before advanced AI models began discovering software vulnerabilities at a nearly unmanageable scale in the so-called vulnpocalypse, three industry experts pioneered the concept of “VulnOps.” VulnOps, as envisioned by Heather Adkins, Gadi Evron, and Bruce Schneier, is a significant phase in the evolution of AI-assisted cyber defense in which vulnerability research and remediation would become sca…

آسیب‌پذیری و روز صفر امنیت ابری امنیت هوش مصنوعی

منبع

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۴۷

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.

آسیب‌پذیری و روز صفر پایگاه داده سیستم‌عامل

منبع

NCSC Netherlands چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۴۲

NCSC-2026-0478 [1.00] [M/H] Kwetsbaarheden verholpen in N-able N-central

N-able heeft meerdere kwetsbaarheden verholpen in N-able N-central. Deze kwetsbaarheden treffen versies ouder dan 2026.4.1.26. Er meerdere kwetsbaarheden met betrekking tot XML External Entity (XXE), waardoor de verwerking van XML-data mogelijk op ongewenste wijze kan worden beïnvloed. Daarnaast zijn er kwetsbaarheden in de vorm van OGNL Injection en Stored Cross-Site Scripting (XSS), waarbij kwaadaardige code kan wo…

امنیت وب و نرم‌افزار

منبع