Tenable Blog چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۹:۲۵

Able2Shell: Frequently asked questions for reported N-able N-central zero-day vulnerabilities

N-able released a hotfix for N-central that fixes seven CVEs after a researcher published proof-of-concept code for 33 alleged zero-day vulnerabilities. The researcher says one attack chain needs no credentials.Key TakeawaysAble2Shell is a set of 33 alleged vulnerabilities in N-able N-central, published with proof-of-concept code. The researcher says one chain lets an unauthenticated attacker run commands on the serv…

آسیب‌پذیری و روز صفر هوش تهدید برنامه‌نویسی و زبان‌ها امنیت وب و نرم‌افزار امنیت هویت و دسترسی

خواندن متن کامل در Tenable Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

SecurityWeek چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۲:۳۱

Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

The flaws, CVE-2026-111793 and CVE-2026-20320, let attackers leak sensitive information, including configuration data. The post Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities appeared first on SecurityWeek.

آسیب‌پذیری و روز صفر نشت داده

منبع

CSO Online چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۲:۳۰

Why does old access outlive the job?

Old access persists beyond its intended purpose and most organizations never monitor it. New access rights arrive within a day of a request. Old rights get revoked, if they get revoked at all, only upon prompting someone. Tools that assist employees in confirming, rotating and vaulting their service accounts have taught me again and again that removing access has to be as thoughtful as granting access. Security profe…

آسیب‌پذیری و روز صفر نشت داده حریم خصوصی

منبع

SecurityWeek چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۲:۱۲

Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD

Intel and AMD disclose more than 200 vulnerabilities, including critical flaws in Intel TDX software and numerous AMD graphics bugs. The post Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD appeared first on SecurityWeek.

آسیب‌پذیری و روز صفر

منبع

Ubuntu Security Notices چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۵۷

USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی توسعه موبایل

منبع