SecPod Community Forums Topics

Viewing 15 topics - 16 through 30 (of 97 total)
    • Topic
    • Voices
    • Posts
    • Last Post
    • Mac Updates Having issues with Mac updates, OS and Adobe in general. Anyone else having issues? Adobe updates keep failing, Mac OS updates seem like they never update until I get on a computer and manually tell it to update or restart. Adobe just keep failing, I then have to manually open adobe go to Help, then...Having issues with Mac updates, OS and Adobe in general. Anyone else having issues? Adobe updates keep failing, Mac OS updates seem like they never update until I get on a computer and manually tell it to update or restart. Adobe just keep failing, I then have to manually open adobe go to Help, then...

      Started by: SixAxis in: Ask an Expert

    • 2
    • 2
    • SixAxis

    • Macbook HostName Best practice for Macbook hosts: Scenarios: If your MacBook hostname is represented as an IP number other than a name, please ensure that you have set the Hostname, local Host Name, and ComputerName correctly. You can use the below commands: You can run all three at a time Note: Here I have taken ...Best practice for Macbook hosts: Scenarios: If your MacBook hostname is represented as an IP number other than a name, please ensure that you have set the Hostname, local Host Name, and ComputerName correctly. You can use the below commands: You can run all three at a time Note: Here I have taken ...

      Started by: lingaraj in: Ask an Expert

    • 2
    • 2
    • lingaraj

    • SecPod Cyber Bulletin 32nd Issue 1. Windows Zero-Days and Firefox Issues The RomCom group has been exploiting zero-day vulnerabilities (CVE-2024-9680 and CVE-2024-49039) in Windows and Firefox, emphasizing the need for continuous monitoring and timely updates. CVSS Score: 9.8,8.8 2. Critical Flaw Detected in ProjectSend A criti...1. Windows Zero-Days and Firefox Issues The RomCom group has been exploiting zero-day vulnerabilities (CVE-2024-9680 and CVE-2024-49039) in Windows and Firefox, emphasizing the need for continuous monitoring and timely updates. CVSS Score: 9.8,8.8 2. Critical Flaw Detected in ProjectSend A criti...

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • CVE-2024-45710 : SolarWinds Uncontrolled Path Element Escalation Vulnerability SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low-privilege account and local access to the affected node machine. CVSS SCORE: 7.8 (HIGH)SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low-privilege account and local access to the affected node machine. CVSS SCORE: 7.8 (HIGH)

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • CVE-2024-9486 : Kubernetes Image Builder Security Vulnerability Some Kubernetes Image Builder versions have a security vulnerability where default credentials remain active, potentially allowing root access in clusters using VM images from the Proxmox provider. CVSS SCORE : 9.8 (Critical)Some Kubernetes Image Builder versions have a security vulnerability where default credentials remain active, potentially allowing root access in clusters using VM images from the Proxmox provider. CVSS SCORE : 9.8 (Critical)

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • CVE-2024-52799 : Argo Workflow Charts Vulnerability Prior to Argo Workflows 0.44.0, the workflow-role granted excessive privileges, including pod/exec creation, enabling arbitrary code execution. This vulnerability was fixed in version 0.44.0, affecting Helm Chart users. CVSS SCORE: 8.3Prior to Argo Workflows 0.44.0, the workflow-role granted excessive privileges, including pod/exec creation, enabling arbitrary code execution. This vulnerability was fixed in version 0.44.0, affecting Helm Chart users. CVSS SCORE: 8.3

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • CVE-2024-53912 : Veritas Enterprise Vault Vulnerability A #vulnerability in Veritas Enterprise Vault (before 15.2), ZDI-CAN-24341, allows remote attackers to execute arbitrary code via deserialization of untrusted data on a .NET Remoting TCP port. CVSS SCORE: 9.8(CRITICAL)A #vulnerability in Veritas Enterprise Vault (before 15.2), ZDI-CAN-24341, allows remote attackers to execute arbitrary code via deserialization of untrusted data on a .NET Remoting TCP port. CVSS SCORE: 9.8(CRITICAL)

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • CVE-2024-53674 : HPE Insight Remote Support Vulnerability An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. CVSS SCORE: 7.3 (HIGH)An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. CVSS SCORE: 7.3 (HIGH)

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • CVE-2024-11789 : Fuji Electric Vulnerability The Fuji Electric Monitouch V-SFT V10 contains a stack-based buffer overflow #vulnerability (ZDI-CAN-24448) in the parsing of V10 files, allowing remote code execution. CVSS SCORE: 7.8 (HIGH)The Fuji Electric Monitouch V-SFT V10 contains a stack-based buffer overflow #vulnerability (ZDI-CAN-24448) in the parsing of V10 files, allowing remote code execution. CVSS SCORE: 7.8 (HIGH)

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • CVE-2024-9852 The Uncontrolled Search Path Element vulnerability in ICONICS GENESIS64, Mitsubishi Electric GENESIS64, and MC Works64 allows local authenticated attackers to execute malicious code, potentially leading to data loss or DoS. CVSS SCORE: 7.8 (HIGH)The Uncontrolled Search Path Element vulnerability in ICONICS GENESIS64, Mitsubishi Electric GENESIS64, and MC Works64 allows local authenticated attackers to execute malicious code, potentially leading to data loss or DoS. CVSS SCORE: 7.8 (HIGH)

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • SecPod Cyber Bulletin 31st Issue SecPod Cyber Bulletin 31st Issue Dell Enterprise SONiC Vulnerabilities Dell Technologies has disclosed three critical security vulnerabilities (CVE-2024-45763, CVE-2024-45764, and CVE-2024-45765) affecting its Enterprise SONiC (Software for Open Networking in the Cloud) operating system. CVSS Scor...SecPod Cyber Bulletin 31st Issue Dell Enterprise SONiC Vulnerabilities Dell Technologies has disclosed three critical security vulnerabilities (CVE-2024-45763, CVE-2024-45764, and CVE-2024-45765) affecting its Enterprise SONiC (Software for Open Networking in the Cloud) operating system. CVSS Scor...

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • SecPod Cyber Bulletin 29th Issue Apple VisionOS 2.1 Security Vulnerabilities Apple’s VisionOS 2.1 has been found to contain several critical vulnerabilities (CVE-2024-44255 and CVE-2024-44273) that could allow attackers to exploit the system. CVSS Score: 7.8, 8.4 Chrome Security: Out-of-Bounds WebRTC Vulnerability Google Chrome’...Apple VisionOS 2.1 Security Vulnerabilities Apple’s VisionOS 2.1 has been found to contain several critical vulnerabilities (CVE-2024-44255 and CVE-2024-44273) that could allow attackers to exploit the system. CVSS Score: 7.8, 8.4 Chrome Security: Out-of-Bounds WebRTC Vulnerability Google Chrome’...

      Started by: Bhuvan Srikanta in:

    • 1
    • 1
    • Bhuvan Srikanta

    • SecPod CyberBulletin 29th Issue Apple VisionOS 2.1 Security Vulnerabilities Apple’s VisionOS 2.1 has been found to contain several critical vulnerabilities (CVE-2024-44255 and CVE-2024-44273) that could allow attackers to exploit the system. CVSS Score: 7.8, 8.4 Chrome Security: Out-of-Bounds WebRTC Vulnerability Google Chrome’...Apple VisionOS 2.1 Security Vulnerabilities Apple’s VisionOS 2.1 has been found to contain several critical vulnerabilities (CVE-2024-44255 and CVE-2024-44273) that could allow attackers to exploit the system. CVSS Score: 7.8, 8.4 Chrome Security: Out-of-Bounds WebRTC Vulnerability Google Chrome’...

      Started by: Bhuvan Srikanta in: Security Intelligence

    • 1
    • 1
    • Bhuvan Srikanta

    • License And how is the process if a customer is in need of a larger license?And how is the process if a customer is in need of a larger license?

      Started by: Samhith in:

    • 2
    • 2
    • Samhith

Viewing 15 topics - 16 through 30 (of 97 total)