National CSIRT-CY | National Computer Security Incident Response Team of Cyprus

The Digital Security Authority (DSA) wants to bring to your attention a vulnerability affecting a VMware product.

The Digital Security Authority (DSA) wants to bring to your attention an Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16, FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allowing a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Στις 10 Δεκεμβρίου 2024, ο Yuki Chen (@guhe120) ανακάλυψε δύο ευπάθειες LDAP: μία εκτέλεση απομακρυσμένου κώδικα (RCE) και μία ευπάθεια Άρνησης Παροχής Υπηρεσιών (DoS)/Διαρροής Πληροφοριών. 

The Digital Security Authority (DSA) wants to bring to your attention, a critical vulnerability (CVE-2024-11477) in 7-Zip that allows attackers to execute malicious code simply by decompressing a zip file.