CVE-2024-42327: SQL Injection in Zabbix, 9.9 rating 🔥
The discovered vulnerability allows any Zabbix user to perform Privilege Escalation via SQL injection.
Search at Netlas.io:
👉 Link: https://nt.ls/qH7Ao
👉 Dork: http.favicon.hash_sha256:22b06a141c425c92951056805f46691c4cd8e7547ed90b8836a282950d4b4be2
Vendor's advisory: https://support.zabbix.com/browse/ZBX-25623
The discovered vulnerability allows any Zabbix user to perform Privilege Escalation via SQL injection.
Search at Netlas.io:
👉 Link: https://nt.ls/qH7Ao
👉 Dork: http.favicon.hash_sha256:22b06a141c425c92951056805f46691c4cd8e7547ed90b8836a282950d4b4be2
Vendor's advisory: https://support.zabbix.com/browse/ZBX-25623
1🔥4👾4👏1
CVE-2024-11667: Directory Traversal in Zyxel Firewalls, 7.3 rating❗️
A vulnerability in the web interface of some firewalls allows an attacker to download or upload files using a special URL.
Search at Netlas.io:
👉 Link: https://nt.ls/agozE
👉 Dork: http.favicon.hash_sha256:9a02f3cf948f9409c25070f2f057b69dda5d0aaf7fa8d056552e8bda8295ca1f
Vendor's advisory: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024
A vulnerability in the web interface of some firewalls allows an attacker to download or upload files using a special URL.
Search at Netlas.io:
👉 Link: https://nt.ls/agozE
👉 Dork: http.favicon.hash_sha256:9a02f3cf948f9409c25070f2f057b69dda5d0aaf7fa8d056552e8bda8295ca1f
Vendor's advisory: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024
👾4👍3🔥2
CVE-2024-8672: Code Injection in Widget Options WordPress Plugin, 9.9 rating 🔥
The vulnerability allows an attacker to enter data that is transmitted without proper filtering. This could potentially lead to remote code execution.
Search at Netlas.io:
👉 Link: https://nt.ls/xOEZp
👉 Dork: http.body:"plugins/widget-options"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/widget-options/widget-options-the-1-wordpress-widget-block-control-plugin-407-authenticated-contributor-remote-code-execution
The vulnerability allows an attacker to enter data that is transmitted without proper filtering. This could potentially lead to remote code execution.
Search at Netlas.io:
👉 Link: https://nt.ls/xOEZp
👉 Dork: http.body:"plugins/widget-options"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/widget-options/widget-options-the-1-wordpress-widget-block-control-plugin-407-authenticated-contributor-remote-code-execution
🔥5👾4
🚨 Netlas is down due to issues with a planned update. We’re rolling back and working to restore service ASAP. Apologies for the inconvenience—updates to follow.
💔2
✅ Netlas is back online, and all services are operational.
However, our team is continuing to monitor the system and address any lingering issues to ensure full stability. We apologize for the disruption and thank you for your patience and understanding.
However, our team is continuing to monitor the system and address any lingering issues to ensure full stability. We apologize for the disruption and thank you for your patience and understanding.
❤2👍2
⚠️ Private Scanner Temporarily Unavailable
Since yesterday, we’ve been addressing technical issues affecting parts of our infrastructure. Most Netlas App features were fully restored within an hour after an incident and are now working smoothly. However, the Private Scanner feature remains temporarily disabled.
Our team is working diligently to fully restore our scanning infrastructure and will update you as soon as the feature is back online. We sincerely apologize for the inconvenience this has caused and deeply appreciate your patience and understanding.
Since yesterday, we’ve been addressing technical issues affecting parts of our infrastructure. Most Netlas App features were fully restored within an hour after an incident and are now working smoothly. However, the Private Scanner feature remains temporarily disabled.
Our team is working diligently to fully restore our scanning infrastructure and will update you as soon as the feature is back online. We sincerely apologize for the inconvenience this has caused and deeply appreciate your patience and understanding.
💊5🙈2👍1
CVE-2024-48651: Vulnerability in ProFTPD Server, 7.5 rating❗️
A bug discovered a few days ago allows attackers to gain root level access on vulnerable systems.
Search at Netlas.io:
👉 Link: https://nt.ls/eKpeY
👉 Dork: ftp.banner:"ProFTPD"
Read more: https://github.com/proftpd/proftpd/issues/1830
A bug discovered a few days ago allows attackers to gain root level access on vulnerable systems.
Search at Netlas.io:
👉 Link: https://nt.ls/eKpeY
👉 Dork: ftp.banner:"ProFTPD"
Read more: https://github.com/proftpd/proftpd/issues/1830
👍3🔥3👾2❤1
CVE-2024-53907, -53908: DoS and SCLi in Django, high rating❗️
Some versions of Django are susceptible to vulnerabilities in the django.utils.html.strip_tags() and in the lookup django.db.models.fields.json.HasKey method, which allow DoS or SQL injection.
Search at Netlas.io:
👉 Link: https://nt.ls/VbueR
👉 Dork: tag.name:"django"
Vendor's advisory: https://www.djangoproject.com/weblog/2024/dec/04/security-releases/
Some versions of Django are susceptible to vulnerabilities in the django.utils.html.strip_tags() and in the lookup django.db.models.fields.json.HasKey method, which allow DoS or SQL injection.
Search at Netlas.io:
👉 Link: https://nt.ls/VbueR
👉 Dork: tag.name:"django"
Vendor's advisory: https://www.djangoproject.com/weblog/2024/dec/04/security-releases/
🔥4👾4😱1
CVE-2024-55579, -55580: RCE and Broken Access Control in Qlik Sense, 7.5 - 8.8 rating❗️
Vulnerabilities discovered in Qlik Sense allow attackers to run EXE files on the server, as well as remotely execute commands, potentially affecting confidentiality and integrity.
Search at Netlas.io:
👉 Link: https://nt.ls/9ok2E
👉 Dork: http.noscript:"Qlik Sense"
Vendor's advisory: https://community.qlik.com/t5/Official-Support-Articles/High-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows-CVEs/tac-p/2496004
Vulnerabilities discovered in Qlik Sense allow attackers to run EXE files on the server, as well as remotely execute commands, potentially affecting confidentiality and integrity.
Search at Netlas.io:
👉 Link: https://nt.ls/9ok2E
👉 Dork: http.noscript:"Qlik Sense"
Vendor's advisory: https://community.qlik.com/t5/Official-Support-Articles/High-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows-CVEs/tac-p/2496004
🔥3👾3
✅ Private Scanner Restored
We’re happy to share that the Private Scanner feature is now fully restored and operational.
Thank you for your patience and understanding. All systems are working fine—happy scanning!
We’re happy to share that the Private Scanner feature is now fully restored and operational.
Thank you for your patience and understanding. All systems are working fine—happy scanning!
🔥3👍2
CVE-2024-11205: Missing Authorization in WPForms WordPress Plugin, 8.5 rating❗️
A vulnerability affecting several functions allows attackers to return payments made through the Stripe system.
Search at Netlas.io:
👉 Link: https://nt.ls/tFWxo
👉 Dork: http.body:"plugins/wpforms-lite"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpforms-lite/wpforms-184-1921-missing-authorization-to-authenticated-subscriber-payment-refund-and-subnoscription-cancellation
A vulnerability affecting several functions allows attackers to return payments made through the Stripe system.
Search at Netlas.io:
👉 Link: https://nt.ls/tFWxo
👉 Dork: http.body:"plugins/wpforms-lite"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpforms-lite/wpforms-184-1921-missing-authorization-to-authenticated-subscriber-payment-refund-and-subnoscription-cancellation
👍3👾3🔥2
CVE-2024-49106 and other: Multiple vulnerabilities in Microsoft RDP Services, 8.1 rating❗️
In the latest advisories, Microsoft notifies about nine vulnerabilities in RDP protocol services. These include many RCEs as well as DoS.
Search at Netlas.io:
👉 Link: https://nt.ls/cfRLq
👉 Dork: rdp:*
Vendor's advisory: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-49106
In the latest advisories, Microsoft notifies about nine vulnerabilities in RDP protocol services. These include many RCEs as well as DoS.
Search at Netlas.io:
👉 Link: https://nt.ls/cfRLq
👉 Dork: rdp:*
Vendor's advisory: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-49106
🔥3👾3👍1
CVE-2024-11274, -8233, other: Multiple vulnerabilities in GitLab, 7.5 - 8.7 rating❗
In a new release, GitLab talked about two important vulnerabilities. One of them allows attacker to carry out DoS, the second allows to steal session data and potentially gain unauthorized access to accounts. Several smaller vulnerabilities are also mentioned.
Search at Netlas.io:
👉 Link: https://nt.ls/xM1vs
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"
Vendor's advisory: https://about.gitlab.com/releases/2024/12/11/patch-release-gitlab-17-6-2-released/
In a new release, GitLab talked about two important vulnerabilities. One of them allows attacker to carry out DoS, the second allows to steal session data and potentially gain unauthorized access to accounts. Several smaller vulnerabilities are also mentioned.
Search at Netlas.io:
👉 Link: https://nt.ls/xM1vs
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"
Vendor's advisory: https://about.gitlab.com/releases/2024/12/11/patch-release-gitlab-17-6-2-released/
👍3🔥3👾3
CVE-2024-38819: Path Traversal in Spring Framework, 7.5 rating❗️
Another Path Traversal vulnerability in the Spring framework. This time there is even a PoC!
Search at Netlas.io:
👉 Link: https://nt.ls/AzCtg
👉 Dork: tag.name:"spring"
Vendor's advisory: https://spring.io/security/cve-2024-38819
Another Path Traversal vulnerability in the Spring framework. This time there is even a PoC!
Search at Netlas.io:
👉 Link: https://nt.ls/AzCtg
👉 Dork: tag.name:"spring"
Vendor's advisory: https://spring.io/security/cve-2024-38819
👍4🔥2👾1
Private Scanner API Documentation 📑
We’ve updated the Netlas documentation with a significant addition: a detailed guide on using the Private Scanner API.
👉 Read the docs: https://docs.netlas.io/automation/scanner_api/
We’ve updated the Netlas documentation with a significant addition: a detailed guide on using the Private Scanner API.
👉 Read the docs: https://docs.netlas.io/automation/scanner_api/
👍4👾3
CVE-2024-50379, -54677: RCE and DoS in Apache Tomcat, 5.3 - 9.8 rating 🔥
New vulnerabilities allow attackers to upload and execute malicious files disguised as legitimate ones, as well as cause OutOfMemoryError to shut down the server.
Search at Netlas.io:
👉 Link: https://nt.ls/WHRGO
👉 Dork: http.favicon.hash_sha256:64a3170a912786e9eece7e347b58f36471cb9d0bc790697b216c61050e6b1f08 OR http.headers.server:"Apache-Coyote"
Read more: https://lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r
New vulnerabilities allow attackers to upload and execute malicious files disguised as legitimate ones, as well as cause OutOfMemoryError to shut down the server.
Search at Netlas.io:
👉 Link: https://nt.ls/WHRGO
👉 Dork: http.favicon.hash_sha256:64a3170a912786e9eece7e347b58f36471cb9d0bc790697b216c61050e6b1f08 OR http.headers.server:"Apache-Coyote"
Read more: https://lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r
🔥5👾3
🚧 Cryptopayments Temporarily Unavailable
Due to a system failure, we’re resynchronizing our nodes. Bitcoin payments are expected to restore in 12 hours, while Litecoin payments may take up to 48 hours.
Sorry for any inconvenience.
Due to a system failure, we’re resynchronizing our nodes. Bitcoin payments are expected to restore in 12 hours, while Litecoin payments may take up to 48 hours.
Sorry for any inconvenience.
💊5
CVE-2024-51479: Improper Authorization in Next.js, 7.5 rating❗️
The vulnerability allows attackers to access files in the root directory of the application when Next.js is authorized in the middleware.
Search at Netlas.io:
👉 Link: https://nt.ls/1jTTw
👉 Dork: http.headers.x_powered_by:"Next.js"
Vendor's advisory: https://github.com/vercel/next.js/security/advisories/GHSA-7gfc-8cq8-jh5f
The vulnerability allows attackers to access files in the root directory of the application when Next.js is authorized in the middleware.
Search at Netlas.io:
👉 Link: https://nt.ls/1jTTw
👉 Dork: http.headers.x_powered_by:"Next.js"
Vendor's advisory: https://github.com/vercel/next.js/security/advisories/GHSA-7gfc-8cq8-jh5f
👾4🔥3👍1
CVE-2024-12727, -28, -29: Multiple vulnerabilties in Sophos Firewall, 8.8 - 9.8 rating 🔥
The disclosed vulnerabilities in Sophos Firewall include two SQL injections, as well as a weak SSH passphrase, which was not chosen at random.
Search at Netlas.io:
👉 Link: https://nt.ls/yyWUE
👉 Dork: http.favicon.hash_sha256:f1b3895ca4ba5ef27244a9a7cd45fad7d05afb261f08f375ee4d0bd7008f87d5
Vendor's advisory: https://www.sophos.com/en-us/security-advisories/sophos-sa-20241219-sfos-rce
The disclosed vulnerabilities in Sophos Firewall include two SQL injections, as well as a weak SSH passphrase, which was not chosen at random.
Search at Netlas.io:
👉 Link: https://nt.ls/yyWUE
👉 Dork: http.favicon.hash_sha256:f1b3895ca4ba5ef27244a9a7cd45fad7d05afb261f08f375ee4d0bd7008f87d5
Vendor's advisory: https://www.sophos.com/en-us/security-advisories/sophos-sa-20241219-sfos-rce
🔥5👾4
Netlas Datastore from Command Line 🔍
Netlas SDK and Netlas CLI have been updated today. Now users can download datasets directly from their noscripts.
👉 Read more: https://docs.netlas.io/changelog/
Netlas SDK and Netlas CLI have been updated today. Now users can download datasets directly from their noscripts.
👉 Read more: https://docs.netlas.io/changelog/
docs.netlas.io
Changelog - Netlas Docs
Explore the latest updates, enhancements, and fixes on the Netlas platform. Stay informed with our Changelog for all product and feature developments.
👍3🔥3