Super interesting when a flaw quietly exists in software for more than 10 years, but I'm glad it was caught and patched. I threw together a script to identify and validate CVE-2024-36416, which I was issued the other week. The affected product is SuiteCRM. This is an open-source customer relationship management application available to everyone. Vulnerability research is imperative for code that is open to the public, and for this matter any product that has code. The script can be found on my GitHub https://lnkd.in/gT5gsfQp. #vulnerability #cve #security #patch
Elysee F.’s Post
More Relevant Posts
-
Huntress team on the detections quick! Info below 👇
Huntress now has detection guidance related to the ConnectWise #ScreenConnect vulnerability. Step 1: PATCH! Step 2: Look for signs of compromise. CC: Patrick Beggs https://bit.ly/3I5YrvT
-
Senior Technical Consulting Manager | HCLTech | Kuala Lumpur, Malaysia | Technical Assistance Center | PGPCS, MCA, B.Sc. | PSBB | Japanese Bilinguist | Neuro-linguistic Programming Practitioner, Thought Labs
Just finished OWASP Top 10: #7 Identification and Authentication Failures and #8 Software and Data Integrity Failures! Check it out: https://lnkd.in/gizdRHCs
Certificate of Completion
linkedin.com
-
Just finished OWASP Top 10: #7 Identification and Authentication Failures and #8 Software and Data Integrity Failures! #secureauthentication #identityandaccessmanagement #dataintegrity
Certificate of Completion
linkedin.com
-
Are software updates sometimes annoying and disruptive? Yes. Are they necessary? 100%! Software updates occur because an issue has been detected that could leave you vulnerable to an attack. Allowing the updates to occur will help patch your network and prevent you from being the next target of a hacker. If you want these to be as automated as possible, get in touch with our team! We can help make sure this happens for you. https://smpl.is/9b1pg #quicktechtip #lifehack #businesstip #BusinessKnowledgeSystems #ChicagoIT
-
-
🔥Medium Risk Vulnerability Alert🔥 Product: Open Forms. A potential authentication weakness has been identified in Open Forms versions prior to 2.2.9, 2.3.7, 2.4.5, and 2.5.2. If exploited, an attacker could bypass second-factor authentication. However, the exploitability is unclear and requires compromised superuser credentials. Stay safe and update your software! #OpenForms #AuthenticationWeakness #OWASP #API2 #CVE202424771 https://lnkd.in/ezKxZXhh
-
Cyber Security Professional || Tutor || UI/UX Designer (Turning your Beautiful Idea to Experience)
Despite the good practice of keeping systems and network supporting software up-to-date there is still always a blind spot. This blind spot is refer to as Zero Day. Meaning an unknown vulnerability (weakness) that is yet to be discovered or documented in which an attacker can exploits. Zero Day Attack should not be taken lightly as it can cause more damage than how subtle it may start.
-
-
CrushFTP Zero-Day Exploitation Due to CVE-2024-4040: Vulnerability Scope & Details CrushFTP disclosed a zero-day vulnerability in their software on April 19, 2024. The vulnerability is published on CVE-2024-4040. Affected versions: The CVSS score is 9.8. The vulnerability allows remote attackers to bypass the VFS sandbox and access files outside their designated limits without authentication. The vulnerability was exploited to do unauthenticated remote […]
CrushFTP Zero-Day Exploitation Due to CVE-2024-4040 | Qualys Security Blog
blog.qualys.com
-
Just finished the course “OWASP Top 10: #7 Identification and Authentication Failures and #8 Software and Data Integrity Failures” by Caroline Wong!#secureauthentication #identityandaccessmanagement #dataintegrity.
Certificate of Completion
linkedin.com
-
Just finished OWASP Top 10: #7 Identification and Authentication Failures and #8 Software and Data Integrity Failures! Check it out: https://lnkd.in/etkZ8tKa #secureauthentication #identityandaccessmanagement #dataintegrity
Certificate of Completion
linkedin.com
-
Flexera’s March Software Vulnerability Report is now available, and here are some key takeaways: - #NVDChallenges: The vulnerability community is abuzz with concerns over potential delays in vulnerability analysis at NVD - 1,073 total advisories this month, marking an increase from the last record of 1,055 and a 44% surge compared to Q1 2023 - Critical alerts: We've flagged 2 extremely critical advisories this month, doubling from last month's count 𝗗𝗼𝘄𝗻𝗹𝗼𝗮𝗱 𝗥𝗲𝗽𝗼𝗿𝘁 𝗡𝗼𝘄: https://lnkd.in/g2QpEKQv
Flexera Monthly Vulnerability Report
info.flexera.com