The Watch The Butcher, the Chef, and the Swordsman OnlineU.S. Cybersecurity and Infrastructure Security Agency (CISA) has just added new exploits to its actively exploited list, as first noticed by BleepingComputer.
CISA's actions basically serve as a warning to U.S. federal agencies about vulnerabilities currently being exploited in the wild.
One exploit being tracked, CVE-2023-20118, allows hackers to remotely "execute arbitrary commands" on certain VPN routers. These routers include Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325.
"An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface," CISA wrote. "A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data."
In order to take advantage of this exploit, an attacker would need admin credentials. However, as BleepingComputer points out, hackers could take advantage of another vulnerability, CVE-2023-20025, in order to bypass authentication.
Another vulnerability added by CISA is CVE-2018-8639. This bug affects a broad swath of Windows operating systems including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers.
According to CISA, this vulnerability "exists in Windows when the Win32k component fails to properly handle objects in memory." A bad actor with local access to the vulnerable system can utilize the exploit to run arbitrary code in kernel mode. BleepingComputer reports that a bad actor could use this vulnerability to "alter data or create rogue accounts with full user rights to take over vulnerable Windows devices."
Microsoft and Cisco have not yet released their own security warning regarding these two exploits.
Topics Cybersecurity
(Editor: {typename type="name"/})
Even Trump's Earth Day message was anti
Mondo's first Fantastic Four release has posters, pins, and a slipmat
Stare at these pictures of Beyoncé on Easter until you find hints about her twins
Stare at these pictures of Beyoncé on Easter until you find hints about her twins
The Best CPU & GPU Purchases of 2017
TL;DR:A wide range of ChatGPT courses are available to take for free on Udemy. Udemy is arguably the
...[Details]
Still no MacBook touchscreens. But Apple might make an iPad keyboard with a trackpad.
If you have an iPad, it might basically be a MacBook by the end of 2020.A new report from The Inform
...[Details]
SETI no longer needs your idle computer to search for alien life
It's always nice to feel useful, even if not much comes of it in the end. The millions of people who
...[Details]
Google is adding icons to let you know where image search results come from
Google image searching is about to get slightly less annoying. Emphasis on slightly.The search engin
...[Details]
In Paris Agreement speech, Trump never acknowledged the reality of global warming
As a candidate, Donald Trump said climate change was a hoax, and made fun of Democrats who ranked it
...[Details]
Oppo Reno3 Pro launches with dual 44
Oppo's Reno smartphones used to be about zoom. Or fast charging. But the latest phone in the lineup,
...[Details]
This woman's outraged response to the general election has gone gloriously viral
When it comes to politics, British people agree on very, very little.But there's one thing they do a
...[Details]
Here's how Kevin from 'The Office' is celebrating National Chili Day
If you think of Kevin Malone from The Officeevery time you see a giant pot of chili, you're not alon
...[Details]
Best Amazon deal: Save 20% on floral and botanical Lego sets
SAVE 20%:Amazon has several Lego floral bouquets and botanical sets on sale, the perfect gift for yo
...[Details]
Amazon is closing in on Flipkart in India, one metric at a time
Amazon’s big $5 billion bet in India might be enough for the company to win the country’
...[Details]
AC Milan vs. Feyenoord 2025 livestream: Watch Champions League for free
Uber and Lyft have coronavirus tips for drivers, but not health insurance or paid sick days
接受PR>=1、BR>=1，流量相当，内容相关类链接。