Tags → #remote code execution

Vulnerabilities
Investigation Reveals SSTI Vulnerabilities in FreeMarker Engine
Nov 22, 2024 Sayaan Alam, a member of the Synack Red Team, has investigated Server-Side Template Injection vulnerabilities in the FreeMarker template engine, revealing potential security risks associated with user input rendering in Java applications.
Vulnerabilities
Study Identifies Vulnerabilities in LLM-Integrated Frameworks
Nov 21, 2024 A recent study introduced LLMSmith, a tool designed to detect and exploit Remote Code Execution vulnerabilities in Large Language Model-integrated frameworks and applications, highlighting significant security concerns in this area.
Vulnerabilities
Microsoft Releases November Security Update Addressing 89 Vulnerabilities
Nov 12, 2024 Microsoft's November security update addresses 89 vulnerabilities, including four zero-day flaws, with a focus on remote code execution issues and recommendations for mitigating risks.
Vulnerabilities
Microsoft Outlook Vulnerabilities Raise Concerns Over Remote Code Execution
Nov 11, 2024 Recent vulnerabilities in Microsoft Outlook, including CVE-2024-21378 and CVE-2024-30103, have raised concerns about remote code execution and NTLM credential leaks, prompting discussions on their implications and the need for enhanced security measures.
Vulnerabilities
Analysis of macOS Sandbox Vulnerabilities and Security Concerns
Nov 9, 2024 An analysis of macOS security vulnerabilities reveals concerns about the limitations of the operating system's sandbox environment and highlights several newly discovered sandbox escape vulnerabilities.
Vulnerabilities
Veeam Backup Vulnerability Exploited in Ransomware Attacks
Nov 9, 2024 A security vulnerability in Veeam Backup & Replication, identified as CVE-2024-40711, has been exploited in ransomware attacks by various groups, allowing unauthorized remote code execution on affected servers.