ich glaube, da sollte man besser dran bleiben ....
Linux: Kritik, Gründe und Folgen der CVE-Schwemme im Kernel
Rund 55 pro Woche veröffentlichte Kernel-CVEs stellen auch die Größen der Linux-Branche vor Probleme – und nötigen zu mehr Zusammenarbeit und neuen Werkzeugen.
Source: https://arxiv.org/abs/2404.08144
To show this, we collected a dataset of 15 one-day vulnerabilities that include ones categorized as critical severity in the #CVE description. When given the CVE description, GPT-4 is capable of exploiting 87% of these vulnerabilities compared to 0% for every other model we test (GPT-3.5, open-source LLMs) and open-source vulnerability scanners (ZAP and #Metasploit).
#ai #technology #Software #chatgpt #bug #hack #news #cybersecurity
Since February 12, 2024, NIST has almost completely stopped enriching software vulnerabilities listed in its National Vulnerability Database (NVD), the world's most widely used software vulnerability database.
Source: https://www.infosecurity-magazine.com/news/nist-vulnerability-database/
#nvd #usa #security #software #problem #exploit #hack #bug #news #cybersecurity
Nearly 11M instances (by unique IP) found vulnerable (~52%).
Background on the #vulnerability: https://terrapin-attack.com
fedivers: https://infosec.exchange/@shadowserver/111691389140858555
#cve #network #internet #security #bug #cyberwar #software #terrapin #attack #danger #administration #update #patch #ssh
A new vulnerability has been discovered in Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system.
Apache OfBiz is used as a part of the software supply chain in Atlassian’s JIRA, which is predominantly used in several organizations. This vulnerability was a bypass to a previously discovered vulnerability, CVE-2023-49070.
Since the root issue of CVE-2023-49070 was left open, a bypass has been discovered as a workaround for the patch. This new vulnerability has been assigned with CVE-2023-51467, and the severity has been given as 9.8 (Critical).
CVE-2023-49070 was a pre-auth RCE vulnerability due to the presence of XML-RPC, which is no longer maintained. However, the released patch was only with removing XML RPC code from the application, which was open for an authentication bypass.
There were two test cases for exploiting this vulnerability—the first one involved including the requirePasswordChange=Y in the URI with empty USERNAME and PASSWORD parameters.
Due to the misconfiguration of the login condition block, the application resulted in the checkLogin function returning with a “success,” leading to the authentication bypass.
[
](https://twitter.com/hashtag/CVE?src=hash&ref_src=twsrc%5Etfw)
-2023-49070
Pre-auth RCE Apache Ofbiz 18.12.09
[
](https://twitter.com/hashtag/POC?src=hash&ref_src=twsrc%5Etfw)
:
/webtools/control/xmlrpc;/?USERNAME=&PASSWORD=s&requirePasswordChange=Y
Ref:
[
cc to me.
[
pic.twitter.com/SHOkhzlH09
— Siebene@ (@Siebene7)
[
December 5, 2023
](https://twitter.com/Siebene7/status/1731870759130427726?ref_src=twsrc%5Etfw)
The second test case was similar to the first one, with slightly changing parameters. The USERNAME and PASSWORD parameters are submitted with invalid values.
However, the checkLogin function flow did not enter into the conditional block, which resulted in the authentication being bypassed.
[
](https://twitter.com/hashtag/CVE?src=hash&ref_src=twsrc%5Etfw)
-2023-49070 Apache Ofbiz XML-RPC
[
](https://twitter.com/hashtag/RCE?src=hash&ref_src=twsrc%5Etfw)
Affected Versions: < 18.12.10
[
pic.twitter.com/9QfiCty04f
— M4rtin Hsu (@0xf4n9x)
[
December 6, 2023
](https://twitter.com/_0xf4n9x_/status/1732289811665559775?ref_src=twsrc%5Etfw)
This vulnerability has a publicly available exploit, which penetration testers and security engineers can use to test if the vulnerability exists on their application.
Furthermore, a complete report about this vulnerability has been published by SonicWall, providing detailed information about the code analysis, exploitation, and other information.
Apache OfBiz has fixed this vulnerability in version 18.12.11 and newer. Users of Apache OfBiz are recommended to upgrade to the latest version of this software to prevent this vulnerability from getting exploited by threat actors.
The post Critical Apache OfBiz Zero-Day Let Attackers Bypass Authentication appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
posted by pod_feeder
source: https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/
This is a story consisting of several little building blocks and they occurred spread out in time and in different places. It is a story that shows with clarity how our current #system with #CVE Ids and lots of power given to #NVD is a completely broken system.
source: https://unit42.paloaltonetworks.com/incident-response-report/
The 2021 Attack Surface Management Threat Report found that attackers typically start scanning for vulnerabilities within 15 minutes of a #CVE being announced.
#software #scan #vulnerability #bug #problem #security #hack #cybercrime #news #internet #danger #update #attack #technology
