Cyber999 Advisories

Categories and Sub-categories of Incidents

Apr

May

June

Denial of Service

Denial of Service – DoS

0

3

4

Fraud

Fraud -- Bogus Email

17

18

21

Fraud – Business Email Compromise

0

2

1

Fraud – Fraud Site

15

12

13

Fraud – Impersonation & Spoofing

94

123

124

Fraud – Job Scam

18

22

17

Fraud – Love/Parcel Scam

2

4

3

Fraud -- Phishing

366

362

399

Vulnerabilities Report

Vulnerabilities Report – Misconfiguration Information Disclosure

5

2

2

Vulnerabilities Report -- System

0

1

0

Vulnerabilities Report -- Web

2

0

3

Intrusion

Intrusion – Account Compromise

34

37

57

Intrusion -- Defacement

2

4

2

Intrusion Attempt

Intrusion Attempt – Login Brute Force

9

16

7

Intrusion Attempt – Port Scanning

0

0

0

Intrusion Attempt – Vulnerability Probes

20

14

23

Malicious Codes

Malicious Codes – Botnet C&C

1

2

0

Malicious Codes – Malware

12

11

14

Malicious Codes – Malware Hosting

1

0

8

Content Related 

Content Related – Data Breach

33

33

37

Spam

3

14

9

TOTAL

634

680

744

Top Fraud incidents

Number of Incidents

Phishing

1127

Impersonation and Spoofing

341

Bogus Email

56

Fraudulent Website

40

Job Scam

57

Business Email compromised – BEC scam

3

Love and parcel scam

9

Types of Malicious APK

Total

yanxiu-new-BZN8iyonE57waHIT.apk

1

Wedding Invitation APK

2

1

JobExpress APK

1

Cleaning APK

2

NA (Not identified specific name of the APK)

6

Types of Ransomware Variant 

Number of Incidents

DeadBolt 

2

M142 HIMARS

1

Trust

1

Qilin

2

Akira

2

RALord

1

NA (Not identified specific name of the ransomware)

4

Types of Info Stealers

Number of Incidents

Lumma Stealer

8

Satanic cloud stealer

3

SnakeKeylogger

1

Types of Data Breach

Description

Personal Identifier Information (PII)

Full name, identity card numbers, home address, age, handphone

number, date of birth, and salary.

Account Credential

Username and password of email accounts, username and password

of Internet banking accounts.

Appliances Credential

Admin panel access, Joomla, WordPress, FTP access, wp-admin access and etc.

CVE ID

Description

Use after free in Site Isolation in Google Chrome

Allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Inappropriate implementation in Custom Tabs

Allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app.

appropriate implementation in Intents in Google Chrome on Android

Allowed a remote attacker to perform privilege escalation via a crafted HTML page.

Inappropriate implementation in Extensions in Google Chrome

Allowed a remote attacker to perform privilege escalation via a crafted HTML page.

Insufficient validation of untrusted input in Extensions in Google Chrome

Allowed a remote attacker to perform privilege escalation via a crafted HTML page.

Inappropriate implementation in Navigations in Google Chrome

Allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page.

A stack-based buffer overflow in Ivanti Connect Secure 

Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

Cisco Meraki MX/Z Series AnyConnect VPN Denial of Service Vulnerability.

Allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the Cisco AnyConnect service on an affected device. To exploit this vulnerability, the attacker must have valid VPN user credentials on the affected device. This vulnerability exists because a variable is not initialized when an SSL VPN session is established. An attacker could exploit this vulnerability by supplying crafted attributes while establishing an SSL VPN session with an affected device. A successful exploit could allow the attacker to cause the Cisco AnyConnect VPN server to restart, resulting in the failure of the established SSL VPN sessions and forcing remote users to initiate a new VPN connection and reauthenticate. A sustained attack could prevent new SSL VPN connections from being established.

Cisco Enterprise Chat and Email Denial of Service Vulnerability.

Allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input to chat entry points. An attacker could exploit this vulnerability by sending malicious requests to a messaging chat entry point in the affected application. A successful exploit could allow the attacker to cause the application to stop responding, resulting in a DoS condition. The application may not recover on its own and may need an administrator to manually restart services to recover.

Cisco EPNM and Cisco Prime Infrastructure Stored XSS Vulnerability.

Allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Cisco EPNM and Cisco Prime Infrastructure Stored XSS Vulnerability.

Allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials

In WhatsApp Desktop for Windows.

A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening handler based on the attachment’s filename extension. A maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp. We have not seen evidence of exploitation in the wild.

Use after free in Site Isolation in Google Chrome

Allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Windows Common Log File System Driver Elevation of Privilege Vulnerability.

Allows an authorized attacker to elevate privileges locally.

A out-of-bounds write in Fortinet FortiOS.

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests.

A heap-based buffer overflow vulnerability in FortiOS

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.

A heap-based buffer overflow vulnerability in FortiOS

SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Heap Buffer Overflow in Codecs.

Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Use-After-Free in USB Subsystem / Use after free vulnerability in USB.

Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Use after free vulnerability in Lens.

Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Heap buffer overflow in Chrome's HTML rendering engine.

Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Out-of-bounds memory access vulnerability in DevTools.

Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

Insufficient data validation within DevTools.

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page.

Inappropriate implementation in DevTools.

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page.

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond

Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.

Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.

Unauthenticated Remote Code Execution in Erlang/OTP SSH Server.

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

Arbitrary File Upload in Cisco IOS XE Wireless Controller Software.

Allow an unauthenticated, remote attacker to upload arbitrary files to an affected system. This vulnerability is due to the presence of a hard-coded JSON Web Token (JWT) on an affected system. An attacker could exploit this vulnerability by sending crafted HTTPS requests to the AP file upload interface. A successful exploit could allow the attacker to upload files, perform path traversal, and execute arbitrary commands with root privileges.

Cisco IOS XE Software for WLC Wireless IPv6 Clients Denial of Service Vulnerability.

Allow an unauthenticated, adjacent wireless attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of IPv6 network requests from an associated wireless IPv6 client to an affected device. To associate a client to a device, an attacker may first need to authenticate to the network, or associate freely in the case of a configured open network. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to stop responding, resulting in a DoS condition.

Cisco IOS XE Software Web-Based Management Interface Command Injection Vulnerability.

Allow an authenticated, remote attacker with a lobby ambassador user account to perform a command injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary Cisco IOS XE Software CLI commands with privilege level 15. Note: This vulnerability is exploitable only if the attacker obtains the credentials for a lobby ambassador account. This account is not configured by default.

Cisco IOS, IOS XE, and IOS XR Software TWAMP Denial of Service Vulnerability.

Allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. For Cisco IOS XR Software, this vulnerability could cause the ipsla_ippm_server process to reload unexpectedly if debugs are enabled. This vulnerability is due to out-of-bounds array access when processing specially crafted TWAMP control packets. An attacker could exploit this vulnerability by sending crafted TWAMP control packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: For Cisco IOS XR Software, only the ipsla_ippm_server process reloads unexpectedly and only when debugs are enabled

Cisco Products DHCPv6 Denial of Service Vulnerability.

Allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the incorrect handling of DHCPv6 packets. An attacker could exploit this vulnerability by sending a crafted DHCPv6 packet to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability.

Allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system. This vulnerability is due to insufficient input validation. An authenticated attacker with read-only privileges on the SD-WAN Manager system could exploit this vulnerability by sending a crafted request to the CLI of the SD-WAN Manager. A successful exploit could allow the attacker to gain root privileges on the underlying operating system.

Cisco ASA, Firepower, IOS, IOS XE IKEv2 Denial of Service Vulnerability.

Allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation when processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition on the affected device.

Cisco IOS XE Software Privilege Escalation Vulnerability.

Allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device.

Cisco IOS XE Software Privilege Escalation Vulnerability.

Allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device.

Cisco IOS XE Internet Key Exchange Version 1 DoS Vulnerability.

Allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability. This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.

Cisco IOS XE DHCP Snooping Denial of Service Vulnerability.

Allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition. This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue. Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.

Cisco IOS Industrial Ethernet Switch Privilege Escalation Vulnerability.

Allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to elevate privileges to privilege level 15. To exploit this vulnerability, the attacker must have valid credentials for a user account with privilege level 5 or higher. Read-only DM users are assigned privilege level 5.

Cisco Wireless Controller CDP DoS Vulnerability.

Allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of access point (AP) Cisco Discovery Protocol (CDP) neighbor reports when they are processed by the wireless controller. An attacker could exploit this vulnerability by sending a crafted CDP packet to an AP. A successful exploit could allow the attacker to cause an unexpected reload of the wireless controller that is managing the AP, resulting in a DoS condition that affects the wireless network.

Cisco Catalyst Center Unauthenticated API Access Vulnerability.

allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the affected API of a Catalyst Center device. A successful exploit could allow the attacker to view or modify the outgoing proxy configuration, which could disrupt internet traffic from Cisco Catalyst Center or may allow the attacker to intercept outbound internet traffic.

Cisco Catalyst Switches Secure Boot Bypass Vulnerability.

Allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Cisco ASR 903 Routers ARP Denial of Service Vulnerability.

Allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads.

Insufficient Policy Enforcement in Loader.

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Microsoft DWM Core Library – Use-after-free flaw enabling local privilege escalation to SYSTEM.

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

Windows Common Log File System Driver – Use-after-free flaw allowing local privilege escalation to SYSTEM.

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Windows Common Log File System Driver – Improper input validation.

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Windows WinSock Driver – Use-after-free flaw allowing privilege escalation.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft Scripting Engine – Type confusion allowing RCE via malicious links.

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

Microsoft Defender for Identity – Improper authentication enabling spoofing.

Improper authentication in Microsoft Defender for Identity allows an unauthorized attacker to perform spoofing over an adjacent network.

Visual Studio – Command injection enabling unauthenticated local code execution.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.

Azure DevOps Pipeline Token Hijack.

[Spoofable identity claims] Authentication Bypass by Assumed-Immutable Data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

Azure Automation Improper Authorization.

Improper Authorization in Azure Automation allows an authorized attacker to elevate privileges over a network.

Azure Storage SSRF Vulnerability.

Server-Side Request Forgery (SSRF) in Azure allows an authorized attacker to perform spoofing over a network.

Azure – No specific description provided.

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a network.

Microsoft Power Apps SSRF & Info Disclosure.

Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network

TOCTOU race condition, allowing privilege escalation on all platforms.

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.

Integer underflow in Windows client, potentially leading to crashes or RCE.

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.

Improper neutralization of special elements, enabling injection.

Improper neutralization of special elements in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.

Buffer over-read in Windows client, which could expose sensitive memory or cause instability.

Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

NULL pointer dereference on all platforms, possibly resulting in DoS or RCE.

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

NULL pointer dereference in Windows client, leading to crash or privilege escalation.

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

NULL pointer dereference in Windows client, leading to crash or privilege escalation.

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.

Improper neutralization of special elements, allowing security control bypass.

Improper neutralization of special elements in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.

An out of bounds write exists in FreeType

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.

Out of bounds read and write in V8 in Google Chrome

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond.

Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.

Craft CMS stores arbitrary content provided by unauthenticated users in session files.

This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at '/var/lib/php/sessions'. Such session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.

Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98. If all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files: - writes enabled for the default servlet (disabled by default) - support for partial PUT (enabled by default) - a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads - attacker knowledge of the names of security sensitive files being uploaded - the security sensitive files also being uploaded via partial PUT If all of the following were true, a malicious user was able to perform remote code execution: - writes enabled for the default servlet (disabled by default) - support for partial PUT (enabled by default) - application was using Tomcat's file based session persistence with the default storage location - application included a library that may be leveraged in a deserialization attack Users are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.

Integer overflow in V8.

Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Use after free in Metrics.

Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HPE OneView for VMware vCenter (OV4VC).

This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions).

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of file paths within archive files. A crafted file path can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of the current user.