VMware Patche vCenter Server, Cloud Foundation and vSphere ESXi

VMware has fixed critical security flaws in Cloud Foundation, vCenter Server, and vSphere ESXi. These flaws could be used for privilege escalation and remote code execution.

Vulnerabilities include:

• Alert
• Vulnerabilities

Multiple Azure DevOps Vulns Allow To Inject CRLF Queries & Rebind DNS

By infosecbulletin / Monday , January 20 2025

Security researchers have found several vulnerabilities in Azure DevOps that could enable attackers to inject CRLF queries and carry out...

Read More

• Uncategorized

Intel holds 22 employees from one Bangladeshi University

By infosecbulletin / Monday , January 20 2025

Intel Corporation is a leading semiconductor chip manufacturer, employing at least 22 graduates from the Department of Applied Chemistry and...

Read More

• Uncategorized

VPN Surge 1500% in USA after TikTok Shut Down

By infosecbulletin / Sunday , January 19 2025

vpnMentor’s Research Team is monitoring the potential TikTok ban in the U.S., driven by national security and data privacy issues....

Read More

• International

MITRE Launches D3FEND 1.0; The Milestone for Cybersecurity Ontology

By infosecbulletin / Saturday , January 18 2025

MITRE launched D3FENDTM 1.0, a cybersecurity framework that provides a vocabulary and understanding of the cyber domain. D3FEND 1.0, funded...

Read More

• Alert
• Vulnerabilities

AWS Patches Multiple Vulns in WorkSpaces, AppStream 2.0

By infosecbulletin / Friday , January 17 2025

Amazon Web Services (AWS) has recently fixed two major security vulnerabilities in its cloud services: Amazon WorkSpaces, Amazon AppStream 2.0,...

Read More

• International

Malware Trends Review 2024: Ever Recorded Cyber Threats

By infosecbulletin / Friday , January 17 2025

Last year saw a significant rise in cyber threats, with malware becoming more advanced and attack strategies more sophisticated. A...

Read More

• Alert
• Vulnerabilities

Botnet Exploits 13,000 MikroTik Devices Abusing Misconfigured DNS

By infosecbulletin / Thursday , January 16 2025

A recent Infoblox Threat Intel report reveals a sophisticated botnet that exploits DNS misconfigurations to spread malware widely. This botnet,...

Read More

• Alert
• Vulnerabilities

CVE-2024-9042
Code Execution Vulnerability Found in Kubernetes Windows Nodes

By infosecbulletin / Thursday , January 16 2025

A new security flaw traced, CVE-2024-9042, poses a serious risk to Kubernetes clusters with Windows worker nodes. It has a...

Read More

• Data Breach
• Vulnerabilities

Hacker leaked 15k config files and VPN passwords of FortiGate firewall device

By infosecbulletin / Thursday , January 16 2025

The hacking group "Belsen Group" has posted over 15,000 unique FortiGate firewall configurations online. The data dump, reportedly obtained by exploiting...

Read More

• Event

Registration open for 1st Agile Cyber Drill 2025

By infosecbulletin / Thursday , January 16 2025

Registration open for "1st Agile Cyber Drill-2025" scheduled for February 26, 2025 online with an awards ceremony for 9 March...

Read More

CVE-2024-37079 & CVE-2024-37080 (CVSS scores: 9.8):

Multiple heap-overflow vulnerabilities in the implementation of the DCE/RPC protocol that could allow an unauthorized individual with network access to vCenter Server to achieve remote code execution by exploiting a specifically crafted network packet.

CVE-2024-37081 (CVSS score: 7.8):

Multiple sudo misconfiguration vulnerabilities in VMware vCenter that an authenticated local user with non-administrative privileges could exploit to obtain root permissions.

QiAnXin LegendSec researchers Hao Zheng and Zibo Li found and reported CVE-2024-37079 and CVE-2024-37080. Matei “Mal” Badanoiu from Deloitte Romania discovered CVE-2024-37081.

The issues in vCenter Server versions 7.0 and 8.0 have been fixed in versions 7.0 U3r, 8.0 U1e, and 8.0 U2d.

Although there are no reports of the vulnerabilities being exploited, it’s important for users to quickly apply the patches due to their critical nature.