Intrucept Security Advisories

ADVISORY	IMPACT	CVE	LAST UPDATED	VERSION
Critical RCE Vulnerability Patched in Ivanti Endpoint Manager	Critical	CVE-2024-29847	18/09/2024	1.0
Widespread of the Necro Trojan Targeting Android Users	Critical	--	26/09/2024	1.0
Zimbra Remote Code Execution Vulnerability (CVE-2024-45519)	Critical	CVE-2024-45519	03/10/2024	1.0
Security Advisory Microsoft’s October Security Patches Mitigate Remote Code Execution & Spoofing Risk	Critical	--	10/10/2024	1.0
Critical Fortinet Vulnerability Exploiting in Wild	Critical	CVE-2024-23113	16/10/2024	1.0
Veeam Vulnerability (CVE-2024-40711) Exploited by Ransomware	Critical	CVE-2024-40711	17/10/2024	1.0
Threat Campaign Targeting WordPress Sites with Malicious Plugins	Critical	--	22/10/2024	1.0
Critical Remote Code Execution Vulnerability in VMware vCenter Server (CVE-2024-38812)	Critical	CVE-2024-38812, CVE-2024-38813	23/10/2024	1.0
Palo Alto Account Takeover Vulnerability Actively Exploited	Critical	CVE-2024-5910	08/11/2024	1.0
November 2024 Microsoft Patches: Addressing Zero-Day Exploits and High-Priority Vulnerabilities	High	--	13/11/2024	1.0
Re-release of November 2024 Exchange Server Security Updates	High	CVE-2024-49040	27/11/2024	1.0
Security Update for NVIDIA Base Command & Bright Cluster Managers	Medium	CVE-2024-0139	29/11/2024	1.0
RCE and File Deletion Vulnerabilities in Veeam Service Provider Console	Critical	CVE-2024-42448, CVE-2024-42449	05/12/2024	1.0
Advisory on MUT-8694: Threat Actors Exploiting Developer Trust in Open-Source Libraries	High	--	10/12/2024	1.0
Microsoft December 2024 Patch Tuesday: Critical Fixes for Zero-Day and Remote Code Execution	High	--	12/12/2024	1.0
Security Advisory Zero-Day Vulnerability in Windows Exposes NTLM Credentials	Critical	Not yet assigned	13/12/2024	1.0
Critical Flaw in WordPress Hunk Companion Plugin Enables Unauthorized Plugin Installation	Critical	CVE-2024-11972	17/12/2024	1.0
Security Advisory Cleo Releases Patch for Critical Vulnerabilities Exploited in the Wild	Critical	CVE-2024-55956, CVE-2024-50623	18/12/2024	1.0
Critical Apache Tomcat Vulnerabilities Allow RCE & DoS	Critical	CVE-2024-50379, CVE-2024-54677	21/12/2024	1.0
Denial of Service Vulnerability in DNS Security Feature of Palo Alto Networks PAN-OS	High	CVE-2024-3393	03/01/2025	1.0
Exploit Proof-of-Concept Released for LDAP CVE-2024-49113	Critical	CVE-2024-49113	06/01/2025	1.1
Critical Windows Privilege Escalation Vulnerability with Public Exploit	High	CVE-2024-43641	07/01/2025	1.0
Race Condition Vulnerability in OpenSSH (CVE-2024-6387): PoC Exploit Released	High	CVE-2024-6387	09/01/2025	1.0
Ivanti Connect Secure VPN Actively Being Exploited in the Wild	High	CVE-2025-0282, CVE-2025-0283	10/01/2025	1.0
GitLab Releases Patch to Fix Critical and High-Severity Vulnerabilities	High	--	13/01/2025	1.0
Important Security Alert: SonicWall Issues Patch for SSL-VPN Vulnerabilities	High	CVE-2024-53704	15/01/2025	1.0
Banshee Stealer: A Growing Threat to macOS Users	High	--	15/01/2025	1.0
Critical Security Updates: Microsoft Jan 2025 Patch Tuesday Fixes 8 Zero-Days & 159 Vulnerabilities	Critical	--	16/01/2025	1.0
Privilege Escalation Vulnerability in ComboBlocks Plugin Affects Thousands of Sites	Critical	CVE-2024-9636	17/01/2025	1.0
Critical Zero-Day Vulnerability in Windows (CVE-2024-49138): PoC Released, Exploited in the Wild	High	CVE-2024-49138	20/01/2025	1.0
Critical Authentication Bypass Vulnerability in Fortinet Products Under Active Exploitation	Critical	CVE-2024-55591	23/01/2025	1.0
Privilege Escalation Vulnerability Exposes Cisco Meeting Management to Attacks	Critical	CVE-2025-20156	24/01/2025	1.0
High-Severity SMB Server Flaws (CVE-2024-56626 & CVE-2024-56627) in Linux Kernel	High	CVE-2024-56626, CVE-2024-56627	29/01/2025	1.0
Apple Patched Actively Exploited Zero-Day Vulnerability	High	CVE-2025-24085	29/01/2025	1.0
macOS Security at Risk: PoC Exploit for CVE-2025-24118 Kernel Flaw	Critical	CVE-2025-24118	03/02/2025	1.0
Zero-Day Vulnerability in Microsoft Sysinternals Tools	High	--	05/02/2025	1.0
Active Exploitation of Microsoft Outlook RCE Vulnerability (CVE-2024-21413)	Critical	CVE-2024-21413	07/02/2025	1.0

Defend Your Business Against The Latest Cyber Threats

Our experts are here to help you

INDIA OFFICE

Phone

+91 98454 47250

[email protected]

Address

Bengaluru, India

AUSTRALIA OFFICE

Phone

+61 414 780 058

[email protected]

Address

Intrucept Security Advisories

Defend Your Business Against The Latest Cyber Threats

+91 98454 47250

[email protected]

Bengaluru, India

+61 414 780 058

[email protected]

Epping, NSW, 2121