Blog | Rescana

Oct 2, 20243 min read

Critical CVE-2023-46604: Remote Code Execution Vulnerability in Apache ActiveMQ Exploited by Kinsing Malware

Executive Summary CVE-2023-46604 is a critical Remote Code Execution (RCE) vulnerability affecting the Java OpenWire protocol marshaller ...

Oct 2, 20244 min read

Exploited Windows Search RCE Vulnerability CVE-2023-36884 Targets Microsoft Office and Windows Systems

Executive Summary CVE-2023-36884 is a high-severity Windows Search Remote Code Execution (RCE) vulnerability that affects various...

Oct 2, 20243 min read

Critical CVE-2023-27350 Vulnerability in PaperCut NG and MF: Immediate Patching Required

Executive Summary CVE-2023-27350 is a critical vulnerability affecting PaperCut NG and PaperCut MF print management software. This...

Oct 1, 20244 min read

Critical Analysis of CVE-2023-3519: Unauthenticated RCE Vulnerability in Citrix NetScaler ADC and Gateway

Executive Summary CVE-2023-3519 is a critical unauthenticated remote code execution (RCE) vulnerability affecting Citrix NetScaler ADC ...

Oct 1, 20243 min read

Critical CVE-2023-42793: Authentication Bypass in JetBrains TeamCity Exploited by APT Groups

Executive Summary CVE-2023-42793 is a critical authentication bypass vulnerability in JetBrains TeamCity , a widely used continuous...

Oct 1, 20242 min read

Critical Command Injection Vulnerability in HPE Aruba Access Points (CVE-2024-42506): Urgent Mitigation Required

Executive Summary CVE-2024-42506 is a critical command injection vulnerability identified in the Command Line Interface (CLI) service of...

Oct 1, 20243 min read

Critical Remote Code Execution Vulnerability in Zyxel Devices: CVE-2023-28771 Analysis and Mitigation Strategies

Executive Summary CVE-2023-28771 is a critical vulnerability identified in various Zyxel network devices, including the ZyWALL/USG...

Sep 30, 20243 min read

Critical CVE-2023-47246 Vulnerability in SysAid On-Premise: Exploitation and Mitigation

Executive Summary CVE-2023-47246 is a critical path traversal vulnerability identified in SysAid On-Premise software versions prior to...

Sep 30, 20243 min read

Critical Analysis of CVE-2023-24880: Microsoft Windows SmartScreen Vulnerability and Active Exploitation

Executive Summary CVE-2023-24880 is a critical vulnerability identified in Microsoft Windows SmartScreen , a feature designed to protect...

Sep 30, 20243 min read

Critical Command Injection Vulnerability: Mitigating CVE-2023-20887 in VMware Aria Operations for Networks

Executive Summary CVE-2023-20887 is a critical command injection vulnerability identified in VMware Aria Operations for Networks . This...

Sep 29, 20243 min read

Critical Vulnerability Alert: CVE-2023-0669 in Fortra's GoAnywhere MFT Software

Executive Summary CVE-2023-0669 is a critical vulnerability identified in Fortra's GoAnywhere Managed File Transfer (MFT) software. This...

Sep 29, 20243 min read

Critical Path Traversal Vulnerability CVE-2023-41266 in Qlik Sense Enterprise for Windows: Immediate Patch Required

Executive Summary CVE-2023-41266 is a critical path traversal vulnerability identified in Qlik Sense Enterprise for Windows , affecting...

Sep 29, 20243 min read

Exploiting CVE-2023-33246: Critical RCE Vulnerability in Apache RocketMQ Versions 5.1.0 and Below

Executive Summary CVE-2023-33246 is a critical remote code execution (RCE) vulnerability identified in Apache RocketMQ versions 5.1.0...

Sep 29, 20244 min read

Cyber Threats in Maritime Ports: Safeguarding the Global Supply Chain from Emerging Risks

Background The maritime ecosystem is under a growing cyber security threat, driven by financial incentives of opportunistic (less capable...

Sep 28, 20243 min read

Critical Elevation of Privilege Vulnerability in Windows CLFS Driver: CVE-2023-28252 Analysis and Mitigation Strategies

Executive Summary CVE-2023-28252 is a high-severity elevation of privilege vulnerability affecting the Windows Common Log File System...

Sep 28, 20243 min read

Critical Access Control Bypass in Adobe ColdFusion: CVE-2023-29298 Exploitation and Mitigation

Executive Summary CVE-2023-29298 is a high-severity access control bypass vulnerability affecting Adobe ColdFusion . This vulnerability...

Sep 28, 20243 min read

Critical Information Disclosure Vulnerability in ownCloud's Graph API: CVE-2023-49103 Analysis and Mitigation

Executive Summary CVE-2023-49103 is a critical information disclosure vulnerability in ownCloud's Graph API . With a CVSS 3.1 score of...

Sep 28, 20243 min read

Critical Vulnerability CVE-2023-35078: Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM)

Executive Summary CVE-2023-35078 is a critical authentication bypass vulnerability in Ivanti Endpoint Manager Mobile (EPMM) , formerly...

Sep 27, 20243 min read

Critical Vulnerability CVE-2023-46747 in F5 Networks' BIG-IP: Analysis and Mitigation Strategies

Executive Summary CVE-2023-46747 is a critical vulnerability affecting F5 Networks' BIG-IP products. This vulnerability allows...

Sep 27, 20243 min read

Critical CVE-2023-40044 Vulnerability in WS_FTP Server: Remote Code Execution Risk and Mitigation Steps

Executive Summary CVE-2023-40044 is a critical vulnerability affecting WS_FTP Server versions prior to 8.7.4 and 8.8.2. This...