Overview Recently, NSFOCUS CERT detected that OpenSSH issued a security announcement and fixed the remote code execution vulnerability of OpenSSH (CVE-2024-6387). Due to a signal handler race condition issue in OpenSSH Server (sshd) under the default configuration, if the client does not authenticate within seconds of LoginGraceTime (120 seconds by default and 600 seconds in […]

The post OpenSSH Remote Code Execution Vulnerability (CVE-2024-6387) Notification appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post OpenSSH Remote Code Execution Vulnerability (CVE-2024-6387) Notification appeared first on Security Boulevard.

Overview Recently, NSFOCUS CERT detected that VMware released a security announcement to fix the heap overflow vulnerability (CVE-2024-37079/CVE-2024-37080) and privilege escalation vulnerability (CVE-2024-37081) in VMware vCenter Server. At present, the official version has been fixed. Please take measures for protection. CVE-2024-37079/CVE-2024-37080: Because the vCenter Server has a heap overflow vulnerability when executing the DCERPC protocol, […]

The post Multiple High-risk Vulnerabilities (CVE-2024-37079/CVE-2024-37080/CVE-2024-37081) in VMware vCenter Server Notification appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post Multiple High-risk Vulnerabilities (CVE-2024-37079/CVE-2024-37080/CVE-2024-37081) in VMware vCenter Server Notification appeared first on Security Boulevard.

Overview NSFOCUS CERT has monitored the disclosure of a PHP CGI Windows platform remote code execution vulnerability (CVE-2024-4577) on the internet recently. Due to PHP’s oversight of the Best-Fit character mapping feature of the Windows system during its design, running PHP in CGI mode on the Windows platform and using the following language settings (Simplified […]

The post PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577) Advisory appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577) Advisory appeared first on Security Boulevard.