January 2025 - rwth-security - lists.rwth-aachen.de

Authentication Bypass Vulnerability Found in Dell OpenManage Server Administrator
by Bernd Kohler 08 Jan '25

08 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Authentication Bypass Vulnerability Found in Dell OpenManage Server Administrator" VG Bernd [0] https://securityonline.info/authentication-bypass-vulnerability-found-in-de… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2024-8474: OpenVPN Connect Vulnerability Leaks Private Keys
by Bernd Kohler 07 Jan '25

07 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-8474: OpenVPN Connect Vulnerability Leaks Private Keys" --> Versionen vor 3.5.0 --> Todo's: - Update - neue Credentials generieren und passend konfigurieren - Logs prüfen VG Bernd [0] https://securityonline.info/cve-2024-8474-openvpn-connect-vulnerability-lea… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

OWASP OFFAT (OFFensive Api Tester)
by Bernd Kohler 06 Jan '25

06 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OWASP OFFAT" VG Bernd [0] https://github.com/OWASP/OFFAT -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CAPTCHAs now run Doom – on nightmare mode
by Bernd Kohler 03 Jan '25

03 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CAPTCHAs now run Doom – on nightmare mode" --> "... requires the user to kill three monsters in Doom – on nightmare mode ..." VG Bernd [0] https://www.theregister.com/2025/01/03/captcha_doom_nightmare/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
by Bernd Kohler 03 Jan '25

03 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers" VG Bernd [0] https://thehackernews.com/2025/01/ldapnightmare-poc-exploit-crashes-lsass.h… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Investigating a SharePoint Compromise: IR Tales from the Field
by Bernd Kohler 02 Jan '25

02 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Investigating a SharePoint Compromise: IR Tales from the Field" VG Bernd [0] https://www.rapid7.com/blog/post/2024/10/30/investigating-a-sharepoint-comp… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New details reveal how hackers hijacked 35 Google Chrome extensions
by Bernd Kohler 02 Jan '25

02 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New details reveal how hackers hijacked 35 Google Chrome extensions" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-details-reveal-how-hacke… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0