Vulnerabilidades exploradas (CISA KEV)

CVE-2025-24085 Crítica · 10.0 KEV Urgente · 77 Exploit público CWE-416 27/01/2025

Apple Multiple Products Use-After-Free Vulnerability

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

CVE-2025-0411 Alta · 7.0 KEV Alta · 62 Exploit público CWE-693 25/01/2025

7-Zip Mark of the Web Bypass Vulnerability

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.

CVE-2025-23006 Crítica · 9.8 KEV Urgente · 73 Ransomware CWE-502 23/01/2025

SonicWall SMA1000 Appliances Deserialization Vulnerability

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

CVE-2025-23209 Alta · 8.1 KEV Alta · 56 CWE-94 17/01/2025

Injeção de código no Craft CMS com execução remota de código

O Craft é um CMS flexível e fácil de usar para criar experiências digitais personalizadas na web e além. Esta é uma vulnerabilidade de execução remota de código (RCE) que afeta instalações do Craft 4 e 5 em que a chave de segurança já foi comprometida. Qualquer pessoa que execute uma versão não corrigida do Craft com uma chave de segurança comprometida está afetada. Esta vulnerabilidade foi corrigida nas versões 5.5.8 e 4.13.8. Usuários que não puderem atualizar para uma versão corrigida devem rotacionar suas chaves de segurança e garantir sua privacidade para ajudar a mitigar o problema.

CVE-2024-57727 Alta · 7.5 KEV Urgente · 89 Exploit público Ransomware CWE-22 15/01/2025

SimpleHelp Path Traversal Vulnerability

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

CVE-2024-57726 Crítica · 9.9 KEV Urgente · 74 Exploit público Ransomware CWE-862 15/01/2025

SimpleHelp Missing Authorization Vulnerability

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

CVE-2024-57728 Alta · 7.2 KEV Urgente · 70 Exploit público Ransomware CWE-59 15/01/2025

SimpleHelp Path Traversal Vulnerability

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.

CVE-2025-21333 Alta · 7.8 KEV Alta · 69 Exploit público CWE-122 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21334 Alta · 7.8 KEV Alta · 52 CWE-416 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21335 Alta · 7.8 KEV Alta · 52 CWE-416 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2024-13159 Alta · 7.5 KEV Alta · 69 Exploit público CWE-36 14/01/2025

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

CVE-2024-13160 Alta · 7.5 KEV Alta · 63 Exploit público CWE-36 14/01/2025

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

CVE-2024-13161 Alta · 7.5 KEV Alta · 63 Exploit público CWE-36 14/01/2025

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

CVE-2024-55591 Crítica · 9.8 KEV Urgente · 83 Exploit público Ransomware CWE-288 14/01/2025

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

CVE-2024-53704 Crítica · 9.8 KEV Urgente · 83 Exploit público Ransomware CWE-287 09/01/2025

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

CVE-2025-0282 Crítica · 9.0 KEV Urgente · 88 Exploit público Ransomware CWE-787 08/01/2025

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

CVE-2024-50603 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-78 07/01/2025

Aviatrix Controllers OS Command Injection Vulnerability

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.