Remove rocketmq-vulnerability
article thumbnail

Warning: RocketMQ Vulnerability Actively Exploited by Threat Actors

Heimadal Security

Cybersecurity and Infrastructure Security Agency (CISA) adds a new critical-severity vulnerability to its KEV catalog. The issue is tracked as CVE-2023-33246 and it affects Apache’s RocketMQ distributed messaging and streaming platform.

article thumbnail

DreamBus Malware Exploits Unpatched RocketMQ Servers

Heimadal Security

Threat actors exploit a known remote code vulnerability in RocketMQ servers to infect devices with DreamBus malware. It is a permission verification issue that impacts RocketMQ version 5.1.0 It is a permission verification issue that impacts RocketMQ version 5.1.0 score, which labels it as critical.

Malware 81
article thumbnail

Weekly Vulnerability Recap – September 4, 2023 – Attackers Hit Network Devices and More

eSecurity Planet

Ransomware groups continue to exploit unpatched vulnerabilities. Remote code execution (RCE) vulnerabilities, such as those exploited by a pair of botnets, highlight the hazards of unpatched devices and the need for patch management. out of 10 on the CVSS vulnerability scale. out of 10 on the CVSS vulnerability scale.

VPN 103