Command Injection Vulnerability

Samba WINS Command Injection Vulnerability (CVE-2025-10230) Notice

| | Blog, Command Injection Vulnerability, CVE-2025-10230, Emergency Response, Samba WINS
Overview Recently, NSFOCUS CERT detected that Samba released a security update to fix the Samba WINS command injection vulnerability (CVE-2025-10230); Since WINS when Samba is used as an AD domain controller does ...
NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

CISA and FBI Issue Alert on OS Command Injection Vulnerabilities

| | CISA Advisory, CISA Threat Update, Cisco Vulnerabilities, command injection, Command Injection Vulnerability, FBI alert, FBI warning, Ivanti Vulnerabilities, Linux & Open Source News, MITRE ATTACK, OS command injection, OS command injection prevention, OS command injection vulnerabilities, Palo Alto Networks, secure by design, Secure by Design Alert
CISA and FBI issued a critical advisory on July 10, 2024, urging software companies to review their products and eliminate OS command injection vulnerabilities at the source. This urgent call comes in ...
TuxCare

Velvet Ant Exploits Cisco Zero-Day Flaw

| | China-nexus cyber espionage, Cisco NX-OS vulnerability, Command Injection Vulnerability, CVE-2024-20399, Cybersecurity News, Cybersecurity zero-day flaw
Recent events in the cybersecurity landscape have brought to light the activities of a China-nexus cyber espionage group known as Velvet Ant. The threat actor group has been observed exploiting a zero-day ...
TuxCare

Palo Alto Networks PAN-OS Command Injection Vulnerability (CVE-2024-3400)

| | Blog, Command Injection Vulnerability, CVE-2024-3400, Emergency Response, Palo Alto Networks, PAN-OS
Overview Recently, NSFOCUS CERT detected that Palo Alto Networks issued a security announcement and fixed the command injection vulnerability (CVE-2024-3400) in PAN-OS. Since GlobalProtect gateway or portal configured in PAN-OS does not ...
NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.