Cyber

What changed

ProjectSend has been found to contain an improper authentication vulnerability affecting versions prior to r1720. This flaw allows remote, unauthenticated attackers to send specially crafted HTTP requests to the options.php file.

Exploitation of this vulnerability can lead to unauthorized modifications of the application's configuration, potentially enabling attackers to create accounts, upload webshells, and inject malicious JavaScript.

Who is affected

The vulnerability impacts all users of ProjectSend versions prior to r1720, which includes a wide range of organizations utilizing this application for file sharing and management.

Specific groups that may be at risk include web developers, small to medium enterprises, and any organization relying on ProjectSend for secure file transfers.

• ProjectSend users with versions prior to r1720
• Web developers integrating ProjectSend into their systems
• Small to medium enterprises using ProjectSend for file management

What to do

It is crucial for affected users to upgrade to ProjectSend version r1720 or later to mitigate this vulnerability. Regular updates and patches should be implemented to ensure ongoing security.

Additionally, organizations should review their access controls and monitor for any unauthorized changes or suspicious activities within their ProjectSend installations.

• Upgrade to ProjectSend version r1720 or later immediately
• Review and strengthen access controls for ProjectSend
• Monitor for unauthorized changes or suspicious activities

What changed

GeoVision devices have been found to contain a serious OS command injection vulnerability that can be exploited by unauthenticated remote attackers. This flaw allows for the injection and execution of arbitrary system commands, posing a substantial risk to device integrity and security.

Reports indicate that this vulnerability has already been actively exploited in the wild, heightening the urgency for immediate action.

Who is affected

The vulnerability primarily affects certain end-of-life GeoVision devices, particularly those running the gv-vs12 firmware. Organizations utilizing these devices should be aware of the potential risks.

Given the nature of the vulnerability, any entity relying on affected GeoVision products is at risk of unauthorized access and control.

• GeoVision gv-vs12 firmware users
• Organizations using legacy GeoVision devices
• Security teams managing networked surveillance systems

What to do

It is crucial for affected organizations to assess their exposure to these devices and take immediate action to mitigate risks. This may include isolating vulnerable devices from the network and monitoring for any signs of exploitation.

Additionally, organizations should consider upgrading to supported devices or firmware versions to enhance security.

• Isolate vulnerable GeoVision devices from the network.
• Monitor systems for unusual activity that may indicate exploitation.
• Plan for device upgrades to supported versions.