* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Friday, August 29, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    ‘Big Brother’s’ Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy – El Paso Inc.

    Big Brother’s Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy

    ‘SNL’ Parts Ways With Emil Wakim Amid Rumored Season 51 Cast Shakeup – yahoo.com

    SNL Shakes Up Season 51 Cast with Emil Wakim’s Surprising Exit

    Do you have a favorable or an unfavorable opinion of Taylor Swift? – YouGov

    Do You Love Taylor Swift or Not? Share Your Thoughts!

    Upload Season 4 Review – yahoo.com

    Upload Season 4 Review: A Thrilling New Chapter Unveiled

    ‘The Roses’ review: Olivia Colman, Benedict Cumberbatch sparkle in dark comedy – Yakima Herald-Republic

    The Roses’ Review: Olivia Colman and Benedict Cumberbatch Shine in Dark Comedy Delight

    ‘When Calls the Heart’ Fans All Want the Same Thing After Seeing the Show’s Latest Update – yahoo.com

    When Calls the Heart’ Fans Rally Together in Excitement Over Exciting New Update!

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Japan’s legacy LCD and chip technology find new home in India – Nikkei Asia

    How Japan’s Breakthrough LCD and Chip Technologies Are Driving Innovation in India

    ITSWC 2025: Thursday sessions guide – Traffic Technology Today

    Your Ultimate Guide to Thursday Sessions at ITSWC 2025

    MC Machinery Technology Summit Showcases Manufacturing Innovations – Modern Machine Shop

    MC Machinery Technology Summit Unveils Cutting-Edge Manufacturing Innovations

    US-ROK Technology Cooperation Faces Rising Tensions – The National Interest

    Rising Tensions Put US-South Korea Technology Partnership to the Test

    The Role of AI and Technology in Shaping the Future of Interactive Entertainment – Technology Org

    How AI and Technology Are Transforming the Future of Interactive Entertainment

    Ten upcoming sports stadiums where technology takes to the field – Dezeen

    10 Futuristic Sports Stadiums Revolutionizing the Game with Cutting-Edge Technology

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    ‘Big Brother’s’ Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy – El Paso Inc.

    Big Brother’s Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy

    ‘SNL’ Parts Ways With Emil Wakim Amid Rumored Season 51 Cast Shakeup – yahoo.com

    SNL Shakes Up Season 51 Cast with Emil Wakim’s Surprising Exit

    Do you have a favorable or an unfavorable opinion of Taylor Swift? – YouGov

    Do You Love Taylor Swift or Not? Share Your Thoughts!

    Upload Season 4 Review – yahoo.com

    Upload Season 4 Review: A Thrilling New Chapter Unveiled

    ‘The Roses’ review: Olivia Colman, Benedict Cumberbatch sparkle in dark comedy – Yakima Herald-Republic

    The Roses’ Review: Olivia Colman and Benedict Cumberbatch Shine in Dark Comedy Delight

    ‘When Calls the Heart’ Fans All Want the Same Thing After Seeing the Show’s Latest Update – yahoo.com

    When Calls the Heart’ Fans Rally Together in Excitement Over Exciting New Update!

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Japan’s legacy LCD and chip technology find new home in India – Nikkei Asia

    How Japan’s Breakthrough LCD and Chip Technologies Are Driving Innovation in India

    ITSWC 2025: Thursday sessions guide – Traffic Technology Today

    Your Ultimate Guide to Thursday Sessions at ITSWC 2025

    MC Machinery Technology Summit Showcases Manufacturing Innovations – Modern Machine Shop

    MC Machinery Technology Summit Unveils Cutting-Edge Manufacturing Innovations

    US-ROK Technology Cooperation Faces Rising Tensions – The National Interest

    Rising Tensions Put US-South Korea Technology Partnership to the Test

    The Role of AI and Technology in Shaping the Future of Interactive Entertainment – Technology Org

    How AI and Technology Are Transforming the Future of Interactive Entertainment

    Ten upcoming sports stadiums where technology takes to the field – Dezeen

    10 Futuristic Sports Stadiums Revolutionizing the Game with Cutting-Edge Technology

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

CISA warns critical Geoserver GeoTools RCE flaw is exploited in attacks

July 17, 2024
in Technology
CISA warns critical Geoserver GeoTools RCE flaw is exploited in attacks
Share on FacebookShare on Twitter

GeoServer logo

​CISA is warning that a critical GeoServer GeoTools remote code execution flaw tracked as CVE-2024-36401 is being actively exploited in attacks.

GeoServer is an open-source server that allows users to share, process, and modify geospatial data.

On June 30th, GeoServer disclosed a critical 9.8 severity remote code execution vulnerability in its GeoTools plugin caused by unsafely evaluating property names as XPath expressions.

“The GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions,” reads the GeoServer advisory.

“This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to ALL GeoServer instances.”

While the vulnerability was not being actively exploited at the time, researchers quickly released proof of concept exploits [1, 2, 3] that demonstrated how to perform remote code execution on exposed servers and open reverse shells, make outbound connections, or create a file in the /tmp folder.

POC tweet

The project maintainers patched the flaw in GeoServer versions 2.23.6, 2.24.4, and 2.25.2 and recommended that all users upgrade to these releases.

The developers also offer workarounds but warn that they may break some GeoServer functionality.

CVE-2024-36401 used in attacks

Yesterday, the US Cybersecurity and Infrastructure Security Agency added CVE-2024-36401 to its Known Exploited Vulnerabilities Catalog, warning that the flaw is being actively exploited in attacks. CISA now requires federal agencies to patch servers by August 5th, 2024.

While CISA did not provide any information on how the flaws were being exploited, the threat monitoring service Shadowserver said they observed CVE-2024-36401 being actively exploited starting on July 9th.

ShadowServer toot on Mastodon

OSINT search engine ZoomEye says that approximately 16,462 GeoServer servers are exposed online, most located in the US, China, Romania, Germany, and France.

Although the agency’s KEV catalog primarily targets federal agencies, private organizations GeoServer should also prioritize patching this vulnerability to prevent attacks.

Those who haven’t already patched should immediately upgrade to the latest version and thoroughly review their system and logs for possible compromise.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : BleepingComputer – https://www.bleepingcomputer.com/news/security/cisa-warns-critical-geoserver-geotools-rce-flaw-is-exploited-in-attacks/

Tags: criticaltechnologywarns
Previous Post

Email addresses of 15 million Trello users leaked on hacking forum

Next Post

Kaspersky offers free security software for six months in U.S. goodbye

Drayton Harbor’s bacteria problem – Washington State Department of Ecology (.gov)

Battling the Bacteria Crisis in Drayton Harbor: Essential Facts You Can’t Miss

August 29, 2025
Entomologists, Fellow Scientists Report Negative Impacts of Government Actions – Entomology Today

Entomologists and Scientists Reveal Alarming Consequences of Recent Government Actions

August 28, 2025
Scientists Reveal What’s Inside Mars: It’s Chunky, With a History of Violence – ScienceAlert

Scientists Reveal Mars’ Chunky Interior and Turbulent History

August 28, 2025
These simple life changes can prevent diabetes and dementia – Earth.com

Easy Lifestyle Changes to Lower Your Risk of Diabetes and Dementia

August 28, 2025
Japan’s legacy LCD and chip technology find new home in India – Nikkei Asia

How Japan’s Breakthrough LCD and Chip Technologies Are Driving Innovation in India

August 28, 2025
Sports Betting Market Forecast and Company Analysis Report 2025-2033 Featuring 888, Bet365, Bet-at-Home, Betfred, Betsson, DraftKings, Entain, Flutter, International Game Technology, Kindred Group – Yahoo Finance

Sports Betting Market Outlook 2025-2033: In-Depth Analysis of Leading Industry Players

August 28, 2025
Meet The World’s Best Management Consulting Firms 2025 – Forbes

Explore the Leading Management Consulting Firms Shaping 2025

August 28, 2025
US Economy: 2Q GDP Rises to 3.3%, Jobless Claims Fall – Yahoo Finance

US Economy: 2Q GDP Rises to 3.3%, Jobless Claims Fall – Yahoo Finance

August 28, 2025
‘Big Brother’s’ Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy – El Paso Inc.

Big Brother’s Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy

August 28, 2025
Healthy Diet, Physical Activity Improve Alcohol-Related Liver Health – HCPLive

How Healthy Eating and Exercise Can Transform Alcohol-Related Liver Health

August 28, 2025

Categories

Archives

August 2025
MTWTFSS
 123
45678910
11121314151617
18192021222324
25262728293031
« Jul    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (795)
  • Economy (814)
  • Entertainment (21,693)
  • General (16,728)
  • Health (9,855)
  • Lifestyle (828)
  • News (22,149)
  • People (815)
  • Politics (822)
  • Science (16,024)
  • Sports (21,313)
  • Technology (15,795)
  • World (796)

Recent News

Drayton Harbor’s bacteria problem – Washington State Department of Ecology (.gov)

Battling the Bacteria Crisis in Drayton Harbor: Essential Facts You Can’t Miss

August 29, 2025
Entomologists, Fellow Scientists Report Negative Impacts of Government Actions – Entomology Today

Entomologists and Scientists Reveal Alarming Consequences of Recent Government Actions

August 28, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version