* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Thursday, October 16, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    This Haunting ‘60s Country Song Is Even More Tragic Than You Remember – Yahoo

    This Haunting ’60s Country Song Will Break Your Heart All Over Again

    Arts/Entertainment: ‘Wait Until Dark’ brings spooky season center stage – Times Herald Online

    Wait Until Dark’ Delivers Chilling Thrills Perfect for the Spooky Season

    Bluesman James Montgomery Will Perform In Falmouth – CapeNews.net

    Blues Legend James Montgomery Ready to Ignite the Stage in Falmouth

    Mexican singer Pedro Fernández to make Ave Fénix tour stop in Stockton. Tickets, schedule – Yahoo

    Mexican Singer Pedro Fernández Brings the Ave Fénix Tour to Stockton – Don’t Miss It!

    Flutter Entertainment’s SWOT Analysis: Uncovering the Growth Potential Amid Challenges

    Dylan Efron Shares Sweet ‘DWTS’ Rehearsal Photos Featuring His Little Sister Olivia – yahoo.com

    Dylan Efron’s Heartwarming ‘DWTS’ Rehearsal Moments with Little Sister Olivia

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    A Nobel Prize for explaining when technology leads to growth – NPR

    Nobel Prize Awarded for Unraveling How Technology Drives Economic Growth

    Erie Canal’s 200th anniversary: How a technological marvel for trade changed the environment forever – The Conversation

    Erie Canal’s 200th Anniversary: How a Trade Marvel Transformed the Environment Forever

    Day 5 of Gains Streak for Solidion Technology Stock with 475% Return (vs. -20% YTD) [10/14/2025] – Trefis

    Solidion Technology Stock Rockets for 5th Consecutive Day, Soaring an Astonishing 475% Year-to-Date

    Tracking DNA and RNA Together To Unlock Disease Insights – Technology Networks

    Unlocking Disease Insights by Tracking DNA and RNA Together

    The future of battery technology – Engineer Live

    Revolutionizing Energy: Exploring the Future of Battery Technology

    How Can Boosting Your Travel Experience with Less Technology Lead to a More Relaxing Vacation? All You Need to Know About This Latest Trend – Travel And Tour World

    How Can Boosting Your Travel Experience with Less Technology Lead to a More Relaxing Vacation? All You Need to Know About This Latest Trend – Travel And Tour World

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    This Haunting ‘60s Country Song Is Even More Tragic Than You Remember – Yahoo

    This Haunting ’60s Country Song Will Break Your Heart All Over Again

    Arts/Entertainment: ‘Wait Until Dark’ brings spooky season center stage – Times Herald Online

    Wait Until Dark’ Delivers Chilling Thrills Perfect for the Spooky Season

    Bluesman James Montgomery Will Perform In Falmouth – CapeNews.net

    Blues Legend James Montgomery Ready to Ignite the Stage in Falmouth

    Mexican singer Pedro Fernández to make Ave Fénix tour stop in Stockton. Tickets, schedule – Yahoo

    Mexican Singer Pedro Fernández Brings the Ave Fénix Tour to Stockton – Don’t Miss It!

    Flutter Entertainment’s SWOT Analysis: Uncovering the Growth Potential Amid Challenges

    Dylan Efron Shares Sweet ‘DWTS’ Rehearsal Photos Featuring His Little Sister Olivia – yahoo.com

    Dylan Efron’s Heartwarming ‘DWTS’ Rehearsal Moments with Little Sister Olivia

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    A Nobel Prize for explaining when technology leads to growth – NPR

    Nobel Prize Awarded for Unraveling How Technology Drives Economic Growth

    Erie Canal’s 200th anniversary: How a technological marvel for trade changed the environment forever – The Conversation

    Erie Canal’s 200th Anniversary: How a Trade Marvel Transformed the Environment Forever

    Day 5 of Gains Streak for Solidion Technology Stock with 475% Return (vs. -20% YTD) [10/14/2025] – Trefis

    Solidion Technology Stock Rockets for 5th Consecutive Day, Soaring an Astonishing 475% Year-to-Date

    Tracking DNA and RNA Together To Unlock Disease Insights – Technology Networks

    Unlocking Disease Insights by Tracking DNA and RNA Together

    The future of battery technology – Engineer Live

    Revolutionizing Energy: Exploring the Future of Battery Technology

    How Can Boosting Your Travel Experience with Less Technology Lead to a More Relaxing Vacation? All You Need to Know About This Latest Trend – Travel And Tour World

    How Can Boosting Your Travel Experience with Less Technology Lead to a More Relaxing Vacation? All You Need to Know About This Latest Trend – Travel And Tour World

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

CISA warns critical Geoserver GeoTools RCE flaw is exploited in attacks

July 17, 2024
in Technology
CISA warns critical Geoserver GeoTools RCE flaw is exploited in attacks
Share on FacebookShare on Twitter

GeoServer logo

​CISA is warning that a critical GeoServer GeoTools remote code execution flaw tracked as CVE-2024-36401 is being actively exploited in attacks.

GeoServer is an open-source server that allows users to share, process, and modify geospatial data.

On June 30th, GeoServer disclosed a critical 9.8 severity remote code execution vulnerability in its GeoTools plugin caused by unsafely evaluating property names as XPath expressions.

“The GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions,” reads the GeoServer advisory.

“This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to ALL GeoServer instances.”

While the vulnerability was not being actively exploited at the time, researchers quickly released proof of concept exploits [1, 2, 3] that demonstrated how to perform remote code execution on exposed servers and open reverse shells, make outbound connections, or create a file in the /tmp folder.

POC tweet

The project maintainers patched the flaw in GeoServer versions 2.23.6, 2.24.4, and 2.25.2 and recommended that all users upgrade to these releases.

The developers also offer workarounds but warn that they may break some GeoServer functionality.

CVE-2024-36401 used in attacks

Yesterday, the US Cybersecurity and Infrastructure Security Agency added CVE-2024-36401 to its Known Exploited Vulnerabilities Catalog, warning that the flaw is being actively exploited in attacks. CISA now requires federal agencies to patch servers by August 5th, 2024.

While CISA did not provide any information on how the flaws were being exploited, the threat monitoring service Shadowserver said they observed CVE-2024-36401 being actively exploited starting on July 9th.

ShadowServer toot on Mastodon

OSINT search engine ZoomEye says that approximately 16,462 GeoServer servers are exposed online, most located in the US, China, Romania, Germany, and France.

Although the agency’s KEV catalog primarily targets federal agencies, private organizations GeoServer should also prioritize patching this vulnerability to prevent attacks.

Those who haven’t already patched should immediately upgrade to the latest version and thoroughly review their system and logs for possible compromise.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : BleepingComputer – https://www.bleepingcomputer.com/news/security/cisa-warns-critical-geoserver-geotools-rce-flaw-is-exploited-in-attacks/

Tags: criticaltechnologywarns
Previous Post

Email addresses of 15 million Trello users leaked on hacking forum

Next Post

Kaspersky offers free security software for six months in U.S. goodbye

‘Rewilding’ promoted as key contributor to conservation efforts – China Daily

How ‘Rewilding’ is Revolutionizing Conservation Across the Globe

October 16, 2025
Arkansas students invited to join 2026 Soybean Science Challenge – KATV

Arkansas students invited to join 2026 Soybean Science Challenge – KATV

October 16, 2025
Free Homeschool science event Nov. 5 in West Bend, WI with author Michael Lane – Washington County Insider

Join Author Michael Lane for a Fun and Free Homeschool Science Event on Nov. 5 in West Bend, WI!

October 16, 2025
My standoff with the Bay Area’s most intimidating new sandwich – Yahoo

My Showdown with the Bay Area’s Most Intimidating New Sandwich

October 16, 2025
A Nobel Prize for explaining when technology leads to growth – NPR

Nobel Prize Awarded for Unraveling How Technology Drives Economic Growth

October 16, 2025
Sports/Rec calendar: Oct. 17–26, 2025 – Cascadia Daily News

Don’t Miss These Thrilling Sports and Recreation Events Happening October 17-26, 2025!

October 16, 2025
Task Force Urges World Bank and International Monetary Fund to Prioritize Climate, Restructure Lending Policies – Inside Climate News

Task Force Urges World Bank and IMF to Prioritize Climate Action and Overhaul Lending Policies

October 16, 2025
Opinion: California’s two-tier economy mirrors UK’s ‘Upstairs, Downstairs’ past – Times of San Diego

How California’s Two-Tier Economy Echoes the UK’s ‘Upstairs, Downstairs’ Divide

October 16, 2025
This Haunting ‘60s Country Song Is Even More Tragic Than You Remember – Yahoo

This Haunting ’60s Country Song Will Break Your Heart All Over Again

October 16, 2025
Iron County nonprofit connects public to health experts – Upper Michigan’s Source

Iron County Nonprofit Connects Community with Health Experts to Improve Well-Being

October 16, 2025

Categories

Archives

October 2025
M T W T F S S
 12345
6789101112
13141516171819
20212223242526
2728293031  
« Sep    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (870)
  • Economy (891)
  • Entertainment (21,763)
  • General (17,626)
  • Health (9,933)
  • Lifestyle (904)
  • News (22,149)
  • People (892)
  • Politics (901)
  • Science (16,102)
  • Sports (21,391)
  • Technology (15,871)
  • World (874)

Recent News

‘Rewilding’ promoted as key contributor to conservation efforts – China Daily

How ‘Rewilding’ is Revolutionizing Conservation Across the Globe

October 16, 2025
Arkansas students invited to join 2026 Soybean Science Challenge – KATV

Arkansas students invited to join 2026 Soybean Science Challenge – KATV

October 16, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version