Vulnerability

OpenVPN Easy-rsa Vulnerability Allows Attacker to Bruteforce Private CA keyOpenVPN Easy-rsa Vulnerability Allows Attacker to Bruteforce Private CA key

OpenVPN Easy-rsa Vulnerability Allows Attacker to Bruteforce Private CA key

A significant security vulnerability, designated as CVE-2024-13454, has been discovered in the OpenVPN Easy-RSA tool, specifically affecting versions from 3.0.5…

4 months ago
Vim Command Line Text Editor Segmentation Vulnerability PatchedVim Command Line Text Editor Segmentation Vulnerability Patched

Vim Command Line Text Editor Segmentation Vulnerability Patched

Christian Brabandt, a prominent figure in the Vim community, announced the patching of a medium-severity segmentation fault vulnerability identified as CVE-2025-24014.…

4 months ago
Multiple Azure DevOps Vulnerabilities Let Inject CRLF Queries & Rebind DNSMultiple Azure DevOps Vulnerabilities Let Inject CRLF Queries & Rebind DNS

Multiple Azure DevOps Vulnerabilities Let Inject CRLF Queries & Rebind DNS

Researchers uncovered several significant vulnerabilities within Azure DevOps, specifically focusing on potential Server-Side Request Forgery (SSRF) weaknesses. The findings highlight…

4 months ago
Researchers Used ChatGPT to Discover S3 Bucket Takeover Vulnerability in Red BullResearchers Used ChatGPT to Discover S3 Bucket Takeover Vulnerability in Red Bull

Researchers Used ChatGPT to Discover S3 Bucket Takeover Vulnerability in Red Bull

Bug bounty programs have emerged as a critical avenue for researchers to identify vulnerabilities in digital platforms. One such success…

4 months ago
ChatGPT Crawler Vulnerability Abused to Trigger Reflexive DDoS AttacksChatGPT Crawler Vulnerability Abused to Trigger Reflexive DDoS Attacks

ChatGPT Crawler Vulnerability Abused to Trigger Reflexive DDoS Attacks

Security researchers have uncovered a severe vulnerability in OpenAI's ChatGPT API, allowing attackers to exploit its architecture for launching Reflective…

4 months ago
Massive NBI Data Breach Exposes Millions of Users Records OnlineMassive NBI Data Breach Exposes Millions of Users Records Online

Massive NBI Data Breach Exposes Millions of Users Records Online

The National Bureau of Investigation (NBI), the Philippines' top investigative agency, has reportedly been compromised, exposing the sensitive data of…

4 months ago
PoC Exploit Released for QNAP RCE VulnerabilityPoC Exploit Released for QNAP RCE Vulnerability

PoC Exploit Released for QNAP RCE Vulnerability

A critical remote code execution (RCE) vulnerability, tracked as CVE-2024-53691, has recently come to light, affecting users of QNAP's QTS…

4 months ago
Multiple HPE Aruba Network Vulnerabilities Allows Remote Arbitrary Code ExecutionMultiple HPE Aruba Network Vulnerabilities Allows Remote Arbitrary Code Execution

Multiple HPE Aruba Network Vulnerabilities Allows Remote Arbitrary Code Execution

 Hewlett Packard Enterprise (HPE) has confirmed multiple vulnerabilities in its Aruba Networking products that could allow remote arbitrary code execution.…

4 months ago
AWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCVAWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCV

AWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCV

Amazon Web Services (AWS) has issued a critical security advisory highlighting vulnerabilities in specific versions of its native clients for…

4 months ago
PoC Exploit Released for Ivanti Connect Secure RCE VulnerabilityPoC Exploit Released for Ivanti Connect Secure RCE Vulnerability

PoC Exploit Released for Ivanti Connect Secure RCE Vulnerability

A serious security flaw has been identified in Ivanti Connect Secure, designated as CVE-2025-0282, which enables remote unauthenticated attackers to execute…

4 months ago