Vulnerability

Progress WhatsUp Gold RCE Vulnerability – PoC Exploit ReleasedProgress WhatsUp Gold RCE Vulnerability – PoC Exploit Released

Progress WhatsUp Gold RCE Vulnerability – PoC Exploit Released

A registry overwrite remote code execution (RCE) vulnerability has been identified in NmAPI.exe, part of the WhatsUp Gold network monitoring…

5 months ago
MobSF XSS Vulnerability Let Attackers Inject Malicious ScriptsMobSF XSS Vulnerability Let Attackers Inject Malicious Scripts

MobSF XSS Vulnerability Let Attackers Inject Malicious Scripts

A critical vulnerability has been identified in the Mobile Security Framework (MobSF) that allows attackers to inject malicious scripts into…

5 months ago
Salesforce Applications Vulnerability Could Allow Full Account TakeoverSalesforce Applications Vulnerability Could Allow Full Account Takeover

Salesforce Applications Vulnerability Could Allow Full Account Takeover

A critical vulnerability has been discovered in Salesforce applications that could potentially allow a full account takeover. The vulnerability, uncovered…

5 months ago
TP-Link HomeShield Function Vulnerability Let Attackers Inject Malicious CommandsTP-Link HomeShield Function Vulnerability Let Attackers Inject Malicious Commands

TP-Link HomeShield Function Vulnerability Let Attackers Inject Malicious Commands

A significant vulnerability has been identified in TP-Link's HomeShield function, affecting a range of their devices, including the Archer, Deco,…

5 months ago
HPE IceWall Flaw Let Attackers cause Unauthorized Data ModificationHPE IceWall Flaw Let Attackers cause Unauthorized Data Modification

HPE IceWall Flaw Let Attackers cause Unauthorized Data Modification

Hewlett Packard Enterprise (HPE) has issued an urgent security bulletin addressing a critical vulnerability in its IceWall product line. Identified…

5 months ago
Windows Server 2012 0-day Vulnerability Exposes Critical Security FlawWindows Server 2012 0-day Vulnerability Exposes Critical Security Flaw

Windows Server 2012 0-day Vulnerability Exposes Critical Security Flaw

Cybersecurity researchers have identified a critical 0-day vulnerability in Windows Server 2012 and Server 2012 R2. This previously unknown security…

5 months ago
Apple Safari JavaScriptCore Remote Code Execution Flaw Exploited in the WildApple Safari JavaScriptCore Remote Code Execution Flaw Exploited in the Wild

Apple Safari JavaScriptCore Remote Code Execution Flaw Exploited in the Wild

A critical vulnerability identified as CVE-2024-44308 has been actively exploited in the wild, affecting multiple versions of Apple Safari across…

5 months ago
MediaTek Processor Vulnerabilities Let Attackers Escalate PrivilegesMediaTek Processor Vulnerabilities Let Attackers Escalate Privileges

MediaTek Processor Vulnerabilities Let Attackers Escalate Privileges

Several vulnerabilities affecting MediaTek processors have been identified, potentially allowing attackers to escalate privileges on affected devices. These vulnerabilities span…

5 months ago
Hackers Can Secretly Access ThinkPad Webcams by Disabling LED Indicator LightHackers Can Secretly Access ThinkPad Webcams by Disabling LED Indicator Light

Hackers Can Secretly Access ThinkPad Webcams by Disabling LED Indicator Light

In a presentation at the POC 2024 conference, cybersecurity expert Andrey Konovalov revealed a novel method for covertly disabling the…

5 months ago
Zyxel Firewall Vulnerability Actively Exploited in AttacksZyxel Firewall Vulnerability Actively Exploited in Attacks

Zyxel Firewall Vulnerability Actively Exploited in Attacks

Zyxel has announced awareness of active exploitation attempts by threat actors targeting their firewall products. This follows a detailed report…

6 months ago