Threats tagged 'exploit'

GeoServer Exploits, PolarEdge, and Gayfemboy Push Cybercrime Beyond Traditional Botnets Source: https://thehackernews.com/2025/08/geoserver-exploits-polaredge-and.html

News#infosecnews#redditGermany+9

Murky Panda hackers exploit cloud trust to hack downstream customers Source: https://www.bleepingcomputer.com/news/security/murky-panda-hackers-exploit-cloud-trust-to-hack-downstream-customers/

After SharePoint attacks, Microsoft stops sharing PoC exploit code with China Source: https://securityaffairs.com/181430/security/after-sharepoint-attacks-microsoft-stops-sharing-poc-exploit-code-with-china.html

U.S. CISA adds Apple iOS, iPadOS, and macOS flaw to its Known Exploited Vulnerabilities catalog Source: https://securityaffairs.com/181406/security/u-s-cisa-adds-apple-ios-ipados-and-macos-flaw-to-its-known-exploited-vulnerabilities-catalog.html

News#infosecnews#redditGermany+9

Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks Source: https://thehackernews.com/2025/08/pre-auth-exploit-chains-found-in.html

AI can be used to create working exploits for published CVEs in a few minutes and for a few dollars Source: https://valmarelox.substack.com/p/can-ai-weaponize-new-cves-in-under

News#netsec#redditGermany+9

Russian State Hackers Exploit 7-Year-Old Cisco Router Vulnerability Source: https://hackread.com/russian-state-hackers-exploit-cisco-router-vulnerability/

Apple fixes new zero-day flaw exploited in targeted attacks Source: https://www.bleepingcomputer.com/news/apple/apple-emergency-updates-fix-new-actively-exploited-zero-day/

Experts Find AI Browsers Can Be Tricked by PromptFix Exploit to Run Malicious Hidden Prompts Source: https://thehackernews.com/2025/08/experts-find-ai-browsers-can-be-tricked.html

New DripDropper Malware Exploits Linux Flaw Then Patches It Lock Rivals Out Source: https://hackread.com/dripdropper-malware-exploits-linux-flaw-patche-lock-out/

Malware#infosecnews#redditGermany+7

Exploit weaponizes SAP NetWeaver bugs for full system compromise Source: https://securityaffairs.com/181325/security/exploit-weaponizes-sap-netweaver-bugs-for-full-system-compromise.html

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems Source: https://thehackernews.com/2025/08/apache-activemq-flaw-exploited-to.html

Malware#infosecnews#redditGermany+6

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories Source: https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/

Trivial C# Random Exploitation Source: https://blog.doyensec.com/2025/08/19/trivial-exploit-on-C-random.html

U.S. CISA adds Trend Micro Apex One flaw to its Known Exploited Vulnerabilities catalog Source: https://securityaffairs.com/181283/hacking/u-s-cisa-adds-trend-micro-apex-one-flaw-to-its-known-exploited-vulnerabilities-catalog.html

News#infosecnews#redditGermany+7

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks Source: https://thehackernews.com/2025/08/malicious-pypi-and-npm-packages.html

News#infosecnews#redditGermany+7

BigAnt Office Messenger 5.6.06 - SQL Injection

RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)

PHPMyAdmin 3.0 - Bruteforce Login Bypass

Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure