One of the flaws can be exploited by remote unauthenticated attackers for arbitrary command execution. The post Critical Vulnerabilities Patched in TP-Link’s Omada Gateways appeared first on SecurityWeek .
Affecting the Fireware OS iked process, the vulnerability can lead to remote code execution and does not require authentication. The post Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw appeared first on SecurityWeek .
An attacker can exploit the flaws to put devices into a permanent DoS condition that prevents remote restoration. The post Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices appeared first on SecurityWeek .
The unauthenticated local file inclusion bug allows attackers to retrieve the machine key and execute code remotely via a ViewState deserialization issue. The post Gladinet Patches Exploited CentreStack Vulnerability appeared first on SecurityWeek .
It’s unclear if the new Oracle E-Business Suite flaw, which can be exploited remotely without authentication, has been used in the wild. The post Oracle Patches EBS Vulnerability Allowing Access to Sensitive Data appeared first on SecurityWeek .
The unpatched vulnerabilities allow attackers to execute arbitrary code remotely and escalate their privileges. The post ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities appeared first on SecurityWeek .
Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882. The post Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks appeared first on SecurityWeek .
A critical unauthenticated remote code execution (RCE) vulnerability (CVE-2025-10547) was discovered and patched in DrayTek Vigor routers. The flaw can be exploited remotely via crafted HTTP/S requests to the device's web user interface, potentially causing memory corruption, system crashes, and arbitrary code execution without authentication. While remote WAN attacks can be mitigated by disabling remote WebUI and SSL VPN access or configuring ACLs, local network attackers may still exploit the vulnerability. DrayTek has released patches for 35 router models and urges immediate updates. The routers are widely used by prosumers and SMBs, making this a significant risk, especially given past ransomware campaigns targeting DrayTek devices. No exploitation in the wild has been reported yet, but the ease of exploitation and impact potential warrant urgent attention from European organizations using these routers.
Research by: Antonis Terefos (@Tera0017) Key Points Introduction The Pure malware family is a suite of malicious tools developed and sold by the author known as PureCoder. This suite includes PureHVNC RAT (a remote administration tool and predecessor to PureRAT), PureCrypter (a malware obfuscator), PureLogs (a stealer/logger), and several other tools. The malicious software is advertised and distributed through underground forums, Telegram channels, and dedicated websites. […] The post Under the Pure Curtain: From RAT to Builder to Coder appeared first on Check Point Research .
