Threats tagged 'exploit'

Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)

VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS)

Belkin F9K1009 F9K1010 2.00.04/2.00.09 - Hard Coded Credentials

Ghost CMS 5.42.1 - Path Traversal

Ghost CMS 5.59.1 - Arbitrary File Read

ServiceNow Multiple Versions - Input Validation & Template Injection

JetBrains TeamCity 2023.11.4 - Authentication Bypass

AgentFlayer 0-click exploit abuses ChatGPT Connectors to Steal 3rd-party app data Source: https://hackread.com/agentflayer-0-click-exploit-chatgpt-connectors-steal-data/

WinRAR zero-day exploited to plant malware on archive extraction Source: https://www.bleepingcomputer.com/news/security/winrar-zero-day-flaw-exploited-by-romcom-hackers-in-phishing-attacks/

Blog: Exploiting Retbleed in the real world Source: https://bughunters.google.com/blog/6243730100977664/exploiting-retbleed-in-the-real-world

News#netsec#redditGermany+9

Prompt injection engineering for attackers: Exploiting GitHub Copilot Source: https://blog.trailofbits.com/2025/08/06/prompt-injection-engineering-for-attackers-exploiting-github-copilot/

News#netsec#redditGermany+6

Trend Micro fixes two actively exploited Apex One RCE flaws Source: https://securityaffairs.com/180856/hacking/trend-micro-fixes-two-actively-exploited-apex-one-rce-flaws.html

Google fixed two Qualcomm bugs that were actively exploited in the wild Source: https://securityaffairs.com/180847/security/google-fixed-two-qualcomm-bugs-that-were-actively-exploited-in-the-wild.html

News#infosecnews#redditGermany+7

U.S. CISA adds D-Link cameras and Network Video Recorder flaws to its Known Exploited Vulnerabilities catalog Source: https://securityaffairs.com/180833/security/u-s-cisa-adds-d-link-cameras-and-network-video-recorder-flaws-to-its-known-exploited-vulnerabilities-catalog.html

News#infosecnews#redditGermany+9

Android gets patches for Qualcomm flaws exploited in attacks Source: https://www.bleepingcomputer.com/news/security/android-gets-patches-for-qualcomm-flaws-exploited-in-attacks/

News#infosecnews#redditGermany+9

Pwn2Own Offers $1m for Zero-Click WhatsApp Exploit Source: https://www.infosecurity-magazine.com/news/pwn2own-1m-zeroclick-whatsapp/

Gandia Integra Total 4.4.2236.1 - SQL Injection

Microsoft Edge (Chromium-based) 135.0.7049.114/.115 - Information Disclosure

Copyparty 1.18.6 - Reflected Cross-Site Scripting (XSS)

LPAR2RRD 8.04 - Remote Code Execution (RCE)