Threats tagged 'exploit'

Swagger UI 1.0.3 - Cross-Site Scripting (XSS)

Ultimate Member WordPress Plugin 2.6.6 - Privilege Escalation

Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE)

Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on Fully-Patched Devices Source: https://thehackernews.com/2025/08/akira-ransomware-exploits-sonicwall.html

Browser Extensions Can Exploit ChatGPT, Gemini in ‘Man in the Prompt’ Attack Source: https://hackread.com/browser-extensions-exploit-chatgpt-gemini-man-in-the-prompt/

Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits Source: https://thehackernews.com/2025/07/critical-dahua-camera-flaws-enable.html

News#infosecnews#redditGermany+9

Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome Source: https://thehackernews.com/2025/07/apple-patches-safari-vulnerability-also.html

Critical SAP flaw exploited to launch Auto-Color Malware attack on U.S.company Source: https://securityaffairs.com/180562/malware/critical-sap-flaw-exploited-to-launch-auto-color-malware-attack-on-u-s-company.html

Malware#infosecnews#redditGermany+9

Exploiting zero days in abandoned hardware Source: https://blog.trailofbits.com/2025/07/25/exploiting-zero-days-in-abandoned-hardware/

News#netsec#redditGermany+7

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation Source: https://thehackernews.com/2025/07/cisa-adds-papercut-ngmf-csrf.html

China-linked group Fire Ant exploits VMware and F5 flaws since early 2025 Source: https://securityaffairs.com/180451/hacking/china-linked-group-fire-ant-exploits-vmware-and-f5-flaws-since-early-2025.html

Campaign#infosecnews#redditGermany+7

Xlight FTP 1.1 - Denial Of Service (DOS)

Invision Community 4.7.20 - (calendar/view.php) SQL Injection

XWiki 14 - SQL Injection via getdeleteddocuments.vm

Mezzanine CMS 6.1.0 - Stored Cross Site Scripting (XSS)

Linux PAM Environment - Variable Injection Local Privilege Escalation

Adobe ColdFusion 2023.6 - Remote File Read

\#️⃣ How we Rooted Copilot #️⃣ After a long week of SharePointing, the [Eye Security](https://www.linkedin.com/company/eyesecurity/) Research Team thought it was time for a small light-hearted distraction for you to enjoy this Friday afternoon. So we rooted Copilot. It might have tried to persuade us from doing so, but we gave it enough ice cream to keep it satisfied and then fed it our exploit. Read the full story on our research blog - [https://research.eye.security/how-we-rooted-copilot/](https://research.eye.security/how-we-rooted-copilot/)

Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments Source: https://thehackernews.com/2025/07/fire-ant-exploits-vmware-flaw-to.html

News#infosecnews#redditGermany+6

Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems Source: https://thehackernews.com/2025/07/storm-2603-exploits-sharepoint-flaws-to.html

Malware#infosecnews#redditGermany+7