Threats tagged 'exploit'

Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks Source: https://thehackernews.com/2025/07/ivanti-zero-days-exploited-to-drop.html

News#infosecnews#redditGermany+7

New CrushFTP zero-day exploited in attacks to hijack servers Source: https://www.bleepingcomputer.com/news/security/crushftp-zero-day-exploited-in-attacks-to-gain-admin-access-on-servers/

VMware fixes four ESXi zero-day bugs exploited at Pwn2Own Berlin Source: https://www.bleepingcomputer.com/news/security/vmware-fixes-four-esxi-zero-day-bugs-exploited-at-pwn2own-berlin/

Citrix Bleed 2 exploited weeks before PoCs as Citrix denied attacks Source: https://www.bleepingcomputer.com/news/security/citrix-bleed-2-exploited-weeks-before-pocs-as-citrix-denied-attacks/

News#infosecnews#redditGermany+8

[Analysis] GitHub's Security Crisis 39M Secret Leaks, Amadey MaaS Campaign Exploiting Repository Trust, and Supply Chain Attack Vectors Source: https://ncse.info/github-malware-protection-supply-chain-crisis/

Malware#netsec#redditGermany+6

New TeleMessage SGNL Vulnerability Is Actively Being Exploited by Attackers Source: https://hackread.com/telemessage-sgnl-flaw-actively-exploited-by-attackers/

Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency Miner Source: https://thehackernews.com/2025/07/hackers-exploit-apache-http-server-flaw.html

New Fortinet FortiWeb hacks likely linked to public RCE exploits Source: https://www.bleepingcomputer.com/news/security/new-fortinet-fortiweb-hacks-likely-linked-to-public-rce-exploits/

Google AI "Big Sleep" Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act Source: https://thehackernews.com/2025/07/google-ai-big-sleep-stops-exploitation.html

Keras 2.15 - Remote Code Execution (RCE)

Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege

PivotX 3.0.0 RC3 - Remote Code Execution (RCE)

Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges

TOTOLINK N300RB 8.54 - Command Execution

Langflow 1.2.x - Remote Code Execution (RCE)

SugarCRM 14.0.0 - SSRF/Code Injection

MikroTik RouterOS 7.19.1 - Reflected XSS

White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI)

WP Publications WordPress Plugin 1.2 - Stored XSS

NodeJS 24.x - Path Traversal