Experts released PoC exploit code for VMware Aria Operations for Logs flaw
VMware has become aware of a potentially critical security concern surrounding VMware Aria Operations for Logs, formerly known as vRealize Log Insight. A
Topic
Exploit
13 articles on this topic.
Norway on High Alert as Cisco Zero-Days Compromise ‘Important Businesses’
In a recent security development, Norway's National Security Authority (NSM) issued a stark warning regarding the exploitation of two Cisco vulnerabilities,
Vulnerability in TinyMCE Text Editor Can Allow Attacker Execute XSS Payloads
In the realm of text editors, TinyMCE has long been a popular choice, and on October 19, 2023, Tiny Technologies unveiled a significant update, version
Zero-Day Vulnerability Found in Fortra’s GoAnywhere MFT
A zero-day vulnerability in Fortra's GoAnywhere MFT, later tracked as CVE-2023-0669, was exploited in the wild. Over 1,000 on-premise instances were publicly accessible. Fortra fixed it in version 7.1.2 in February 2023.
CSRF Vulnerability Discovered in Plesk API
In Plesk versions starting from Plesk 17.8 attacker can execute commands and/or alter settings including the change of the admin's password.
Security Professionals, BEWARE of Fake PoCs
Researchers showed that fake Proof-of-Concepts (PoC) are targeting the security community, trying to plant malware and open backdoors to systems.
Penetration Testing vs Vulnerability Scanning
There is a lot of misunderstanding and confusion in penetration testing vs vulnerability scanning. There are important differences you need to know.
$320 Million Stolen from Crypto Trading Platform
By exploiting a vulnerability in the software of a crypto trading platform, hackers stole 320 million in cryptocurrencies.
Vulnerability vs Exploit, Do You Know The Difference?
Many news and articles keep on referring to words like vulnerability and exploits. But do you really know the difference?
Massive Internet Scans and Log4j Exploit Attempts
Many organizations have noticed a surge in internet scans to discover vulnerable systems and exploit attempts on them.
Researcher Publishes Exploit Affecting All Windows Versions
A security researcher has published a public exploit on Github that allows a low privileged user on all client and server windows operating systems, to gain administrative rights.
Warning to Apple Users! Possible Device Hack by Just Sending Email
Bugs were found in the Apple mail app which can allow RCE (Remote Code Execution), due to an out-of-bounds write bug and a heap overflow issue.
Zoom Usernames and Passwords Compromised and Listed on Dark Web Forum
The Coronavirus crisis has forced many organizations to embrace "work from home". Zoom platform has become increasingly famous due to this, but also for its