Search Results

Successful exploitation of CVE-2025-1001 could allow an attacker to perform a machine-in-the-middle attack (MITM)

Vulnerabilities in RSync could allow an attacker to execute arbitrary code or perform path traversal

Proof-of-concept exploit code released for SQL injection vulnerability CVE-2025-1094

Broadcom has addressed three exploited vulnerabilities that, when chained, can allow an attacker to access the hypervisor through a running virtual machine

Security researchers have published a PoC for DoS vulnerability CVE-2024-49113 and additional information on their attempts to exploit RCE vulnerability CVE-2024-49112

SonicWall releases security update to address four vulnerabilities in SonicOS

A vulnerability has been discovered in the TeamViewer Clients for Windows 

Nine security advisories address multiple vulnerabilities, including one critical and two high severity advisories

A privileged attacker could exploit CVE-2025-1002 to alter network traffic and perform a machine-in-the-middle attack

Exploitation of this vulnerability could allow an attacker to read arbitrary files, including stored credentials

Scheduled updates for Microsoft products, including security updates for 63 vulnerabilities, of which two are reported as exploited

A proof-of-concept exploit has been published for CVE-2024-53704, which affects SonicWall NGFWs

Three advisories cover vulnerabilities and weaknesses in Ivanti Cloud Services Application (CSA), Ivanti Neurons for MDM, Ivanti Connect Secure, Policy Secure, and Secure Access Client.

Attack chain using CVE-2025-0108 and CVE-2025-0111 has been observed in the wild

CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728 can be exploited in a chain to allow full compromise of a SimpleHelp server

API authentication bypass vulnerability CVE-2025-21589 affects Session Smart Router, Conductor, and WAN Assurance Managed Routers

One of the 13 high impact advisories addresses the command injection vulnerability CVE-2025-20029, which could lead to arbitrary system command execution

Successful exploitation of CVE-2025-1001 could allow an attacker to perform a machine-in-the-middle attack (MITM)

CVE-2025-20206 could allow an attacker to execute arbitrary code with system privileges

Scheduled updates for Microsoft products, including security updates for 57 vulnerabilities, of which six are reported as exploited