Latest CyberSec News by @thecyberpicker

ABB Cylon Aspect 3.08.02 - Cookie User Password Disclosure. CVE-2024-51546 . hardware exploit for Multiple platform

Cacti 1.2.26 - Remote Code Execution (RCE) (Authenticated). CVE-2024-25641 . webapps exploit for PHP platform

ABB Cylon Aspect 3.08.03 - Hard-coded Secrets.. webapps exploit for Multiple platform

ABB Cylon Aspect 3.08.03 (MapServicesHandler) - Authenticated Reflected XSS.. webapps exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (licenseUpload.php) - Stored Cross-Site Scripting. CVE-2024-6516 . hardware exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (uploadDb.php) - Remote Code Execution. CVE-2024-48839 . hardware exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (licenseServerUpdate.php) - Stored Cross-Site Scripting. CVE-2024-6516 . hardware exploit for Multiple platform

Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE). CVE-2025-0282 . remote exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (webServerUpdate.php) - Input Validation Config Poisoning.. hardware exploit for PHP platform

ABB Cylon Aspect 3.08.03 (CookieDB) - SQL Injection.. hardware exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (escDevicesUpdate.php) - Denial of Service (DOS). CVE-2024-48844 . hardware exploit for PHP platform

ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution. CVE-2024-6516CVE-2024-51550CVE-2024-48839 . hardware exploit for Multiple platform

ABB Cylon Aspect 3.07.02 (userManagement.php) - Weak Password Policy. CVE-2024-48845 . hardware exploit for Multiple platform

IBMi Navigator 7.5 - HTTP Security Token Bypass. CVE-2024-51464 . webapps exploit for Multiple platform

IBMi Navigator 7.5 - Server Side Request Forgery (SSRF). CVE-2024-51463 . webapps exploit for Multiple platform

Plane 0.23.1 - Server side request forgery (SSRF).. webapps exploit for Multiple platform

Really Simple Security 9.1.1.1 - Authentication Bypass. CVE-2024-10924 . webapps exploit for PHP platform

OpenCMS 17.0 - Stored Cross Site Scripting (XSS). CVE-2024-41947 . webapps exploit for PHP platform

Adapt Authoring Tool 0.11.3 - Remote Command Execution (RCE). CVE-2024-50672 . webapps exploit for Multiple platform

Pymatgen 2024.1 - Remote Code Execution (RCE). CVE-2024-23346 . remote exploit for Python platform

Meta resumes EU AI training using adult public data after regulatory approval, with opt-out option

Hardcoded key flaw in Triofox and CentreStack exploited as zero-day in March, affecting 7 firms.

Spring Boot common-user-management 0.1 - Remote Code Execution (RCE). CVE-2024-52302 . webapps exploit for Java platform

President Trump last week revoked security clearances for Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA) who was fired by Trump after declaring the 2020 election the most secure in U.S. history. The White House…

Car rental giant Hertz Corporation warns it suffered a data breach after customer data for its Hertz, Thrifty, and Dollar brands was stolen in the Cleo zero-day data theft attacks.

Car rental giant Hertz Corporation warns it suffered a data breach after customer data for its Hertz, Thrifty, and Dollar brands was stolen in the Cleo zero-day data theft attacks.

Les cyberattaques ne visent plus seulement les grandes organisations. Tous les acteurs sont désormais exposés. La cybersécurité ne peut plus se...-Publi-rédaction

Meta users in Europe will have their public posts swept up and ingested for AI training, the company announced this week.

American business services giant and government contractor Conduent disclosed today that client data was stolen in a January 2025 cyberattack.

Swiss cybersecurity firm Prodaft has launched a new initiative called 'Sell your Source' where the company purchases verified and aged accounts on cybercrime forums to conduct threat intelligence operations.