Search cyberveille.decio.ch

Found 6 bookmarks

Custom sorting

D-Link won’t fix critical flaw affecting 60,000 older NAS devices

More than 60,000 D-Link network-attached storage devices that have reached end-of-life are vulnerable to a command injection vulnerability with a publicly available exploit.

#bleepingcomputer #EN #2024 #Command-Injection #D-Link #Exploit #Hardware #NAS #PoC #Proof-of-Concept #Security #InfoSec #Computer-Security

·bleepingcomputer.com·Nov 11, 2024

D-Link won’t fix critical flaw affecting 60,000 older NAS devices

Critical Ivanti vTM auth bypass bug now exploited in attacks

CISA has tagged another critical Ivanti security vulnerability, which can let threat actors create rogue admin users on vulnerable Virtual Traffic Manager (vTM) appliances, as actively exploited in attacks.

#bleepingcomputer #EN #2024 #Authentication-Bypass #Bypass #CISA #Exploit #Ivanti #PoC

·bleepingcomputer.com·Sep 24, 2024

Critical Ivanti vTM auth bypass bug now exploited in attacks

Exploit released for Fortinet RCE bug used in attacks, patch now

Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.

#bleepingcomputer #EN #2024 #Actively-Exploited #Exploit #Fortinet #PoC #Proof-of-Concept #RCE #Remote-Code-Execution #SQL-Injection #CVE-2023-48788

·bleepingcomputer.com·Mar 21, 2024

Exploit released for Fortinet RCE bug used in attacks, patch now

Hackers are exploiting critical Apache Struts flaw using public PoC

Hackers are attempting to leverage a recently fixed critical vulnerability (CVE-2023-50164) in Apache Struts that leads to remote code execution, in attacks that rely on publicly available proof-of-concept exploit code.

#bleepingcomputer #EN #2023 #Actively-Exploited #Apache-Struts #PoC #Proof-of-Concept #RCE #Remote-Code-Execution #CVE-2023-50164

·bleepingcomputer.com·Dec 13, 2023

Hackers are exploiting critical Apache Struts flaw using public PoC

Exploit available for critical bug in VM2 JavaScript sandbox library

Proof-of-concept exploit code has been released for a recently disclosed critical vulnerability in the popular VM2 library, a JavaScript sandbox that is used by multiple software to run code securely in a virtualized environment.

#bleepingcomputer #Code-Execution #Sandbox #Sandbox-Escape #JavaScript #Virtualization #VM2 #PoC #CVE-2023-29017

·bleepingcomputer.com·Apr 7, 2023

Exploit available for critical bug in VM2 JavaScript sandbox library

Proof-of-concept exploit code has been released for a recently disclosed critical vulnerability in the popular VM2 library, a JavaScript sandbox that is used by multiple software to run code securely in a virtualized environment.

#bleepingcomputer #Code-Execution #Sandbox #Sandbox-Escape #JavaScript #Virtualization #VM2 #PoC #CVE-2023-29017

·bleepingcomputer.com·Apr 7, 2023

Exploit available for critical bug in VM2 JavaScript sandbox library