Vulnerability

Hackers Exploiting Microsoft WSUS Vulnerability In The Wild – 2800 Instances Exposed Online

Hackers are actively exploiting a critical flaw in Microsoft's Windows Server Update Services (WSUS), with security researchers reporting widespread attempts…

4 weeks ago

HP OneAgent Update Brokes Trust And Disconnect Devices From Entra ID

The HP OneAgent software update has disconnected Windows devices from Microsoft Entra ID. As a result, users can no longer…

4 weeks ago

Hackers Exploiting Adobe Magento RCE Vulnerability Exploited in the Wild – 3 in 5 Stores Vulnerable

Hackers have begun actively targeting a critical remote code execution flaw in Adobe's Magento e-commerce platform, putting thousands of online…

4 weeks ago

CISA Warns of Motex LANSCOPE Endpoint Manager Vulnerability Actively Exploited in the Wild

CISA has issued a critical alert regarding a severe vulnerability in Motex LANSCOPE Endpoint Manager, a popular tool for managing…

4 weeks ago

TARmageddon Vulnerability In Rust Library Let Attackers Replace Config Files And Execute Remote Codes

A severe vulnerability in the async-tar Rust library and its popular forks, including the widely used tokio-tar. Dubbed TARmageddon and…

4 weeks ago

Chinese Hackers Exploiting ToolShell Vulnerability To Compromise Networks Of Government Agencies

China-based threat actors have exploited the critical ToolShell vulnerability in Microsoft SharePoint servers to infiltrate networks across multiple continents, targeting…

4 weeks ago

Critical Vulnerability In Oracle E-Business Suite’s Marketing Product Allows Full Access To Attackers

Oracle has disclosed two critical vulnerabilities in its E-Business Suite's Marketing product that could hand full control to remote attackers.…

4 weeks ago

Apache Syncope Groovy RCE Vulnerability Let Attackers Inject Malicious Code

Apache Syncope, an open-source identity management system, has been found vulnerable to remote code execution (RCE) through its Groovy scripting…

1 month ago

ZYXEL Authorization Bypass Vulnerability Let Attackers View and Download System Configuration

A critical vulnerability in Zyxel’s ATP and USG series firewalls allows attackers to bypass authorization controls and access sensitive system…

1 month ago

Dolby Digital Plus 0-Click Vulnerability Enables RCE Attack via Malicious Audio on Android

A critical zero-click vulnerability in Dolby Digital Plus (DDP) audio decoding software has been disclosed, allowing attackers to execute malicious…

1 month ago