Exploit Archives - Page 11 of 15

Fortinet says the SSL-VPN pre-auth RCE bug is exploited in attacks

Fortinet urges customers to patch their appliances against an actively exploited FortiOS SSL-VPN vulnerability that could allow unauthenticated remote code execution on devices

14 December

Hackers exploit critical Citrix ADC and Gateway zero-day

12/14/2022
Cyber News
0day, Exploit, Hacking, Patching, Security

This new vulnerability allows an unauthenticated attacker to execute commands remotely on vulnerable devices and take control of them

14 December

Google Chrome Flaw Added to CISA Patch List

Google has already released a fixed version of Chrome browser for Windows, Mac, and Linux users. CISA has given government agencies until Dec. 26 to get a patch

10 December

Experts created a technique to bypass web application firewalls (WAF) of several major vendors

Researchers have verified that the bypass attack technique has worked against firewalls from multiple vendors, including Cloudflare, F5, Imperva, and Palo Alto Networks

9 December

Cisco discloses high-severity IP phone bug with exploit code

Cisco has disclosed today a high-severity vulnerability affecting the latest generation of its IP phones and exposing them to remote code execution and denial of service (DoS) attacks

8 December

Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Sophos addressed several vulnerabilities affecting its Sophos Firewall version 19.5, including arbitrary code execution issues

7 December

New RansomExx Ransomware Variant Rewritten in Rust

RansomExx is yet another major ransomware family to switch to Rust in 2022

25 November

Actively Exploited Zero-Day Flaw in Chrome Browser Patch Now

Tracked as CVE-2022-4135, the high-severity vulnerability has been described as a heap buffer overflow in the GPU component

25 November

Nighthawk Likely to Become Hackers’ New Post-Exploitation Tool After Cobalt Strike

A nascent and legitimate penetration testing framework known as Nighthawk will likely gain threat actors' attention for its Cobalt Strike-like capabilities

23 November

Malware Installs Malicious Browser Extensions to Steal Users’ Passwords and Cryptos

11/23/2022
Cyber News
Exploit, Hacking, Malware, RCE, Security

The distribution vector used to propagate ViperSoftX is typically achieved through cracked software for Adobe Illustrator and Microsoft Office that are hosted on file-sharing sites

23 November

Exploit Archives - Page 11 of 15 - CyberConvoy Blog