Lucene search
+L

6391 matches found

The Hacker News
The Hacker News
•added 2025/10/28 10:30 a.m.•12 views

Is Your Google Workspace as Secure as You Think it is?

The New Reality for Lean Security Teams If you’re the first security or IT hire at a fast-growing startup, you’ve likely inherited a mandate that’s both simple and maddeningly complex: secure the business without slowing it down. Most organizations using Google Workspace start with an environment...

5.7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/10/28 10:30 a.m.•16 views

Is Your Google Workspace as Secure as You Think it is?

The New Reality for Lean Security Teams If you're the first security or IT hire at a fast-growing startup, you've likely inherited a mandate that's both simple and maddeningly complex: secure the business without slowing it down. Most organizations using Google Workspace start with an environment...

6.7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/10/26 12:25 p.m.•234 views

Exploit for CVE-2025-62376

Improper Authentication in pwn.college DOJO Education Platform...

9.5CVSS6.1AI score0.00466EPSS
SaveExploits2
osv_go
osv_go
•added 2025/10/23 4:25 p.m.•19 views

GO-2025-3985 kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp...

7AI score
SaveExploits0References4
GithubExploit
GithubExploit
•added 2025/10/16 9:51 a.m.•265 views

Exploit for CVE-2025-62376

CVE-2025-62376: Local Privilege Escalation Exploit for Sudo...

9.5CVSS6.1AI score0.00466EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/10/16 9:50 a.m.•36 views

CVE-2025-62376

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...

9.5CVSS6.1AI score0.00466EPSS
SaveExploits2References1
Veracode
Veracode
•added 2025/10/16 6:37 a.m.•18 views

Missing Authorization Checks

typo3/cms-workspaces is vulnerable to missing authorization checks. The vulnerability is due to improper access control in the Workspace Module, which allows an attacker to directly invoke the AJAX backend route and disclose sensitive information without proper access permissions...

7.1CVSS5.9AI score0.00294EPSS
SaveExploits0References4Affected Software1
HackRead
HackRead
•added 2025/10/15 11:45 a.m.•16 views

Fake Google Job Offer Email Scam Targets Workspace and Microsoft 365 Users

Cybersecurity firm Sublime Security details a new credential phishing scam impersonating Google Careers to steal login details from Google Workspace and Microsoft 365 users...

6.9AI score
SaveExploits0
NVD
NVD
•added 2025/10/14 10:15 p.m.•62 views

CVE-2025-62376

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...

9.5CVSS0.00466EPSS
SaveExploits2References2
CVE
CVE
•added 2025/10/14 9:58 p.m.•48 views

CVE-2025-62376

The CVE-2025-62376 issue affects the pwn.college DOJO platform’s /workspace endpoint. The view_desktop flow retrieves the user via a URL parameter without confirming administrative privileges, enabling an attacker to specify any user ID and an arbitrary password to impersonate that user. When req...

9.5CVSS6.1AI score0.00466EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/10/14 9:58 p.m.•70 views

CVE-2025-62376 pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...

9.5CVSS0.00466EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2025/10/14 9:58 p.m.•26 views

CVE-2025-62376 pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...

9.5CVSS6.1AI score0.00466EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2025/10/14 9:58 p.m.•34 views

CVE-2025-62376 pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...

9.5CVSS6.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•27 views

PT-2025-42209

Name of the Vulnerable Software and Affected Versions pwn.college DOJO versions prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef Description The /workspace endpoint in pwn.college DOJO has an improper authentication issue. An attacker can access any active Windows VM without authorization...

9.5CVSS5.8AI score0.00466EPSS
SaveExploits2References10
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•24 views

DOJO 授权问题漏洞

DOJO is an open source JavaScript toolkit from pwn.college. DOJO suffers from an authorization issue vulnerability that stems from improper authentication of the /workspace endpoint, which could lead to unauthorized access to a Windows virtual machine...

9.5CVSS5.9AI score0.00466EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2005-1677

Malware in sbrugna...

4.6CVSS6.4AI score0.00969EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2009-1019

Malware in sbrugna...

5.5CVSS6.2AI score0.02219EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2005-1678

Malware in sbrugna...

6.8CVSS5.8AI score0.03022EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2007-5485

Malware in sbrugna...

6.5CVSS6.2AI score0.02032EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2009-0969

Malware in sbrugna...

6.5CVSS6.3AI score0.01442EPSS
SaveExploits1References6
Rows per page
Query Builder