18343 matches found
Airtel Xstream Fiber WiFi Weak Authentication / Brute Force Vulnerability
Exploit Title: Airtel Xstream Fiber WiFi - Usage of Weak Initial WiFi password Exploit Author: Alok kumar email protected, Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.airtel.in Product Link: https://www.airtel.in/wifi-plans Tested on: Airtel Xstream Fiber WiFi router with SSID...
CVE-2024-52975
creationtimestamp| type| source ---|---|--- 2025-01-22 16:02:59+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113872848727322418 2025-01-23 07:29:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113876493631662291 2025-01-23 08:03:12+00:00| seen|...
CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications
CISA, in partnership with the Federal Bureau of Investigation FBI, released Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications. This advisory was crafted in response to exploitation of vulnerabilities—CVE-2024-8963, an administrative bypass vulnerability; CVE-2024-9379, a...
Criminal IP and OnTheHub Partner to Deliver Advanced Cybersecurity Solutions for Education
Torrance, United States / California, 22nd January 2025, CyberNewsWire...
CVE-2025-21524
creationtimestamp| type| source ---|---|--- 2025-01-21 21:17:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrobymzh2j 2025-01-21 21:48:57+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113868546792768210 2025-01-22 15:49:21+00:00| seen|...
CVE-2025-21564
...
CVE-2025-21560
CVE-2025-21560 affects Oracle Agile PLM Framework (component: SDK) with vulnerable 9.3.6. A low-privilege, network-access attacker (HTTP) can compromise the framework, potentially gaining unauthorized access to critical data or all data accessible by Oracle Agile PLM Framework. Concrete details f...
CVE-2025-21552
CVE-2025-21552 affects JD Edwards EnterpriseOne Orchestrator (E1 IOT Orchestrator Security). Connected PT-2025-4274 details a vulnerability due to insufficient input validation in the E1 IOT Orchestrator Security component, with affected versions prior to 9.2.9.2.Impact: low-privilege attacker wi...
CVE-2025-21546
CVE-2025-21546 affects Oracle MySQL Server (Server: Privileges) with vulnerable ranges: 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The Nessus-based sources describe this as an easily exploitable, network-accessible vulnerability that can let a high-privileged attacker update, insert,...
CVE-2025-21540
...
Mass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai
The Qualys Threat Research Unit has uncovered a large-scale, ongoing operation within the Mirai campaign, dubbed Murdoc Botnet. This variant exploits vulnerabilities targeting AVTECH Cameras and Huawei HG532 routers. It demonstrates enhanced capabilities, exploiting vulnerabilities to compromise...
ZF Roll Stability Support Plus (RSSPlus)
RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely proximal/adjacent with RF equipment call diagnostic functions which could impact both the availability and integrity. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...
BELL-CVE-2023-52923
Bulletin has no description...
Biden Signs New Cybersecurity Order
President Biden has signed a new cybersecurity order. It has a bunch of provisions, most notably using the US governments procurement power to improve cybersecurity practices industry-wide. Some details: The core of the executive order is an array of mandates for protecting government networks...
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]
As the digital world becomes more complicated, the lines between national security and cybersecurity are starting to fade. Recent cyber sanctions and intelligence moves show a reality where malware and fake news are used as tools in global politics. Every cyberattack now seems to have deeper...
CVE-2023-24278
creationtimestamp| type| source ---|---|--- 2025-01-19 21:02:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pub7dg52h 2025-02-26 19:24:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5585...
U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon
The U.S. Treasury Department's Office of Foreign Assets Control OFAC has imposed sanctions against a Chinese cybersecurity company and a Shanghai-based cyber actor for their alleged links to the Salt Typhoon group and the recent compromise of the federal agency. "People's Republic of China-linked...
Python-Based Bots Exploiting PHP Servers Fuel Gambling Platform Proliferation
Cybersecurity researchers have exposed a new campaign that targets web servers running PHP-based applications to promote gambling platforms in Indonesia. "Over the past two months, a significant volume of attacks from Python-based bots has been observed, suggesting a coordinated effort to exploit...
Microsoft Active Directory Domain Services Elevation of Privilege Vulnerability (CNVD-2025-02127)
Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA for managing and organizing resources, users, computers, and other security objects in a network. A security vulnerability exists in Microsoft Active Directory Domain Services. An attacker could exploit the...