Critical VMware vCenter Server Vulnerabilities Patched
Broadcom has issued security fixes for VMware vCenter Server software products, to fix several vulnerabilities of critical and high severity. The security fixes, released today, [more…]
UwU Lend Announces $5M Bounty to Catch Hacker
The decentralized lending blockchain protocol UwU Lend has announced a $5 million bounty reward to anyone who can provide information leading to the identification and [more…]
Testing and Exploiting SolarWinds Serv-U (CVE-2024-28995) Vulnerability
The newly discovered directory traversal security flaw in SolarWinds Serv-U (CVE-2024-28995) is extremely easy to exploit remotely. By simply sending a crafted HTTP request, an [more…]
Pro-Palestinian Hackers Claim Access to Israeli State Secrets
An anonymous pro-Palestinian hacking group known as ‘Anonymous for Justice’ has claimed responsibility for hacking into the systems of Israel’s national cyber directorate According to [more…]
POC Released for Veeam Authentication Bypass CVE-2024-29849
Recently, a critical vulnerability has been discovered in Veeam Backup Enterprise Manager, a popular backup solution for managing backups across various environments. This vulnerability, identified [more…]
Commando Cat: A Sophisticated Cryptojacking Attack Campaign
Trend Micro has identified an active cryptojacking campaign that exploits exposed Docker remote API servers to deploy cryptocurrency miners. Dubbed “Commando Cat,” this attack campaign [more…]
ShinyHunters’ Latest Hack: Ticketmaster Customers’ Personal Data Stolen
The personal data of Canadian Ticketmaster customers may have been compromised. A sample of the hacked data shared with Global News Channel. The shared samples, [more…]
Exploits Out: PHP RCE Flaw CVE-2024-4577
A new critical remote code execution (RCE) vulnerability has been discovered in PHP, affecting all versions affects all PHP versions PHP since 5.x that are [more…]
New Local Root Vulnerability Exploit for MacOS CVE-2024-27822
A security researcher, Mykola Grymalyuk, has published details and a proof-of-concept (PoC) code for a macOS vulnerability, CVE-2024-27822, which allows attackers to gain root privileges [more…]
CVE-2024-21683: A Critical Confluence Vulnerability
A new critical security vulnerability has been discovered in multiple versions of Atlassian’s Confluence Server and Data Center products. The flaw, assigned CVE-2024-21683, is a [more…]