Attackers are leveraging Cisco Smart Licensing Utility static admin credentials (CVE-2024-20439)
Attackers are leveraging Cisco Smart Licensing Utility static admin credentials (CVE-2024-20439) CVE-2024-20439, a static credential vulnerability in the Cisco Smart Licensing Utility, is being exploited by attackers in the wild, CISA has confirmed on Monday by adding the flaw to its Known Exploi … Read more Published Date: Apr 03, 2025 (2 hours, 44 minutes ago) Vulnerabilities […]
Hackers Actively Scanning for Juniper’s Smart Router With Default Password
Hackers Actively Scanning for Juniper’s Smart Router With Default Password Recent network monitoring data from SANS reveals a significant spike in targeted scans seeking to exploit default credentials in Juniper Networks’ Session Smart Router (SSR) platform. Security researc … Read more Published Date: Apr 03, 2025 (2 hours, 49 minutes ago) Vulnerabilities has been mentioned in this […]
CVE-2025-2299 – LuckyWP Table of Contents CSRF Vulnerability
CVE ID : CVE-2025-2299 Published : April 3, 2025, 12:15 p.m. | 1 hour, 34 minutes ago Description : The LuckyWP Table of Contents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.10. This is due to missing or incorrect nonce validation on the ‘ajaxEdit’ function. This makes it […]
Google’s Quick Share for Windows Vulnerability Let Attackers Remote Code
Google’s Quick Share for Windows Vulnerability Let Attackers Remote Code Critical vulnerabilities in Google’s Quick Share file transfer utility for Windows allowed attackers to achieve remote code execution (RCE) without user interaction. The flaws exposed millions of Wind … Read more Published Date: Apr 03, 2025 (1 hour, 43 minutes ago) Vulnerabilities has been mentioned in this […]
Multiple Jenkins Plugins Vulnerability Let Attackers Access Sensitive Information
Multiple Jenkins Plugins Vulnerability Let Attackers Access Sensitive Information The Jenkins project has disclosed multiple security vulnerabilities affecting its core platform and several plugins, exposing organizations to potential data breaches and code execution attacks. Eight … Read more Published Date: Apr 03, 2025 (1 hour, 59 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-31728 CVE-2025-31727 […]
CISA’s Latest Advisories Expose High-Risk Vulnerabilities in Industrial Control Systems
CISA’s Latest Advisories Expose High-Risk Vulnerabilities in Industrial Control Systems The Cybersecurity and Infrastructure Security Agency (CISA) issued two crucial Industrial Control Systems (ICS) advisories, highlighting vulnerabilities that could have serious impacts on critical inf … Read more Published Date: Apr 03, 2025 (2 hours, 51 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-1268 CVE-2025-26512 […]
Google Quick Share Bug Bypasses Allow Zero-Click File Transfer
Google Quick Share Bug Bypasses Allow Zero-Click File Transfer Source: Jolanta Dąbrowska via Alamy Stock PhotoBLACK HAT ASIA – Singapore Two crucial links in a patched remote code execution (RCE) exploit chain that allowed cyberattackers to send malware to a vict … Read more Published Date: Apr 03, 2025 (5 hours, 24 minutes ago) Vulnerabilities has been […]
WinRAR-lek laat aanvaller waarschuwing Mark-of-the-Web omzeilen
WinRAR-lek laat aanvaller waarschuwing Mark-of-the-Web omzeilen Een kwetsbaarheid in WinRAR maakt het mogelijk voor aanvallers om de beveiligingswaarschuwing Mark-of-the-Web te omzeilen, wat kan leiden tot het uitvoeren van willekeurige code op het systeem van de … Read more Published Date: Apr 03, 2025 (2 hours, 18 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-31334
CVE-2024-53868 – Apache Traffic Server Chunked Request Smuggling Vulnerability
The following table lists the changes that have been made to the CVE-2024-53868 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Apr. 03, 2025 Action […]
Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent
Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent Data Privacy / Vulnerability Cybersecurity researchers have disclosed details of a new vulnerability impacting Google’s Quick Share data transfer utility for Windows that could be exploited to achieve … Read more Published Date: Apr 03, 2025 (3 hours, 24 minutes ago) Vulnerabilities has been mentioned in […]