Researchers from China’s Pangu Lab have disclosed details of a “top-tier” backdoor put to use by the Equation Group, an advanced persistent threat (APT) with alleged ties to the cyber-warfare intelligence-gathering unit of the U.S. National Security A…
Users of Horde Webmail are being urged to disable a feature to contain a nine-year-old unpatched security vulnerability in the software that could be abused to gain complete access to email accounts simply by previewing an attachment.
“This gives the …
Another batch of 25 malicious JavaScript libraries have made their way to the official NPM package registry with the goal of stealing Discord tokens and environment variables from compromised systems, more than two months after 17 similar packages wer…
WebHMI 4.1.1 – Remote Code Execution (RCE) (Authenticated)
Student Record System 1.0 – ‘cid’ SQLi (Authenticated)
ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 – Remote File CRUD
aaPanel 6.8.21 – Directory Traversal (Authenticated)
Simple Real Estate Portal System 1.0 – ‘id’ SQLi
Microweber CMS 1.2.10 – Local File Inclusion (Authenticated) (Metasploit)
Type: WebinarsUkraine on High Alert: Denial-of-Service and Wiper AttacksRussian military incursion causes surge of cyberattacks on Ukrainian government entities and financial institutionsJoin Secureworks , for in-depth coverage of these recent developm…
