Tag Archive

A sweeping vulnerability has been uncovered, leaving an estimated 167,500 instances across various networks susceptible to a Loop Denial of Service (DoS) attack. This discovery underscores the ever-present and evolving threats in the digital landscape, prompting an urgent call to …

The Pwn2Own Vancouver 2024 has come to an end, with researchers receiving a total of $1,132,500 for uncovering 29 distinct zero-day vulnerabilities.  Manfred Paul has been granted the title of Pwn Master. In all, he earned $202,500 and 25 points. …

Despite JavaScript’s widespread use, writing secure code remains challenging, leading to web application vulnerabilities. Experiments on real-world vulnerabilities show LLMs hold promise for automated JavaScript program repair, but achieving correct fixes frequently requires providing an appropriate amount of contextual information …

A critical Bamboo Data Center and Server vulnerability has been discovered with a critical vulnerability which has been given CVE-2024-1597 and the severity was given as 10.0 (Critical). This particular vulnerability was specifically mentioned by Atlassian that it is a …

Researchers at Akamai have unveiled a new technique that could potentially put millions of Windows domains at risk. This technique exploits the Dynamic Host Configuration Protocol (DHCP) administrators group to escalate privileges within Active Directory (AD) environments, a cornerstone of …

A threat actor has announced the sale of an exploit targeting a vulnerability in Foxit Reader, a widely used PDF viewer. This vulnerability could potentially allow remote code execution, posing a significant risk to millions of users worldwide. Foxit has …

Ivanti has been discovered with a new vulnerability on Ivanti Standalone Sentry that is associated with Remote code execution. The CVE for this vulnerability has been assigned with CVE-2023-41724, and the severity was given as 9.6 (Critical). However, Ivanti has …