Exploitation

0-Day Vulnerability in 10,000 Web Apps Exploited with XSS Payloads 64062c342857c332a08594fe_zerodaycover

64062c342857c332a08594fe_zerodaycover

0-Day Vulnerability in 10,000 Web Apps Exploited with XSS Payloads

FHN June 13, 2024

A significant vulnerability, CVE-2024-37629, has been discovered in SummerNote 0.8.18, allowing Cross-Site Scripting (XSS) via the Code...

Critical Flaw in Apple Ecosystems Allows Unauthorized Access security-flaw-1024x576

security-flaw-1024x576

Critical Flaw in Apple Ecosystems Allows Unauthorized Access

FHN June 12, 2024

Hackers target Apple due to its large user base and wealthy customers, including business people and managers...

SSLoad Malware Utilizes MSI Installer to Initiate Delivery Chain gettyimages-1443520646

gettyimages-1443520646

SSLoad Malware Utilizes MSI Installer to Initiate Delivery Chain

FHN June 11, 2024

Malware distributors exploit MSI installers because Windows OS inherently trusts them to run with administrative rights, bypassing...

Biometric Terminal Exposed to QR Code SQL Injection Vulnerability Vulnerability-Management-Program-Best-Practices-1

Vulnerability-Management-Program-Best-Practices-1

Biometric Terminal Exposed to QR Code SQL Injection Vulnerability

FHN June 11, 2024

A popular ZKTeco biometric terminal has critical vulnerabilities, including an SQL injection flaw via QR codes. This...

PoC Exploit Released for Veeam Authentication Bypass Flaw 1680448488398

1680448488398

PoC Exploit Released for Veeam Authentication Bypass Flaw

FHN June 10, 2024

A PoC exploit has been released for the critical Veeam Backup Enterprise Manager authentication bypass vulnerability, CVE-2024-29849,...