Home

SonicWall Flaws Enable Remote Code Execution
Gallery
SonicWall Flaws Enable Remote Code Execution

vulnerability, Internet Security, Remote code execution, Security Advisory, Security Update

SonicWall Flaws Enable Remote Code Execution

SonicWall warns of critical flaws in SMA 100 series appliances, enabling remote code execution, authentication bypass, and system compromise. SonicWall advises users to update their SMA 200, 210, 400, 410, [...]

By FHN| December 6th, 2024|vulnerability, Internet Security, Remote code execution, Security Advisory, Security Update|0 Comments

HCL DevOps Deploy & Launch Vulnerable to HTML Injection
Gallery
HCL DevOps Deploy & Launch Vulnerable to HTML Injection

vulnerability, Internet Security, Security Advisory, Security Update, Tips

HCL DevOps Deploy & Launch Vulnerable to HTML Injection

A newly discovered vulnerability in HCL Software's DevOps Deploy and Launch platforms, CVE-2024-42195, allows attackers to insert arbitrary HTML tags into the web UI, which could expose sensitive information. CVE-2024-42195 [...]

By FHN| December 6th, 2024|vulnerability, Internet Security, Security Advisory, Security Update, Tips|0 Comments

ChatGPT Next Web Vulnerability Allows SSRF Exploits via Endpoint
Gallery
ChatGPT Next Web Vulnerability Allows SSRF Exploits via Endpoint

Tips, Exploitation, Internet Security, Mobile Security, Security Advisory, Security Update, vulnerability

ChatGPT Next Web Vulnerability Allows SSRF Exploits via Endpoint

Researchers reported CVE-2023-49785, a critical ChatGPT Next Web (NextChat) vulnerability, raising cybersecurity concerns over its SSRF exploitation potential. NextChat is a web interface for large language models (LLMs) like ChatGPT, [...]

By FHN| December 5th, 2024|Tips, Exploitation, Internet Security, Mobile Security, Security Advisory, Security Update, vulnerability|0 Comments

ElizaRAT Uses Google, Telegram, & Slack for C2 Communications
Gallery
ElizaRAT Uses Google, Telegram, & Slack for C2 Communications

BOTNET, Compromised, Exploitation, Internet Security, Security Advisory, Security Update

ElizaRAT Uses Google, Telegram, & Slack for C2 Communications

APT36, a Pakistani cyber-espionage group, now uses ElizaRAT, a Windows RAT with advanced evasion and C2 features, to target Indian government, diplomats, and military. APT36 uses Windows, Linux, and Android [...]

By FHN| December 4th, 2024|BOTNET, Compromised, Exploitation, Internet Security, Security Advisory, Security Update|0 Comments

Hackers Exploit Windows Event Logs for Manipulation and Data Theft
Gallery
Hackers Exploit Windows Event Logs for Manipulation and Data Theft

BOTNET, Compromised, Exploitation, Internet Security, Security Advisory, Security Update, Tips

Hackers Exploit Windows Event Logs for Manipulation and Data Theft

Hackers exploit wevtutil.exe for LOLBAS attacks, enabling command execution, payload downloads, and persistence while bypassing security. wevtutil.exe is a Windows tool for managing event logs, but attackers can misuse it [...]