unauthenticated access

From Cyber Security News – CrushFTP Vulnerability Exploited in Attacks Following PoC Release

Security researchers have confirmed active exploitation attempts targeting the critical authentication bypass vulnerability in CrushFTP (CVE-2025-2825) following the public release of proof-of-concept exploit code. Based on Shadowserver Foundation’s most recent…

shaikh Saqib April 1, 2025

News

From Cyber Security News – CISA Warns of Cisco Smart Licensing Utility Credential Vulnerability Exploited in Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Cisco vulnerability to its Known Exploited Vulnerabilities (KEV) catalog following confirmation of active exploitation in the wild. The flaw,…

shaikh Saqib April 1, 2025

News

From Cyber Security News – Apache Pinot Vulnerability Let Attackers Bypass Authentication

A critical security vulnerability (CVE-2024-56325) in Apache Pinot, the open-source distributed OLAP datastore used by LinkedIn, Uber, and Microsoft for real-time analytics, allows unauthenticated attackers to bypass authentication controls and…

shaikh Saqib March 12, 2025

News

From Cyber Security News – Critical MITRE Caldera Vulnerability Let Attackers Execute Remote Code – PoC Released

A critical remote code execution (RCE) vulnerability (CVE-2025–27364) has been identified in all versions of MITRE Caldera prior to commit 35bc06e, exposing systems to potential compromise via unauthenticated attackers. The…

shaikh Saqib February 25, 2025

News

From Security Week – Xerox Versalink Printer Vulnerabilities Enable Lateral Movement

[[{"value":"Xerox released security updates to resolve pass-back attack vulnerabilities in Versalink multifunction printers. The post Xerox Versalink Printer Vulnerabilities Enable Lateral Movement appeared first on SecurityWeek."}]] Read More

shaikh Saqib February 17, 2025