PoC

PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258)

June 29, 2023

An authentication bypass vulnerability (CVE-2023-26258) in the Arcserve Unified Data Protection (UDP) enterprise data protection solution can be exploited to compromise admin …

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178)

June 23, 2023

Proof-of-concept (PoC) exploit code for the high-severity vulnerability (CVE-2023-20178) in Cisco Secure Client Software for Windows and Cisco AnyConnect Secure Mobility …

VMware fixes critical flaws in Aria Operations for Networks (CVE-2023-20887)

June 15, 2023

VMware has fixed two critical (CVE-2023-20887, CVE-2023-20888) and one important vulnerability (CVE-2023-20889) in Aria Operations for Networks (formerly vRealize Network …

PoC exploit for exploited MOVEit vulnerability released (CVE-2023-34362)

June 13, 2023

As more victim organizations of Cl0p gang’s MOVEit rampage continue popping up, security researchers have released a PoC exploit for CVE-2023-34362, the RCE …

Zyxel firewalls under attack by Mirai-like botnet

June 1, 2023

CVE-2023-28771, the critical command injection vulnerability affecting many Zyxel firewalls, is being actively exploited by a Mirai-like botnet, and has been added to …

Vulnerability in Zyxel firewalls may soon be widely exploited (CVE-2023-28771)

May 22, 2023

A recently fixed command injection vulnerability (CVE-2023-28771) affecting a variety Zyxel firewalls may soon be exploited in the wild, Rapid7 researchers have warned, after …

Cisco fixes critical flaws in Small Business Series Switches

May 18, 2023

Nine vulnerabilities – 4 of them critical – have been found in a variety of Cisco Small Business Series Switches. PoC exploit code is available (but not public), …

KeePass flaw allows retrieval of master password, PoC is public (CVE-2023-32784)

May 17, 2023

A vulnerability (CVE-2023-32784) in the open-source password manager KeePass can be exploited to retrieve the master password from the software’s memory, says the …

Advantech’s industrial serial device servers open to attack

May 15, 2023

Three vulnerabilities in Advantech’s EKI series of serial device servers could be exploited to execute arbitrary commands on the OS level. Source: CyberDanube The …

PoC exploit for abused PaperCut flaw is now public (CVE-2023-27350)

April 25, 2023

An unauthenticated RCE flaw (CVE-2023-27350) in widely-used PaperCut MF and NG print management software is being exploited by attackers to take over vulnerable application …

Prevent and detect Adobe ColdFusion exploitation (CVE-2023-26360, CVE-2023-26359)

April 4, 2023

When Adobe released security updates for its ColdFusion application development platform last month, it noted that one of the vulnerabilities (CVE-2023-26360) had been …

PoC exploit for recently patched Microsoft Word RCE is public (CVE-2023-21716)

March 6, 2023

A PoC exploit for CVE-2023-21716, a critical RCE vulnerability in Microsoft Word that can be exploited when the user previews a specially crafted RTF document, is now publicly …

PoC