Tag: vulnerability
A critical Docker Sandboxes bug opens the macOS host to guests
Code running inside a sandboxed AI agent's virtual machine could read and rewrite files anywhere on the Mac that launched…
Attackers hammer Orkes Conductor through an unauthenticated RCE hole
A workflow engine that many teams expose to the internet has been under active exploitation for a month, with no…
A long username is enough to crack Check Point management servers
Check Point has shipped an emergency fix for a flaw that lets anyone on the network run code as root…
Attackers breach Cisco ISE management interface through an API blind spot
Cisco's identity appliance is being hit through an API endpoint that never checked who was asking.
A stray quote in a file path gives Mac attackers root
JFrog researchers showed how one character in a crafted path turns a Parallels Desktop install into full control of a…
Acronis backup add-on flaw already exploited on Linux hosts
A privilege escalation bug in Acronis backup extensions for cPanel and WHM is under limited, targeted attack against hosting infrastructure.
Forged tokens breach a CVSS 10 flaw in WSO2’s API manager
Attackers are bypassing JWT authentication in WSO2 middleware that banks, telcos, and governments rely on to broker API traffic.
Two WordPress plugin bugs let attackers plant web shells
Wordfence and Defiant detail critical flaws in WooCommerce Wholesale Lead Capture and The Events Calendar, both reachable without credentials.