#securityvulnerability

Inside CVE-2025-14733: The Unauthenticated RCE Hitting WatchGuard Firewalls Analysis of CVE-2025-14733, a critical WatchGuard Firebox vulnerability. Learn why unauthenticated RCE persists even after deleting vulnerable VPN configurations.

2 months ago

Security administrators worldwide are rushing to patch a critical security vulnerability in WatchGuard Firebox appliances tracked as CVE-2025-14733.

#SecurityLand #CyberWatch #ZeroDay #Watchguard #SecurityVulnerability #Firewall #CVE

Read More: www.security.land/watchguard-c...

3 1 0 0

Pure Tech

@puretech.news

3 months ago

Research claims legacy .NET proxy behavior creates fresh path to remote system compromise New research out today from cybersecurity company watchTowr Pte. Ltd. details a new class of vulnerabilities in the .NET Framework that can allow attackers to weaponize standard SOAP client proxies for...

Research claims legacy .NET proxy behavior creates fresh path to remote system compromise #Technology #Cybersecurity #NetFramework #RemoteAccess #SecurityVulnerability

1 0 0 0

Critical Flaws Discovered in Ivanti EPM Endpoint Management Software Ivanti Endpoint Manager faces four security vulnerabilities, including a critical 9.6 CVSS flaw. Updates now available for EPM users.

3 months ago

Ivanti Endpoint Manager faces four security vulnerabilities, including a critical 9.6 CVSS flaw. Updates now available for EPM users.

#SecurityLand #CyberWatch #SecurityVulnerability #Ivanti #EPM #CVSS #CVE #XSS

Read More: www.security.land/critical-fla...

2 0 0 0

Exotaur

@exotaur.mastodon.online.ap.brid.gy

5 months ago

tfw most of the games you have installed run on Unity #Unity #VideoGames #Gaming #Games #SecurityVulnerability

1 1 0 0

CISA Orders Agencies to Mitigate Cisco ASA Zero-Day Exploitation | Security Land CISA issues Emergency Directive 25-03 as Cisco ASA zero-days (CVE-2025-20333, CVE-2025-20362) face active exploitation.

5 months ago

CISA issued Emergency Directive 25-03 after threat actors exploited Cisco ASA zero-days, including RCE and privilege escalation flaws.

#SecurityLand #CyberWatch #CISA #Cisco #ZeroDay #RCE #SecurityVulnerability

Read More: www.security.land/cisa-orders-...

3 0 0 0

Critical RCE Vulnerability Found in Control Web Panel | Security Land Critical flaw in Control Web Panel (CVE-2025-48703) lets attackers bypass authentication and execute commands remotely.

5 months ago

A critical RCE vulnerability in Control Web Panel (CVE-2025-48703) allows remote command execution. Patch to version 0.9.8.1205 immediately.

#SecurityLand #CyberWatch #SecurityVulnerability #RCE #CVE #CWP #ControlWebPanel

Read More: www.security.land/critical-rce...

4 0 0 0

Cisco Releases Security Advisories for IOS and IOS XE Vulnerabilities | Security Land Cisco warns of IOS and IOS XE flaws, including CVE-2025-20352, urging users to update before attackers exploit them.

5 months ago

Cisco has disclosed 13 IOS and IOS XE vulnerabilities, including CVE-2025-20352, which is already being exploited. Immediate updates are strongly advised.

#SecurityLand #CyberWatch #Cisco #SecurityVulnerability #CVE #PatchNow

Read More: www.security.land/cisco-releas...

2 0 0 0

@twosevenonethree.bsky.social

5 months ago

A Security Bypass via Social Login vulnerability in Case Theme User plugin for WordPress was reported on May 31st, 2025, affecting 12,000+ sites. Attackers could access accounts. #WordPress #SecurityVulnerability www.wordfence.com/blog/2025/09/attackers-a...

0 0 0 0

Two Seven One Three

5 months ago

EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State EDR-Freeze exploits the vulnerability of WerFaultSecure to suspend the processes of EDRs and Antimalware, halting the operation of Antivirus and EDR

Detailed analysis of the techniques used in the EDR-Freeze tool and how the #securityvulnerability of Windows Error Reporting is exploited to halt the operation of #antimalware
#cybersecurity
www.zerosalarium.com/2025/09/EDR-...

1 1 0 0

Two Seven One Three

@twosevenonethree.bsky.social

5 months ago

We can exploit the #securityvulnerability of Windows Error Reporting to put EDRs and #antimalware into a coma-like state.
By using the EDR-Freeze #redteam tool:
Github: TwoSevenOneT/EDR-Freeze

2 0 1 0

Ars Technica News

@arstechni.ca

5 months ago

Microsoft’s Entra ID vulnerabilities could have been catastrophic https://arstechni.ca #securityvulnerability #cloudvulnerability #syndication #microsoft #Security

0 0 0 0

6 months ago

15,000 WordPress sites at risk due to Privilege Escalation flaw in Dokan Pro plugin. Attackers can seize control by changing passwords. #WordPress #SecurityVulnerability www.wordfence.com/blog/2025/08/15000-wordp...

0 1 0 0

7 months ago

nginx

#nginx 1.29.1 (dev) has been released ( #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13 / #CVE / #SecurityVulnerability ) nginx.org

0 1 0 0

7 months ago

A vulnerability in the Alone WordPress theme allowed remote code execution through Arbitrary File Upload. After disclosure, attackers exploited it before the patch, blocked by Wordfence Firewall. #WordPress #SecurityVulnerability. www.wordfence.com/blog/2025/07/attackers-a...

0 0 0 0

Welcome! - The Apache HTTP Server Project

7 months ago

#ApacheHTTPd 2.4.65 has been released ( #Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability ) httpd.apache.org

0 0 0 0

Welcome! - The Apache HTTP Server Project

8 months ago

#ApacheHTTPd 2.4.64 has been released ( #Web / #Webserver / #http2 / #httpd / #Apache / #HTTPServer / #TLS13 / #ApacheSoftwareFoundation / #ASF / #CVE / #SecurityVulnerability ) httpd.apache.org

0 0 0 0

OuttaTune: Bypassing Conditional Access in Microsoft Intune Exposing how Microsoft Intune's device filtering can be trivially bypassed to evade Conditional Access controls.

8 months ago

Critical vulnerability in Forminator plugin for WordPress allows for arbitrary file deletion, impacting over 600,000 sites. #WordPress #SecurityVulnerability www.wordfence.com/blog/2025/07/600000-word...

0 0 0 0

Graham

@cirriustech.co.uk

10 months ago

I uncovered a trivial to execute bypass of Conditional Access via Microsoft Intune - if you are using device filters, you need to read this now!

#Microsoft #Entra #Intune #ConditionalAccess #SecurityFeatureBypass #SecurityVulnerability #MSRC

cirriustech.co.uk/blog/outtatu...

7 5 0 1

GitHub - GNOME/libxml2: Read-only mirror of https://gitlab.gnome.org/GNOME/libxml2 Read-only mirror of https://gitlab.gnome.org/GNOME/libxml2 - GNOME/libxml2

11 months ago

#libxml2 2.14.1 has been released ( #Xmlsoft / #libxml / #XML / #ExtensibleMarkupLanguage / #CVE / #SecurityVulnerability ) github.com/GNOME/libxml2

2 0 0 0