PoC Available Archives

5 Min Read

October 7, 2025

CrowdStrike Identifies Campaign Targeting Oracle E-Business Suite via Zero-Day Vulnerability (now tracked as CVE-2025-61882)

CrowdStrike is tracking a mass exploitation campaign almost certainly leveraging a novel zero-day vulnerability — now tracked as…

3 Min Read

October 7, 2025

Clop raid on Oracle E-Business Suite started months ago, researchers warn

Security boffins say the Clop cybercriminal gang has been rummaging through Oracle's E-Business Suite (EBS) for months – and now the…

2 Min Read

October 7, 2025

CrowdStrike Warns of New Mass Exploitation Campaign Leveraging Oracle E-Business Suite 0-Day

A widespread campaign observed exploiting a novel zero-day vulnerability in Oracle E-Business Suite (EBS) applications, now tracked as…

2 Min Read

October 7, 2025

Cisco ASA/FTD 0-Day Vulnerability Exploited for Authentication Bypass – PoC Released

Cisco has released advisories for a zero-day exploit chain affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall…

3 Min Read

October 3, 2025

CommetJacking attack tricks Comet browser into stealing emails

A new attack called 'CometJacking' exploits URL parameters to pass to Perplexity's Comet AI browser hidden instructions that allow…

2 Min Read

October 3, 2025

Researcher Details Zero-Day Linux/Android Kernel Flaw (CVE-2025-38352)

researcher StreyPaws has published an in-depth analysis of CVE-2025-38352, a Time-of-Check to Time-of-Use (TOCTOU) race condition in the…

2 Min Read

October 2, 2025

Google Patches “Gemini Trifecta” Vulnerabilities in Gemini AI Suite

Cybersecurity researchers at Tenable recently discovered three critical security flaws within Google’s Gemini AI assistant suite, which…

2 Min Read

October 2, 2025

Critical Flaw in Termix Docker Image (CVE-2025-59951) Leaks SSH Credentials Without Authentication

The Termix project has disclosed a critical authentication bypass in its official Docker image, exposing sensitive SSH configuration data…

2 Min Read

October 2, 2025

Chrome 141 Stable Channel Update Patches High-Severity Vulnerabilities (CVE-2025-11205 & CVE-2025-11206)

The Chrome team has announced the promotion of Chrome 141 to the Stable Channel for Windows, Mac, and Linux. The release—version…

2 Min Read

October 2, 2025

Django Security Alert: High-Severity SQL Injection Flaw (CVE-2025-59681) Fixed in Latest Updates

The Django team has issued new releases for the popular Python web framework, addressing two that could lead to SQL injection and directory…

10 Min Read

October 1, 2025

Cyber Brief 25-10 – September 2025

Cyber Brief (September 2025)October 1, 2025 - Version: 1TLP:CLEARExecutive summaryWe analysed 285 open source reports for this Cyber Security…

4 Min Read

September 30, 2025

$50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections

A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the…

2 Min Read

September 30, 2025

Chinese hackers exploiting VMware zero-day since October 2024

Broadcom has patched a high-severity privilege escalation vulnerability in its VMware Aria Operations and VMware Tools software, which has…

2 Min Read

September 30, 2025

Threat Actors Allegedly Listed Veeam RCE Exploit for Sale on Dark Web

Veeam Backup & Replication, a cornerstone of many enterprises’ data protection strategy, has reportedly become the focus of a new…

2 Min Read

September 30, 2025

CISA warns of critical Linux Sudo flaw exploited in attacks

Hackers are actively exploiting a critical vulnerability (CVE-2025-32463) in the sudo package that enables the execution of commands with…

3 Min Read

September 29, 2025

China-linked RedNovember Campaign Shows Importance of Patching Edge Devices

A long-running threat campaign linked to a Chinese state-sponsored cyber-espionage group highlights the importance of patching and protecting…

7 Min Read

September 29, 2025

You name it, VMware elevates it (CVE-2025-41244)

On September 29th, 2025, Broadcom disclosed a local privilege escalation vulnerability, CVE-2025-41244, impacting VMware’s guest service…

2 Min Read

September 29, 2025

WhatsApp 0-Click Vulnerability Exploited Using Malicious DNG File

WhatsApp 0-click remote code execution (RCE) vulnerability affecting Apple’s iOS, macOS, and iPadOS platforms, detailed with a proof of…

3 Min Read

September 29, 2025

Google Project Zero Exposes ASLR Bypass Vulnerability in Apple’s Serialization Framework

Google Project Zero has revealed a new technique capable of bypassing Address Space Layout Randomization (ASLR) protections on Apple devices.…

3 Min Read

September 29, 2025

Formbricks Signature Verification Vulnerability Let Attackers Reset User Passwords Without Authorization

A critical security flaw discovered in Formbricks, an open-source experience management platform, demonstrates how missing JWT signature…

3 Min Read

September 29, 2025

Notepad++ DLL Hijacking Vulnerability Let Attackers Execute Malicious Code

A newly discovered DLL hijacking vulnerability in Notepad++, the popular source code editor, could allow attackers to execute arbitrary code…

3 Min Read

September 29, 2025

RedNovember: Chinese APT Expands Global Espionage to U.S. Defense, Aerospace, and Tech Firms

A new report from Recorded Future’s Insikt Group reveals that the Chinese state-sponsored threat group RedNovember has significantly…

2 Min Read

September 29, 2025

DLL Hijacking Flaw (CVE-2025-56383) Found in Notepad++, Allowing Arbitrary Code Execution, PoC Available

A newly disclosed in Notepad++ v8.8.3 has been assigned CVE-2025-56383. The , rated CVSS 6.5, allows attackers to hijack Notepad++’s DLL…

8 Min Read

September 28, 2025

Prompt Injection and Model Poisoning: The New Plagues of AI Security

You wake up. Your AI wakes up. Somewhere, a stranger types a sentence, and your AI listens. This is not science fiction. This is the…

12 Min Read

September 28, 2025

Cybersecurity Weekly – Chrome 0-Day, 22.2 Tbps DDOS Attack, Kali Linux Release, Cisco IOS 0-Day and More

This week in cybersecurity was marked by a relentless pace of critical disclosures and unprecedented attack volumes, underscoring the…

2 Min Read

September 27, 2025

CVE-2025-59934: Critical Flaw in Formbricks Allows Unauthorized Password Resets via Forged JWT Tokens

The Formbricks project, an open-source platform for building in-app and website surveys, has released an urgent patch addressing a critical…

7 Min Read

September 26, 2025

Customer Authentication Challenges That Impact Your Organization’s Security Posture

Introduction In today’s cybersecurity landscape, CISOs face the challenge of securing data while managing costs effectively. As cyber…

4 Min Read

September 26, 2025

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions

Car makers don't trust blueprints. They smash prototypes into walls. Again and again. In controlled conditions. Because design specs don't…

3 Min Read

September 25, 2025

ForcedLeak Flaw in Salesforce Agentforce AI Agent Exposed CRM Data

A vulnerability dubbed ForcedLeak was recently discovered in Salesforce Agentforce, an AI-driven system designed to handle complex business…

Security

2 Min Read

September 24, 2025

New Supermicro BMC flaws can create persistent backdoors

Two vulnerabilities affecting the firmware of Supermicro hardware, including Baseboard Management Controller (BMC) allow attackers to…

Security

2 Min Read

September 24, 2025

Cisco warns of IOS zero-day vulnerability exploited in attacks

Cisco has released security updates to address a high-severity zero-day vulnerability in Cisco IOS and IOS XE Software that is currently being…

3 Min Read

September 24, 2025

Unpatched flaw in OnePlus phones lets rogue apps text messages

A vulnerability in multiple versions of OxygenOS, the Android-based operating system from OnePlus, allows any installed app to access SMS data…

5 Min Read

September 24, 2025

Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models

Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the…

1 Min Read

September 24, 2025

SolarWinds fixes critical Web Help Desk RCE vulnerability (CVE-2025-26399)

SolarWinds has fixed yet another unauthenticated remote code execution vulnerability (CVE-2025-26399) in Web Help Desk (WHD), its popular…

3 Min Read

September 24, 2025

Chrome High-severity Vulnerabilities Let Attackers Access Sensitive Data and Crash System

Google has issued an urgent security update for its Chrome web browser to address three high-severity vulnerabilities that could allow…

2 Min Read

September 24, 2025

Google Chrome Patches Three High-Severity Flaws in V8 Engine

Google has released a Stable Channel Update for Desktop with builds 140.0.7339.207/.208 for Windows and Mac and 140.0.7339.207 for Linux. The…

Security

2 Min Read

September 23, 2025

CISA says hackers breached federal agency using GeoServer exploit

CISA has revealed that attackers breached the network of an unnamed U.S. federal civilian executive branch (FCEB) agency last year after…

Security

2 Min Read

September 22, 2025

American Archive of Public Broadcasting fixes bug exposing restricted media

A vulnerability in the American Archive of Public Broadcasting's website allowed downloading of protected and private media for…

Security

2 Min Read

September 22, 2025

New EDR-Freeze tool uses Windows WER to suspend security software

A new method and proof-of-concept tool called EDR-Freeze demonstrates that evading security solutions is possible from user mode with…

4 Min Read

September 22, 2025

VMScape attack | Kaspersky official blog

A team of researchers at the Swiss Federal Institute of Technology in Zurich (ETH Zurich) has published a research paper demonstrating how a…

24 Min Read

September 22, 2025

Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More

The security landscape now moves at a pace no patch cycle can match. Attackers aren't waiting for quarterly updates or monthly…

3 Min Read

September 22, 2025

Microsoft Entra ID Exposed: Actor Token Flaw Enables Stealthy Global Admin Takeove

A newly disclosed vulnerability tracked as CVE-2025-55241 has been reported. The flaw, discovered by an independent researcher and disclosed…