Year: 2021

Anonymous hacked the controversial, far-right web host Epik

September 16, 2021

Anonymous claims to have hacked the controversial web hosting provider Epik, known for allowing far-right, neo-Nazi, and other extremist content....

OMIGOD vulnerabilities expose thousands of Azure users to hack

September 16, 2021

OMIGOD – Microsoft addressed four vulnerabilities in the Open Management Infrastructure (OMI) software agent that could expose Azure users to...

Microsoft announces passwordless authentication for consumer accounts

September 16, 2021

Microsoft announced that users can access their consumer accounts without providing passwords and using more secure authentication methods. Microsoft will...

CVE-2020-11581

September 16, 2021

Summary: An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on...

CVE-2021-30766

September 16, 2021

Summary: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security...

CVE-2021-30795

September 16, 2021

Summary: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari...

CVE-2021-21897

September 16, 2021

Summary: A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead...

CVE-2021-31206 – Microsoft / Exchange Server – RCE

September 16, 2021

Summary: CVE-2021-31206 is a remote code execution (RCE) vulnerability impacting multiple versions of Microsoft Exchange Server. A proof of concept...

What are SSL certificates?

September 16, 2021

Secure Sockets Layer (SSL) certificates are what cause your browser to display a padlock icon, indicating that your connection to...

Patch now! PrintNightmare over, MSHTML fixed, a new horror appears … OMIGOD

September 16, 2021

The September 2021 Patch Tuesday could be remembered as the final patching attempt in the PrintNightmare… nightmare. The ease with...

Only one-in-ten Russian organizations are aware of the danger of vulnerabilities in web applications

September 16, 2021

In 2020, attacks on the web accounted for one-third of all information security incidents. However, only 10% of Russian organizations...

Nearly 50% of On-Premises Databases Have Unpatched Vulnerabilities

September 16, 2021

The five-year longitudinal research conducted by cybersecurity firm Imperva revealed that nearly half of on-premises databases globally contain at least...

Millions of HP OMEN Gaming PCs Impacted by Driver Vulnerability

September 16, 2021

On Tuesday, security experts revealed data about a high-severity weakness in the HP OMEN driver software, which affects millions of...

Linux Implementation of Cobalt Strike Beacon Employed by Hackers in Attacks Worldwide

September 16, 2021

Security experts have detected an unauthorized version of the Cobalt Strike Beacon Linux created by malicious attackers that are actively...

Hackers Can Use the SSID Stripping Flaw to Mimic Real Wireless APs

September 16, 2021

A group of researchers discovered what appears to be a new way for threat actors to mislead people into connecting...

Vailyn – A Phased, Evasive Path Traversal + LFI Scanning & Exploitation Tool In Python

September 16, 2021

Vailyn's Crawler analyzing a damn vulnerable web application. LFI Wrappers are not enabled. GUI Demonstration (v2.2.1-5) Possible IssuesFound some false...

Rootend – A *Nix Enumerator And Auto Privilege Escalation Tool

September 16, 2021

rootend is a python *nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit...