Collaborate Disseminate
Security researchers report CVE-2025-32433, a CVSS 10.0 RCE vulnerability in Erlang/OTP SSH, allowing unauthenticated code execution on exposed… Continue reading Researchers Find CVSS 10.0 Severity RCE Vulnerability in Erlang/OTP SSH
TL;DR: A critical deserialization vulnerability (CVSS 9.8 – CVE-2025-27520) in BentoML (v1.3.8–1.4.2) lets attackers execute remote code without… Continue reading BentoML Vulnerability Allows Remote Code Execution on AI Servers
A critical vulnerability (CVE-2024-50603) in the Aviatrix Controller allows unauthenticated RCE. Active exploitation observed by Wiz Research in… Continue reading Hackers Use CVE-2024-50603 to Deploy Backdoor on Aviatrix Controllers
A critical vulnerability in the Windows Kerberos authentication protocol poses a significant risk to millions of servers. Microsoft… Continue reading Critical Windows Kerberos Flaw Exposes Millions of Servers to Attack
Critical security vulnerabilities exposed in DrayTek Vigor routers: Discover how to protect your network from these serious flaws.… Continue reading Critical Vulnerabilities Expose Nearly 1 Million DrayTek Routers Globally
This article explores the Linux vulnerability discovered by Simone Margaritelli, which, according to cybersecurity companies Uptycs and Akamai,… Continue reading Decade-Old Linux Vulnerability Can Be Exploited for DDoS Attacks on CUPS
A critical vulnerability (CVE-2024-40711) in Veeam Backup & Replication software allows attackers to gain full control without authentication.… Continue reading New Veeam Vulnerability Puts Thousands of Backup Servers at Risk – PATCH NOW!
What can you do with a cheap Linux machine with limited flash and only a single free GPIO line? Probably not much, but sometimes, just getting root to prove you …read more Continue reading Getting Root on Cheap WiFi Repeaters, the Long Way Around
We finally have some answers about the Windows IPv6 vulnerability — and a Proof of Concept! The patch was a single change in the Windows TCP/IP driver’s Ipv6pProcessOptions(), now calling …read more Continue reading This Week in Security: The Rest of the IPv6 Story, CVE Hunting, and Hacking the TSA
You may have heard about a very large data breach, exposing the Social Security numbers of three billion individuals. Now hang on. Social Security numbers are a particularly American data …read more Continue reading This Week in Security: Three Billion SS Numbers, IPv6 RCE, and Ring -2