securityonline.info

Vulnerabilidad de GitHub CLI podría permitir la ejecución remota de código – ...

https://csirt.telconet.net/comunicacion/noticias-seguridad/vulnerabilidad-de-github-cli-podria-permitir-la-ejecucion-remota-de-codigo

csirt.telconet.net

https://securityonline.info/cve-2024-52308-github-cli-vulnerability-could-allow-remote-code-execution/

https://securityonline.info/cve-2024-52308-github-cli-vulnerability-could-allow-remote-code-execution

DOFOLLOW

비트코인 스프링 부트 스타터의 개인 키에 존재하는 심각한 취약점과 비트코인 ​​암호화폐 보안 위협에 미치는 영향: 심층 분석, 공격 위험 ...

https://key5.ru/critical-vulnerabilities-of-private-keys-in-bitcoin-spring-boot-starter-and-their-role-in-compromising-the-security-of-bitcoin-cryptocurrency-deep-analysis-attack-risks-and-effective-prevention-met

key5.ru

CVE-2025-27840: 초소형 ESP32 칩으로 전 세계 비트코인 ​​지갑을 해킹할 수 있는 방법

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

Cyber Security News Today | Articles on Cyber Security, Malware Attack update...

https://social.cyware.com/cyber-dcr/daily-cybersecurity-roundup-april-08-2025-38a5

social.cyware.com

PoisonSeed

https://securityonline.info/poisonseed-campaign-uncovering-a-web-of-cryptocurrency-and-email-provider-attacks

DOFOLLOW

7 Steps for Apache Tika PDF parser XXE exploit mitigation

https://hoploninfosec.com/apache-tika-pdf-parser-xxe-exploit-mitigation

hoploninfosec.com

XXE attacks with Apache Tika

https://securityonline.info/cve-2025-54988-critical-xxe-vulnerability-in-apache-tika-pdf-parser-exposes-sensitive-data

DOFOLLOW

Vulnerabilidad en GitLab CE/EE – Telconet CSIRT

https://csirt.telconet.net/comunicacion/noticias-seguridad/%EF%BF%BCvulnerabilidad-en-gitlab-ce-ee

csirt.telconet.net

https://securityonline.info/cve-2023-2825-critical-bug-in-gitlab-with-cvss-score-of-10/

https://securityonline.info/cve-2023-2825-critical-bug-in-gitlab-with-cvss-score-of-10

DOFOLLOW

BitcoinLib私鑰的關鍵漏洞及其在比特幣加密貨幣安全攻擊中的作用：分析、風險和預防方法 - 鑰匙獵手

https://key3.ru/critical-vulnerabilities-of-private-keys-in-bitcoinlib-and-their-role-in-bitcoin-cryptocurrency-security-compromise-attacks-analysis-risks-and-prevention-methods

key3.ru

CVE-2025-27840：一顆小小的 ESP32 晶片如何破解全球比特幣錢包

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

Critical Vulnerability in Bitcoin Spring Boot Starter: Private Keys at Risk o...

https://keyhunters.ru/critical-vulnerability-in-bitcoin-spring-boot-starter-private-keys-at-risk-of-theft

keyhunters.ru

CVE‑2025‑27840: How a Tiny ESP32 Chip Could Crack Open Bitcoin Wallets Worldwide

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

동맥 출혈 공격: 비트코인 ​​RAM의 심각한 취약점으로, 공격자가 CVE-2023-39910, CVE-2025-8217 비트코인 ​​코어...

https://key5.ru/artery-bleed-attack-a-critical-bitcoin-ram-vulnerability-that-allows-the-recovery-of-private-keys-to-lost-crypto-wallets-where-an-attacker-uses-cve-2023-39910-cve-2025-8217-bitcoin-core-memory-leak

key5.ru

CVE-2025-27840: 초소형 ESP32 칩으로 전 세계 비트코인 ​​지갑을 해킹할 수 있는 방법

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

CVE-2025-24797 - Exploits & Severity - Feedly

https://feedly.com/cve/CVE-2025-24797

feedly.com

EnigmaCyberSecurity: Brazil-Focused Banking Malware Campaign Uses RATs and Malicious ExtensionsDaily CyberSecurity / 8moThe operation leverages phishing emails, malicious browser extensions, and remote access trojans (RATs) to harvest sensitive banking data and infiltrate corporate systems. “ The attackers used a malicious extension for Google Chrome, Microsoft Edge, and Brave browsers,” Positive Technologies noted, “ as well as Mesh Agent and PDQ Connect Agent .”

https://securityonline.info/enigmacybersecurity-brazil-focused-banking-malware-campaign-uses-rats-and-malicious-extensions?utm_source=feedly

DOFOLLOW

Ivanti Addresses Critical Remote Code Execution Vulnerability in Endpoint Man...

https://nquiringminds.com/cybernews/ivanti-addresses-critical-remote-code-execution-vulnerability-in-endpoint-management-software

nquiringminds.com

https://securityonline.info/cve-2023-39336-ivanti-addresses-major-rce-vulnerability/

https://securityonline.info/cve-2023-39336-ivanti-addresses-major-rce-vulnerability

DOFOLLOW

模式偽造攻擊：一種嚴重的隨機性漏洞，攻擊者可以利用這種漏洞和方法，在被入侵的比特幣錢包中恢復私鑰。當熵變成可預測的生成器模式時，攻擊者可以大規模清空加密錢...

https://key3.ru/pattern-forge-attack-a-critical-randomness-vulnerability-and-method-for-recovering-private-keys-in-compromised-bitcoin-wallets-when-entropy-becomes-a-predictable-generator-pattern-allows-an-attacker

key3.ru

CVE-2025-27840：一顆小小的 ESP32 晶片如何破解全球比特幣錢包

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

CloudFlair: Bypassing Cloudflare using Internet-wide scan data - Christophe T...

https://blog.christophetd.fr/bypassing-cloudflare-using-internet-wide-scan-data

blog.christophetd.fr

CloudFlair: Find origin servers of websites behind by CloudFlare

https://securityonline.info/cloudflair-find-origin-servers-of-websites-behind-by-cloudflare

DOFOLLOW

CVE-2024-40766 - SonicWall SonicOS Improper Access Control Vulnerability - [A...

https://cvefeed.io/vuln/detail/CVE-2024-40766

cvefeed.io

Akira Ransomware Revives SonicWall Flaw CVE-2024-40766, Uses ‘UnPAC the Hash’ to Breach Networks

https://securityonline.info/akira-ransomware-revives-sonicwall-flaw-cve-2024-40766-uses-unpac-the-hash-to-breach-networks

NOFOLLOW

CVE-2024-40766 - SonicWall SonicOS Improper Access Control Vulnerability - [A...

https://cvefeed.io/vuln/detail/CVE-2024-40766

cvefeed.io

Akira Ransomware Exploits SonicWall VPN Accounts With Lightning-Fast Intrusions

https://securityonline.info/akira-ransomware-exploits-sonicwall-vpn-accounts-with-lightning-fast-intrusions

NOFOLLOW

CISA Issues Critical Alert for SolarWinds WHD Vulnerability CVE-2024-28987 | ...

https://nquiringminds.com/cybernews/cisa-issues-critical-alert-for-solarwinds-whd-vulnerability-cve202428987

nquiringminds.com

https://securityonline.info/cisa-warns-actively-exploited-vulnerabilities-including-windows-kernel-flaw-and-firefox-zero-day/

https://securityonline.info/cisa-warns-actively-exploited-vulnerabilities-including-windows-kernel-flaw-and-firefox-zero-day

DOFOLLOW

Công bố PoC cho lỗ hổng thực thi mã từ xa trong máy chủ Microsoft Exchange | ...

https://whitehat.vn/threads/cong-bo-poc-cho-lo-hong-thuc-thi-ma-tu-xa-trong-may-chu-microsoft-exchange.17539

whitehat.vn

Security Online

https://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit

DOFOLLOW

Exploit de PoC para vulnerabilidad de escalada de privilegios en el kernel de...

https://csirt.telconet.net/comunicacion/noticias-seguridad/exploit-de-poc-para-vulnerabilidad-de-escalada-de-privilegios-en-el-kernel-de-windows

csirt.telconet.net

https://securityonline.info/windows-kernel-eop-vulnerability-cve-2024-21345-gets-poc-exploit-code/

https://securityonline.info/windows-kernel-eop-vulnerability-cve-2024-21345-gets-poc-exploit-code

DOFOLLOW

Albabat Ransomware Group Potentially Expands Targets to Multiple OS Uses GitH...

https://www.trendmicro.com/en_gb/research/25/c/albabat-ransomware-group.html

trendmicro.com

Albabat

https://securityonline.info/from-games-to-ransom-albabats-deceptive-distribution-method-exposed

DOFOLLOW

AnchisesLandia- Brazilian Security Blogger: [Segurança] Principais notícias d...

https://anchisesbr.blogspot.com/2024/10/seguranca-principais-noticias-de_15.html

anchisesbr.blogspot.com

Chameleon Banking Trojan Targets Hospitality Sector with Novel CRM Masquerade

https://securityonline.info/chameleon-banking-trojan-targets-hospitality-sector-with-novel-crm-masquerade

DOFOLLOW

AnchisesLandia- Brazilian Security Blogger: [Segurança] Principais notícias d...

https://anchisesbr.blogspot.com/2024/10/seguranca-principais-noticias-de_15.html

anchisesbr.blogspot.com

Hacking the Hacker: Researcher Found Critical Flaw (CVE-2024-45163) in Mirai Botnet

https://securityonline.info/hacking-the-hacker-researcher-found-critical-flaw-cve-2024-45163-in-mirai-botnet

DOFOLLOW

Thêm hai lỗ hổng trên sandbox VM2 - Chuyện gì đang xảy ra? | WhiteHat.vn

https://whitehat.vn/threads/them-hai-lo-hong-tren-sandbox-vm2-chuyen-gi-dang-xay-ra.17256

whitehat.vn

Security Online

https://securityonline.info/exploit-available-for-critical-rce-cve-2023-32314-bug-in-vm2-sandbox-library

DOFOLLOW

CVE-2024-42327 (CVSS 9.9)： 在 Zabbix 中发现严重 SQL 注入漏洞-安全KER - 安全资讯平台

https://www.anquanke.com/post/id/302246

anquanke.com

https://securityonline.info/cve-2024-42327-critical-sql-injection-vulnerability-found-in-zabbix/

https://securityonline.info/cve-2024-42327-critical-sql-injection-vulnerability-found-in-zabbix

DOFOLLOW

Critical Vulnerabilities in Progress Software WhatsUp Gold Exploited by Malic...

https://nquiringminds.com/cybernews/critical-vulnerabilities-in-progress-software-whatsup-gold-exploited-by-malicious-actors-leading-to-potential-ransomware-attacks

nquiringminds.com

https://securityonline.info/whatsup-gold-under-attack-new-rce-vulnerabilities-exploited/

https://securityonline.info/whatsup-gold-under-attack-new-rce-vulnerabilities-exploited

DOFOLLOW

金鑰洩漏攻擊與私鑰洩漏攻擊－比特幣中的雙花與資料欺騙威脅：快取投毒攻擊的關鍵分析與防範 - 鑰匙獵手

https://key3.ru/key-disclosure-attack-secret-key-leakage-attack-double-spend-and-data-spoofing-threat-in-bitcoin-critical-analysis-and-prevention-of-cache-poisoning-attacks

key3.ru

CVE-2025-27840：一顆小小的 ESP32 晶片如何破解全球比特幣錢包

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

Infosec Punggawa

https://infosec.punggawa.com/post/cve/CVE-2024%E2%80%9338063.html

infosec.punggawa.com

Security Online - CVE-2024-38063, CVSS 9.8, 0-Click RCE Affects All Windows Systems

https://securityonline.info/cve-2024-38063-cvss-9-8-0-click-rce-affects-all-windows-systems

DOFOLLOW

Cyware Daily Threat Intelligence, January 09, 2025

https://www.cyware.com/resources/threat-briefings/daily-threat-briefing/cyware-daily-threat-intelligence-january-09-2025

cyware.com

OpenVPN

https://securityonline.info/cve-2024-5594-cvss-9-1-critical-vulnerability-in-openvpn-enables-code-execution

DOFOLLOW

Co lidi opravdu dělají s ChatGPT - Miton AI Newsletter

https://www.mitonai.nl/p/co-lidi-opravdu-delaji-s-chatgpt

mitonai.nl

integraci modelu Gemini do Siri

https://securityonline.info/apple-and-google-are-partnering-to-bring-gemini-ai-to-siri

DOFOLLOW

Konsole Leaker Attack: A silent leak where an attacker gains complete control...

https://keyhunters.ru/konsole-leaker-attack-a-silent-leak-where-an-attacker-gains-complete-control-over-btc-funds-by-recovering-private-keys-from-logs-undermining-the-fundamental-principles-of-the-bitcoin-cryptocurrency

keyhunters.ru

CVE‑2025‑27840: How a Tiny ESP32 Chip Could Crack Open Bitcoin Wallets Worldwide

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

Black Kite | Focus Friday: TPRM INSIGHTS INTO CRITICAL VULNERABILITIES Linked...

https://blackkite.com/blog/focus-friday-tprm-insights-into-critical-vulnerabilities-in-microsoft-windows-solarwinds-whd-zimbra-and-exchange-server

blackkite.com

https://securityonline.info/cve-2024-33533-to-33536-zimbra-users-at-risk-of-xss-and-lfi-attacks

https://securityonline.info/cve-2024-33533-to-33536-zimbra-users-at-risk-of-xss-and-lfi-attacks

DOFOLLOW

Bitdefender Threat Debrief | December 2024

https://www.bitdefender.com/en-au/blog/businessinsights/bitdefender-threat-debrief-december-2024

bitdefender.com

launched DDoS attacks

https://securityonline.info/cybervolk-the-hacktivist-collective-blurring-lines-between-activism-ransomware-and-geopolitics

NOFOLLOW

Nueva vulnerabilidad crítica de RCE en el proyecto Dompdf – Telconet CSIRT

https://csirt.telconet.net/comunicacion/noticias-seguridad/vulnerabilidad-critica-de-rce-en-libreria-dompdf

csirt.telconet.net

https://securityonline.info/cve-2023-24813-rce-flaw-dompdf-project/

https://securityonline.info/cve-2023-24813-rce-flaw-dompdf-project

DOFOLLOW

比特幣 Spring Boot Starter 私鑰提取漏洞：嚴重的網路安全威脅 - 鑰匙獵手

https://key3.ru/bitcoin-spring-boot-starter-private-key-extraction-vulnerabilities-critical-cybersecurity-threat

key3.ru

CVE-2025-27840：一顆小小的 ESP32 晶片如何破解全球比特幣錢包

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

Vulnerabilidad en productos UFM de NVIDIA – Telconet CSIRT

csirt.telconet.net

CVE-2024-0130: NVIDIA Patches High-Severity Vulnerability in UFM Products

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

July 17, 2024 - Active Exploits Targeting Apache HugeGraph Flaw (CVE-2024-27348): PoC Code Released

https://securityonline.info/active-exploits-targeting-apache-hugegraph-flaw-cve-2024-27348-poc-code-released

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 16, 2024 - Urgent D-Link Router Security Flaws Expose Millions to Remote Attacks

https://securityonline.info/urgent-d-link-router-security-flaws-expose-millions-to-remote-attacks

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

April 23, 2024 - Multiple Vulnerabilities Patched in Apache HugeGraph – Update Immediately

https://securityonline.info/multiple-vulnerabilities-patched-in-apache-hugegraph-update-immediately

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 18, 2024 - CVE-2024-38812: VMware's 9.8 Severity Security Nightmare

https://securityonline.info/cve-2024-38812-vmwares-9-8-severity-security-nightmare

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 12, 2024 - WhatsUp Gold Under Attack: New RCE Vulnerabilities Exploited

https://securityonline.info/whatsup-gold-under-attack-new-rce-vulnerabilities-exploited

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 17, 2024 - CISA Flags Two Actively Exploited Vulnerabilities: Critical Threats to Windows and WhatsUp Gold

https://securityonline.info/cisa-flags-two-actively-exploited-vulnerabilities-critical-threats-to-windows-and-whatsup-gold

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Dec. 14, 2023 - Mallox ransomware Exploits Old Flaws in MS-SQL & ODBC

https://securityonline.info/mallox-ransomware-exploits-old-flaws-in-ms-sql-odbc

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 18, 2024 - GitLab Releases Critical Security Patch for CVE-2024-45409 (CVSS 10) Vulnerability

https://securityonline.info/gitlab-releases-critical-security-patch-for-cve-2024-45409-vulnerability

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

June 5, 2024 - CVE-2024-27348: Apache HugeGraph RCE Vulnerability, PoC Exploit Published

https://securityonline.info/cve-2024-27348-apache-hugegraph-rce-vulnerability-poc-exploit-published

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 16, 2024 - New Zero-Day Emerges After Microsoft Patch Tuesday: CVE-2024-43461 Targets Windows MSHTML

https://securityonline.info/new-zero-day-emerges-after-microsoft-patch-tuesday-cve-2024-43461-targets-windows-mshtml

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 19, 2024 - CISA Warns of Actively Exploited Apache, Microsoft, and Oracle Vulnerabilities

https://securityonline.info/cisa-warns-of-actively-exploited-apache-microsoft-and-oracle-vulnerabilities

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 2, 2024 - Proof-of-Concept Exploit Released for WhatsUp Gold Authentication Bypass (CVE-2024-6670)

https://securityonline.info/proof-of-concept-exploit-released-for-whatsup-gold-authentication-bypass-cve-2024-6670

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Aug. 23, 2024 - Critical Vulnerabilities Uncovered in Progress WhatsUp Gold (CVE-2024-6670 & CVE-2024-6671)

https://securityonline.info/critical-vulnerabilities-uncovered-in-progress-whatsup-gold-cve-2024-6670-cve-2024-6671

DOFOLLOW

Vulnerability News - September 20, 2024 - VULNERA

https://vulnera.com/pulse/september-20-2024

vulnera.com

Sept. 16, 2024 - PoC Exploit Released for Ivanti EPM Flaw CVE-2024-29847 (CVSS 10)

https://securityonline.info/poc-exploit-released-for-ivanti-epm-flaw-cve-2024-29847-cvss-10

DOFOLLOW

secp256k1 私鑰驗證和無效金鑰威脅中的關鍵漏洞：對比特幣加密貨幣安全的危險攻擊；比特幣 Spring Boot Starter 庫中的漏洞 - 鑰匙獵手

https://key3.ru/critical-vulnerability-in-secp256k1-private-key-verification-and-invalid-key-threat-a-dangerous-attack-on-bitcoin-cryptocurrency-security-vulnerability-in-bitcoin-spring-boot-starter-library

key3.ru

CVE-2025-27840：一顆小小的 ESP32 晶片如何破解全球比特幣錢包

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW

Ghost Tap：NFCタッチ決済を悪用して資金盗み取る新たなテクニックが登場 | Codebook｜Security News

https://codebook.machinarecord.com/threatreport/35947

codebook.machinarecord.com

Securityonline[.]info – November 20, 2024

https://securityonline.info/ghost-tap-emerges-cybercriminals-exploit-nfc-relay-for-contactless-cash-outs

DOFOLLOW

RAMnesia 공격: RAM 기반 암호화폐 해킹으로, 분실된 비트코인 ​​지갑에서 개인 키를 완전히 복구하고 자금을 전액 탈취할 수 있습...

https://key5.ru/ramnesia-attack-a-ram-based-cryptohack-that-allows-for-total-recovery-of-private-keys-and-complete-theft-of-funds-from-lost-bitcoin-wallets-an-attacker-exploits-the-black-box-of-memory-and-trigg

key5.ru

CVE-2025-27840: 초소형 ESP32 칩으로 전 세계 비트코인 ​​지갑을 해킹할 수 있는 방법

https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide

DOFOLLOW