LR pixel

Wing FTP Remote Code Execution Vulnerability

von | 16. Juli 2025 | Unkategorisiert

What is the Vulnerability?CVE-2025-47812 is a recently disclosed Remote Code Execution (RCE) vulnerability impacting Wing FTP Server, a cross-platform file transfer solution. This critical flaw affects versions prior to 7.4.4, and, if successfully exploited, may allow...

Next.js Middleware Auth.Bypass Vulnerability

von | 11. Juli 2025 | Unkategorisiert

What is the Vulnerability?FortiGuard Labs has identified ongoing attack attempts targeting a critical authorization bypass vulnerability (CVE-2025-29927) in the middleware system of the Next.js framework, a popular React-based framework for building full-stack web...

Teleport Remote Authentication Bypass

von | 20. Juni 2025 | Unkategorisiert

What is the Vulnerability?Teleport security engineers have discovered a critical vulnerability affecting Teleport versions earlier than 17.5.2. This flaw allows remote attackers to bypass SSH authentication on servers running Teleport SSH agents, OpenSSH-integrated...

TBK DVRs Botnet Attack

von | 10. Juni 2025 | Unkategorisiert

What is the Attack?Threat Actors are actively exploiting CVE-2024-3721, a command injection vulnerability in TBK DVR devices (Digital Video Recorders). This flaw allows unauthenticated remote code execution (RCE) via crafted HTTP requests to the endpoint. The...