Three critical security vulnerabilities discovered in SimpleHelp remote access software could allow attackers to access sensitive data, escalate privileges, and execute malicious code. The flaws, patched in January 2024 versions, include path traversal, file upload, and privilege escalatio...
Critical security vulnerability (CVE-2025-0282) in Ivanti Connect Secure, Policy Secure, and ZTA Gateways enables unauthenticated remote code execution. Under active exploitation by China-linked threat actor UNC5337 since December 2024, the flaw (CVSS 9.0) affects versions prior to 22.7R2....
A critical zero-day vulnerability (CVE-2025-0282) has been discovered in Ivanti Connect Secure, allowing remote code execution through stack-based buffer overflow. Affecting multiple Ivanti products including Connect Secure, Policy Secure, and Neurons for ZTA gateways, the flaw carries a 9...
A critical vulnerability (CVE-2024-52875) in GFI KerioControl firewall versions 9.2.5-9.4.5 is being actively exploited, allowing one-click remote code execution through CRLF injection. The flaw enables attackers to steal admin credentials and upload malicious files, with nearly 24,000 exp...
A critical Apache Struts vulnerability (CVE-2024-53677) with a CVSS score of 9.5 is under active exploitation, enabling remote code execution through file upload manipulation. The flaw affects multiple Struts versions from 2.0.0 to 6.3.0.2 and allows path traversal attacks, potentially lea...
