Category: GBHackers

PoC Exploit Released for QNAP RCE Vulnerability
20
Jan
2025

PoC Exploit Released for QNAP RCE Vulnerability

A critical remote code execution (RCE) vulnerability, tracked as CVE-2024-53691, has recently come to light, affecting users of QNAP’s QTS…

Multiple HPE Aruba Network Vulnerabilities Allows Remote Arbitrary Code Execution
20
Jan
2025

Multiple HPE Aruba Network Vulnerabilities Allows Remote Arbitrary Code Execution

 Hewlett Packard Enterprise (HPE) has confirmed multiple vulnerabilities in its Aruba Networking products that could allow remote arbitrary code execution….

Hackers Bypass Active Directory Group Policy to Allow Vulnerable NTLMv1 Auth Protocol
18
Jan
2025

Hackers Bypass Active Directory Group Policy to Allow Vulnerable NTLMv1 Auth Protocol

Researchers have discovered a critical flaw in Active Directory’s NTLMv1 mitigation strategy, where misconfigured on-premises applications can bypass Group Policy…

AWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCV
17
Jan
2025

AWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCV

Amazon Web Services (AWS) has issued a critical security advisory highlighting vulnerabilities in specific versions of its native clients for…

New Tool Unveiled to Scan Hacking Content on Telegram
17
Jan
2025

New Tool Unveiled to Scan Hacking Content on Telegram

A Russian software developer, aided by the National Technology Initiative, has introduced a groundbreaking AI module designed to monitor and…

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages
17
Jan
2025

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages

Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms. Phishing campaigns are delivered via Telegram…

PoC Exploit Released for Ivanti Connect Secure RCE Vulnerability
17
Jan
2025

PoC Exploit Released for Ivanti Connect Secure RCE Vulnerability

A serious security flaw has been identified in Ivanti Connect Secure, designated as CVE-2025-0282, which enables remote unauthenticated attackers to execute…

$40,000 Reward for Escalating Limited Path Traversal to RCE
17
Jan
2025

$40,000 Reward for Escalating Limited Path Traversal to RCE

As a dedicated bug bounty hunter with an enviable track record on BugCrowd, Abdullah Nawaf, Full full-time bug Bounty Hunter, thrives…

Let’s Encrypt Unveils Six-Day Certificate and IP Address Options for 2025
17
Jan
2025

Let’s Encrypt Unveils Six-Day Certificate and IP Address Options for 2025

Let’s Encrypt has announced plans to introduce six-day certificate options and support for IP address certificates in 2025. This initiative…

CISA Warns of Aviatrix Controllers OS Command Injection Vulnerability Exploited in Wild
17
Jan
2025

CISA Warns of Aviatrix Controllers OS Command Injection Vulnerability Exploited in Wild

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding a significant OS command injection vulnerability in…

BitMEX Fined $100 Million for Violating Bank Secrecy Act
17
Jan
2025

BitMEX Fined $100 Million for Violating Bank Secrecy Act

In a significant legal development, HDR Global Trading Ltd., operating under the name BitMEX, has been fined $100 million for…

Hackers Deploy Web Shell To Abuse IIS Worker And Exfiltrate Data
17
Jan
2025

Hackers Deploy Web Shell To Abuse IIS Worker And Exfiltrate Data

An attacker exploited a vulnerability in the batchupload.aspx and email_settings.aspx pages on the target server that allowed them to upload…