Categoria: exploited

Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks

oracle-e-business-suite-zero-day-exploited-in-cl0p-attacks

Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882.

The post Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks appeared first on SecurityWeek.

Organizations Warned of Exploited Meteobridge Vulnerability

organizations-warned-of-exploited-meteobridge-vulnerability

Patched in mid-May, the security defect allows remote unauthenticated attackers to execute arbitrary commands with root privileges.

The post Organizations Warned of Exploited Meteobridge Vulnerability appeared first on SecurityWeek.

Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability

broadcom-fails-to-disclose-zero-day-exploitation-of-vmware-vulnerability

Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM.

The post Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability appeared first on SecurityWeek.

Organizations Warned of Exploited Sudo Vulnerability

organizations-warned-of-exploited-sudo-vulnerability

The vulnerability could allow local, low-privileged attackers to execute commands with root privileges, leading to full system compromise.

The post Organizations Warned of Exploited Sudo Vulnerability appeared first on SecurityWeek.

Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day

recent-fortra-goanywhere-mft-vulnerability-exploited-as-zero-day

Eight days before patches, a threat actor exploited CVE-2025-10035 as a zero-day to create a backdoor admin account.

The post Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.

Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks

cisco-firewall-zero-days-exploited-in-china-linked-arcanedoor-attacks

Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot.

The post Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks appeared first on SecurityWeek.

Cisco Patches Zero-Day Flaw Affecting Routers and Switches

cisco-patches-zero-day-flaw-affecting-routers-and-switches

The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user.

The post Cisco Patches Zero-Day Flaw Affecting Routers and Switches appeared first on SecurityWeek.

GeoServer Flaw Exploited in US Federal Agency Hack

geoserver-flaw-exploited-in-us-federal-agency-hack

The hackers remained undetected for three weeks, deploying China Chopper, remote access scripts, and reconnaissance tools.

The post GeoServer Flaw Exploited in US Federal Agency Hack appeared first on SecurityWeek.

Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers

libraesva-email-security-gateway-vulnerability-exploited-by-nation-state-hackers

Tracked as CVE-2025-59689, the command injection bug could be triggered via malicious emails containing crafted compressed attachments.

The post Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers appeared first on SecurityWeek.

SolarWinds Makes Third Attempt at Patching Exploited Vulnerability

solarwinds-makes-third-attempt-at-patching-exploited-vulnerability

CVE-2025-26399 is a patch bypass of CVE-2024-28988, which is a patch bypass of the exploited CVE-2024-28986.

The post SolarWinds Makes Third Attempt at Patching Exploited Vulnerability appeared first on SecurityWeek.