vulnerabilities
"Six exploits, no configuration needed, no ports need to get opened; just straight-up RCEs, no fuss, no muss."
"Code execution in 0 seconds (3 seconds to be more accurate), no limitation, no authentication..."
Consortium plans “doomed” as rumours swirl over vulnerability database program borkage.
POCs for CVSS 10 bug are out of the bag, tens of thousands are exposed, and telemetry mitigation didn't work.
Patch? You'll need to wait until Sunday. Turn off telemetry (no, really; it's a mitigation!) and go to the pub. OK, maybe don't.
Incident suggests a state actor exploiting overstretched maintainer of an "unpaid hobby project"
A newly-discovered Linux bug could allow for password leaks. Worse yet, it has sat undiscovered in the OS for the last 11 years
More pre-auth RCE bugs in Fortinet appliances? Colour us shocked!
JetBrains' platform "a suitable vector to position an attacker to perform a supply chain attack" if compromised warns Rapid7.