vulnerability - Page 5

Critical Cisco Secure Firewall Management Center Vulnerability (CVE-2025-20265) Allows Remote Code Execution

Posted: August 19, 2025

Categories: vulnerability, firewall

Tags: fp-6d, fp-6c, fp-6b, fp-6a

Author: Npav Lab

Cisco has addressed a critical vulnerability (CVE-2025-20265) in its Secure Firewall Management Center Software, allowing unauthenticated remote attackers to execute arbitrary shell commands. Learn more about the vulnerability and affected versions.

Critical WinRAR Path Traversal Vulnerability (CVE-2025-8088) Exploited: Security Patch Released

Posted: August 18, 2025

Categories: Security, vulnerability, WINRAR

Tags: fp-6d, fp-6a, fp-5a, fp-1b, fp-1a

Author: Npav Lab

Learn about the critical WinRAR vulnerability (CVE-2025-8088) that allows attackers to hijack extraction processes. Discover the importance of applying the security patch before September 2, 2025.

N-able N-Central Insecure Deserialization Vulnerability: Risks and Mitigation

Posted: August 14, 2025

Categories: vulnerability

Tags: fp-5c, fp-4b, fp-1b

Author: Npav Lab

A critical insecure deserialization vulnerability in N-able N-Central could allow attackers to execute arbitrary commands. Learn about the risks and recommended actions for organizations.

GitHub Copilot RCE Vulnerability (CVE-2025-53773) Allows Remote Code Execution via Prompt Injection

Posted: August 14, 2025

Categories: vulnerability

Tags: fp-5c, fp-5b, fp-5a, fp-1b

Author: Npav Lab

A critical vulnerability in GitHub Copilot (CVE-2025-53773) enables remote code execution through prompt injection attacks, compromising developers' machines. Learn how this flaw works and its implications.

Critical FortiSIEM Vulnerability (CVE-2025-25256) Enables Remote Command Execution

Posted: August 13, 2025

Categories: vulnerability

Tags: fp-6c, fp-6b, fp-6a, fp-1b

Author: Npav Lab

A critical vulnerability in Fortinet FortiSIEM (CVE-2025-25256) allows unauthenticated attackers to execute arbitrary commands remotely. Learn about the risks and mitigation strategies.

Microsoft Teams RCE Vulnerability: Critical Flaw Allows Message Manipulation

Posted: August 13, 2025

Categories: vulnerability, Microsoft

Tags: fp-6d, fp-4a, fp-1b

Author: Npav Lab

Microsoft has revealed a critical RCE vulnerability in Teams (CVE-2025-53783) that could let attackers read, write, and delete messages. Learn about the risks and fixes.

New Win-DoS Vulnerabilities Transform Windows Servers into DDoS Botnets

Posted: August 12, 2025

Categories: Botnet, vulnerability, Windows, DDoS

Tags: fp-6d, fp-6a, fp-3b, fp-3a

Author: Npav Lab

Researchers unveil the 'Win-DoS Epidemic' at DEF CON 33, revealing new vulnerabilities in Windows that can turn servers and Domain Controllers into DDoS botnets. Learn more about the risks.

Critical Vulnerability in Automaker Portal Enables Remote Car Unlocking

Posted: August 12, 2025

Categories: Hacking, vulnerability

Tags: fp-3b, fp-3a, fp-1b, fp-1a

Author: Npav Lab

A serious flaw in a major automaker's dealer portal allows hackers to unlock and start vehicles remotely. Learn about the vulnerability and its implications.

Trend Micro Apex One Zero-Day Vulnerabilities CVE-2025-54948 & CVE-2025-54987 Exploited

Posted: August 08, 2025

Categories: vulnerability

Tags: fp-5b, fp-5a, fp-1b, fp-1a

Author: Npav Lab

Two critical zero-day vulnerabilities in Trend Micro Apex One (on-prem) devices, CVE-2025-54948 and CVE-2025-54987, are being exploited in the wild. Learn about their impact and mitigation strategies.

D-Link DNR-322L Vulnerability: Download of Code Without Integrity Check

Posted: August 07, 2025

Categories: vulnerability

Tags: fp-6e, fp-6d, fp-6c, fp-6b, fp-6a, fp-5c, fp-5b, fp-5a

Author: Npav Lab

Learn about the critical vulnerability in D-Link DNR-322L that allows code downloads without integrity checks. Discover recommended actions to secure your device.