OSINT 탐지 내용
총 328 건
CVE-2025-22230 & CVE-2025-22247 : LPE in VMWare Tools via VGAuth The Guest Who Could: Exploiting LPE in VMWare Tools https://swarm.ptsecurity.com/the-guest-who-could-exploiting-lpe-in-vmware-tools/
CVE-2025-22230 & CVE-2025-22247 : LPE in VMWare Tools via VGAuth The Guest Who Could: Exploiting LPE in VMWare Tools https://swarm.ptsecurity.com/the-guest-who-could-exploiting-lpe-in-vmware-tools/
2025. 07. 23.
PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse
PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse
2025. 07. 22.
Pentagon Stealer (malware-as-a-service) Cc @soursecc
Pentagon Stealer (malware-as-a-service) Cc @soursecc
2025. 07. 22.
ToolShell: A SharePoint RCE chain actively exploited ToolPane exploit - CVE-2025-49704 POC as shared by kaizensecurity Spingstall0.aspx web shell
ToolShell: A SharePoint RCE chain actively exploited ToolPane exploit - CVE-2025-49704 POC as shared by kaizensecurity Spingstall0.aspx web shell
2025. 07. 22.
SharePoint is bleeding. 85+ servers breached CVE‑2025‑53770 gives attackers full control with webshells and stolen keys. Attackers can bypass authentication entirely by manipulating HTTP headers. specifically, setting the Referer header to - /_layouts/SignOut.aspx - /_layouts/15/ToolPane.asp The vulnerability affects all on-premises SharePoint Server deployments: SharePoint Server 2016 – No patch available SharePoint Server 2019 – No patch available SharePoint Server Subscription Edition – Security update available
SharePoint is bleeding. 85+ servers breached CVE‑2025‑53770 gives attackers full control with webshells and stolen keys. Attackers can bypass authentication entirely by manipulating HTTP headers. specifically, setting the Referer header to - /_layouts/SignOut.aspx - /_layouts/15/ToolPane.asp The vulnerability affects all on-premises SharePoint Server deployments: SharePoint Server 2016 – No patch available SharePoint Server 2019 – No patch available SharePoint Server Subscription Edition – Security update available
2025. 07. 21.
Chinese Groups Launder $580M in India Using Fake Apps and Mule Accounts CloudSEK’s new report uncovers how Chinese cyber syndicates are laundering over $600 million annually in India.
Chinese Groups Launder $580M in India Using Fake Apps and Mule Accounts CloudSEK’s new report uncovers how Chinese cyber syndicates are laundering over $600 million annually in India.
2025. 07. 21.
......
Page 24 of 55