CVE-2025-1055
CVE-2025-1055 is a vulnerability associated with the driver K7RKScan.sys used in BYOVD attacks by DragonForce.
Tag: vulnerability
SimpleHelp: Remote Monitoring and Management Software
SimpleHelp is an RMM software affected by CVE-2026-48558, a critical authentication bypass vulnerability exploited to deploy malware.
Citrix NetScaler: Application Delivery Controller
Citrix NetScaler is an application delivery controller targeted by threat actors using CVE-2026-3055.
Apple Patches Beats Studio Buds Flaw Allowing Nearby Attackers to Spy via Microphone
Apple has released a firmware update for Beats Studio Buds wireless earbuds to address a high-severity vulnerability, CVE-2025-20701 (CVSS 8.8), that could…
ERNW GmbH
German cybersecurity research firm that discovered the Airoha Bluetooth vulnerabilities and presented at TROOPERS.
Airoha System-on-Chips
Bluetooth SoCs vulnerable to multiple flaws including CVE-2025-20700, CVE-2025-20701, and CVE-2025-20702.
AutoGen Studio Pre-Release Versions Vulnerable to AutoJack Attack
AutoGen Studio versions 0.4.3.dev1 and 0.4.3.dev2 contain an unauthenticated MCP WebSocket route that allows command execution. The stable release 0.4.2.2 is not…
AutoJack Attack: One Malicious Web Page Can Hijack AI Agents for Remote Code Execution
Microsoft researchers have disclosed a novel exploit chain named AutoJack that allows a single malicious web page to hijack an AI browsing…
ASUS
ASUS is a technology company. Its Zenfone 9 smartphone was found to accept the RUN AT command, making it vulnerable to SIM-based…
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Threat actors are actively exploiting a recently patched medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is installed on…