Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw CVE-2026-61511
A public exploit has been released for a pre-authentication remote code execution vulnerability in vBulletin, tracked as CVE-2026-61511. The flaw resides in…
Tag: website security
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…