Active threats. Real guidance.
Updated 3× daily.

This authentication bypass vulnerability allows unauthenticated attackers to access restricted resources on Ivanti appliances. It is frequently chained with CVE-2024-21888 (command injection) to achieve remote code execution.

A critical remote code execution vulnerability exists due to insecure deserialization of untrusted data. This flaw allows unauthenticated attackers to execute arbitrary shell commands on vulnerable ActiveMQ servers.

This privilege escalation vulnerability allows an unauthenticated, remote attacker to create an account with privilege level 15. This newly created account can then be used to gain full administrative control of the affected device.

A critical remote code execution vulnerability allows unauthenticated attackers to create new administrator accounts. This provides full administrative control over the Confluence instance, leading to data compromise and system takeover.

This SQL injection vulnerability in FortiClientEMS allows an unauthenticated attacker to execute arbitrary code or commands. Successful exploitation can lead to full system compromise and data exfiltration.

A critical out-of-bounds write vulnerability exists in the DCERPC protocol implementation of vCenter Server. This flaw allows an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system.