Aggregator

A proof-of-concept exploit for CVE-2025-53772, a critical remote code execution vulnerability in Microsoft’s IIS Web Deploy (msdeploy) tool, was published this week, raising urgent alarms across the .NET and DevOps communities.  The flaw resides in the unsafe deserialization of HTTP header contents in both the msdeployagentservice and msdeploy.axd endpoints, enabling authenticated attackers to execute arbitrary code on target […]

The post PoC Exploit Released for IIS WebDeploy Remote Code Execution Vulnerability appeared first on Cyber Security News.

Low-profile droppers, long considered auxiliary tools in the arsenals of Android banking trojans and RATs, are undergoing a

The post The New Threat to Android: Why Malware Droppers Are Getting Smarter appeared first on Penetration Testing Tools.

You must login to view this content

Researchers at Socket have uncovered a malicious npm package named nodejs-smtp, masquerading as the widely used nodemailer library

The post Warning: Fake npm Package Hijacks Crypto Wallets appeared first on Penetration Testing Tools.

A large-scale theft of authentication tokens from Salesloft, developer of the corporate chatbot platform, has triggered a chain

The post Salesloft Breach Triggers Global Threat Cascade appeared first on Penetration Testing Tools.

A security researcher uncovered critical vulnerabilities in the admin panel of Pudu Robotics, China’s largest supplier of commercial

The post Robot Takeover? Critical Flaw in Pudu Robots Exposed appeared first on Penetration Testing Tools.

Experts at Truesec have reported a large-scale malicious campaign in which attackers promoted a fake PDF-editing application, AppSuite

The post Beware: Fake PDF Editor Spreads Dangerous Infostealer via Google Ads appeared first on Penetration Testing Tools.