Aggregator

Ivanti Warns of New EPMM Zero-Day Exploited Using Credentials Stolen in January Attacks

Dark Web Informer - Cyber Threat Intelligence

2 months 2 weeks ago

Ivanti has issued an urgent security advisory for its Endpoint Manager Mobile (EPMM) product, disclosing five vulnerabilities including one that is actively exploited in the wild.

Dark Web Informer

U.S. CISA adds a flaw in Ivanti Endpoint Manager Mobile (EPMM) to its Known Exploited Vulnerabilities catalog

Security Affairs

2 months 2 weeks ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Ivanti Endpoint Manager Mobile (EPMM) to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in the Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2026-6973 (CVSS score of 7.1), to its Known Exploited Vulnerabilities (KEV) catalog. Ivanti warns customers […]

Pierluigi Paganini

Australia warns of ClickFix attacks pushing Vidar Stealer malware

Bleeping Computer.

2 months 2 weeks ago

The Australian Cyber Security Center (ACSC) is warning organizations of an ongoing malware campaign using the ClickFix social engineering technique to distribute the Vidar Stealer info-stealing malware. [...]

Bill Toulas

Submit #808867: Tenda CX12L V16.03.53.12 Stack-based Buffer Overflow [Accepted]

Vuldb Submit

2 months 2 weeks ago

Submit #808867 / VDB-361927

lv1020

Submit #808863: Totolink X5000R V9.1.0u.6369_B20230113 Stack-based Buffer Overflow [Accepted]

Vuldb Submit

2 months 2 weeks ago

Submit #808863 / VDB-361926

kiciot

Submit #808839: SourceCodester Pharmacy Sales and Inventory System V1.0 cross site scripting [Accepted]

Vuldb Submit

2 months 2 weeks ago

Submit #808839 / VDB-361925

timeflies

Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access

The Hackers News

2 months 2 weeks ago

Ivanti is warning that a new security flaw impacting Endpoint Manager Mobile (EPMM) has been explored in limited attacks in the wild. The high-severity vulnerability, CVE-2026-6973 (CVSS score: 7.2), is a case of improper input validation affecting EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1. It allows "a remotely authenticated user with administrative access to achieve remote code

The Hacker News

PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems

The Hackers News

2 months 2 weeks ago

Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any artifacts linked to TeamPCP from the environments. "The toolset harvests credentials from cloud, container, developer, productivity, and financial services, then exfiltrates the data through attacker-controlled infrastructure while attempting

The Hacker News