Do Son Critical NETGEAR flaw (CVE-2025-4978) allows full admin access via hidden backdoor. Exploit details and PoC analysis inside.
Authentication Bypass
ProjectDiscovery revealed critical zero-days (CVSS 10) in Versa Concerto, enabling full RCE and host compromise via auth bypass and Docker escape.
CISA warns of critical CVSS 9.8 flaws in Vertiv Liebert devices allowing RCE and auth bypass—patch now to protect OT environments.
CVE-2025-46801 in Pgpool-II scores 9.8 CVSS—flaw lets attackers log in as any user. Patch now to prevent database tampering and access.
Jenkins plugins hit by CVE-2025-47884 (CVSS 9.1) and more—flaws enable impersonation, XSS, and authentication bypass. Patch now to secure pipelines.
Fortinet fixes a critical TACACS+ authentication bypass flaw (CVE-2025-22252) affecting FortiOS and FortiProxy. Patch now to prevent admin-level access.
Critical flaws in OpenPubkey and OPKSSH allow authentication bypass, exposing systems to unauthorized access. Patch now to stay secure.
Ivanti patches CVE-2025-22462, a critical CVSS 9.8 auth bypass flaw in Neurons for ITSM. Risk of full admin access. Patch or restrict IIS access now.
Ivanti fixes EPMM flaws CVE-2025-4427 and CVE-2025-4428, exploited in the wild for unauthenticated RCE. Update now or apply strict API access controls.
CVE-2025-0217 flaw in BeyondTrust PRA allows session hijacking via local auth bypass. Upgrade to version 25.1+ to prevent exploitation.
CVE-2024-38475 and CVE-2023-44221 form an exploit chain targeting SonicWall SMA appliances, enabling remote admin hijack and code execution.
CISA warns of critical flaws in KUNBUS Revolution Pi that allow remote code execution, authentication bypass, and XSS attacks in industrial systems.
Finit's internal getty flaw lets users bypass /bin/login and access Linux systems without authentication. Patch to version 4.11 or use external getty.
Critical 0-click flaw in Microsoft Telnet Server allows attackers to bypass authentication & gain admin access. Learn about the MS-TNAP vulnerability & how to mitigate
Critical flaw CVE-2024-6235 in NetScaler Console lets attackers create admin accounts by abusing an internal API. Patch to version 14.1-25.53 now.
Siemens ProductCERT issued a security advisory detailing critical vulnerabilities in the SENTRON 7KT PAC1260 Data Manager. The flaws could allow remote attackers to execute code, bypass authentication, and more.
JPCERT/CC reports multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP units, including command injection and authentication issues
Learn about CVE-2025-0159, a critical vulnerability in IBM Storage Virtualize products that allows authentication bypass.
Critical flaw (CVE-2024-7593) discovered in Ivanti Virtual Traffic Manager. Learn how to secure your system from potential compromise.