متوسط
۱۴۰۵/۰۶/۲۸
Brevo supply-chain attack injected ClickFix scripts on customer sites
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into …
پایش زنده تهدیدات · ۲۴/۷
هشدارهای امنیت سایبری
آسیبپذیریها و تهدیدات روز با رتبهبندی CVSS و شدت — مستقیم از تیم تحلیل تهدیدات سیاره فناوری اطلاعات.
CRITICAL
بحرانی
HIGH
بالا
MEDIUM
متوسط
LOW
پایین
متوسط
۱۴۰۵/۰۶/۲۸
New RatHat Android malware uses AI to automate device control
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators …
بحرانی
۱۴۰۵/۰۶/۲۸
New Check Point flaw lets hackers execute code with root privileges
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code …
متوسط
۱۴۰۵/۰۶/۲۸
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented …
پایین
۱۴۰۵/۰۶/۲۸
Gyazo server flaw exploited to steal 23.6 million user records
The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that …
بالا
۱۴۰۵/۰۶/۲۸
VU#212479: Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment
Overview A vulnerability exists in Sentry Seer when the system is configured to automatically hand issues to a …
بالا
۱۴۰۵/۰۶/۲۸
VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control
Overview A vulnerability in MLflow’s dspy and statsmodels model flavors allows unauthorized pickle deserialization executions despite a safety …
بالا
۱۴۰۵/۰۶/۲۸
VU#280377: Dokploy is vulnerable to OS command injection
Overview Dokploy versions 0.29.8 and 0.29.11, as well as commit 24b02f5 on the canary branch, are vulnerable to …
بحرانی
۱۴۰۵/۰۶/۲۲
CVE-2021-22893: Ivanti Pulse Connect Secure Use-After-Free Vulnerability (Ivanti Pulse Connect Secure)
Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via …
بحرانی
۱۴۰۵/۰۶/۲۲
CVE-2020-8243: Ivanti Pulse Connect Secure Code Execution Vulnerability (Ivanti Pulse Connect Secure)
Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated …