Google publishes exploit code threatening millions of Chromium users

Google on Wednesday published exploit code for an unfixed vulnerability in its Chromium browser codebase that threatens ...
INTERNET Watch

JPEG処理の脆弱性「MS04-028」を突くexploitコード2種類が新たに公開

JPEG処理の脆弱性「MS04-028」を突くexploitコード2種類が新たに公開 マイクロソフトが15日に発表したJPEG処理（GDI+）の脆弱性「MS04-028」を突く、新たな攻撃コード（exploitコード）が海外のセキュリティベンダー各社から新たに公開されている。各社とも早急に ...
Ars Technica

Code found online exploits LogoFAIL to install Bootkitty Linux backdoor

Researchers have discovered malicious code circulating in the wild that hijacks the earliest stage boot process of Linux devices by exploiting a year-old firmware vulnerability when it remains ...
NewsBytes

Microsoft suspends 'Nightmare Eclipse' after posting 0-day exploit code

Microsoft is under fire for suspending accounts linked to a researcher who publicly shared zero-day exploit code, sparking ...
INTERNET Watch

Windows Media Playerの脆弱性「MS06-005」を突くexploitコード

Windows Media Playerの脆弱性「MS06-005」を突くexploitコード 米SANS Instituteは16日、Windows Media PlayerのBMPファイルを処理する方法に存在する脆弱性「MS06-005」を突くexploitコードが公開されたと警告した。仏FrSIRTではコードを公開しており、危険度は4段階で最も深刻な ...

Google posts Chromium browsers' proof-of-concept exploit code without a fix

Chrome, Edge, Brave, Opera, and other Chromium-based browsers could reportedly be exposed to abuse after Google accidentally revealed exploit code for an unfixed vulnerability ...

Microsoft faces backlash after suspending accounts linked to zero-day exploit disclosures ...

Microsoft is reportedly facing criticism over its response to a security researcher who has been publicly sharing ...
Bleeping Computer

Exploit released for Fortra GoAnywhere MFT auth bypass bug

Exploit code is now available for a critical authentication bypass vulnerability in Fortra's GoAnywhere MFT (Managed File Transfer) software that allows attackers to create new admin users on ...
Bleeping Computer

Exploit released for Cisco SSM bug allowing admin password changes

Cisco warns that exploit code is now available for a maximum severity vulnerability that lets attackers change any user password on unpatched Cisco Smart Software Manager On-Prem (Cisco SSM On-Prem) ...