Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
An unauthenticated attacker can bypass authentication on Cisco SD-WAN vManage devices by utilizing URL-encoded paths and internal usernames to obtain admin-level sessions.
Adversaries are chaining a JWT authentication bypass with unsafe .NET type instantiation in SharePoint's Business Connectivity Services to achieve remote code execution.
Security researcher Chaotic Eclipse released a Windows Zero-Day PoC, LegacyHive, which enables arbitrary registry hive loading for privilege escalation across all supported Windows versions.
