Breach Intelligence (CVE)

In early 2025, a critical authentication bypass vulnerability, CVE-2025-0108, was discovered in Palo Alto Networks’ PAN-OS. This vulnerability allows attackers to bypass authentication and gain unauthorized access to the PAN-OS management interface by exploiting a path confusion issue between Nginx and Apache. With a high severity rating, this vulnerability poses a significant risk to organizations… Read More »CVE-2025-0108: How Attackers Exploit Palo Alto PAN-OS: Are You Vulnerable?

Introduction One of the most talked-about vulnerabilities this year is CVE-2024-23897, a critical Remote Code Execution (RCE) flaw in Jenkins, a popular open-source automation server used for building, testing, and deploying software. Understanding how attackers might exploit this vulnerability and how to use Shodan dorks to identify vulnerable systems is crucial for protecting your infrastructure.… Read More »Jenkins Vulnerability Exposed: Exploiting CVE-2024-23897 to Access System Files

Critical CVEs: Fortinet, Oracle, PostgreSQL, WS_FTP Server and More This week, from February 19th to 23rd, the FireCompass research team identified a huge number of CVEs that are high in severity, along with ransomware, botnets, and threat actors creating havoc. Some of the CVEs identified are in popular commercial products used by various industries, and… Read More »Critical CVEs: Fortinet, Oracle, PostgreSQL, WS_FTP Server and More

Fortnightly Critical Vulnerabilities: February Part 1 The FireCompass research team identified a huge number of CVEs that are high in severity and ransomware, botnets, and threat actors creating Havoc. Some of the CVEs identified are of popular commercial products used by various industries and some new & well-known malware targeting industries for this week. In… Read More »Fortnightly Critical Vulnerabilities: February Part 1

Critical CVEs: FortiOS, Microsoft Exchange, vSphere, SolarWinds and More From February 12th to 16th, the FireCompass research team identified a huge number of CVEs that are high in severity and ransomware, botnets, and threat actors creating havoc. Some of the CVEs identified are of popular commercial products used by various industries and some new &… Read More »Critical CVEs: FortiOS, Microsoft Exchange, vSphere, SolarWinds and More