Tag: Unauthenticated
-
Security Alert: Malware Counterfeit of Flyoobe Tool Targets Users Bypassing Windows 11 Checks
Following the end of official support for Windows 10, an increasing number of users have been seeking ways to upgrade to Windows 11, even on devices that technically fail to meet Microsoft’s new system requirements. Against this backdrop, the Flyoobe utility has gained popularity for enabling installations of Windows 11 on unsupported hardware. However, a…
-
Oracle EBS Zero-Day CVE-2025-61882 (CVSS 9.8) Being Actively Exploited by Clop Ransomware
Oracle has warned of a zero-day vulnerability in E-Business Suite, designated CVE-2025-61882, that permits unauthenticated remote arbitrary code execution. The flaw is already being actively exploited by the Clop group in data-theft operations, making it one of the most dangerous threats currently observed. The vulnerability resides in the BI Publisher Integration component of the Oracle…
-
Urgent Cisco ISE/ISE-PIC Alert: Critical RCE Flaw (CVSS 10.0) Allow Unauthenticated Root Access
Cisco has remedied a critical vulnerability in its Unified Communications Manager (Unified CM), the enterprise telephony management system, which could have granted attackers complete control over affected devices due to a hardcoded superuser account embedded within the platform. Formerly known as Cisco CallManager, Unified CM is a cornerstone of Cisco’s IP telephony suite, enabling call…
-
Urgent Cisco ISE/ISE-PIC Alert: Two Critical RCE Flaws (CVSS 10.0) Allow Unauthenticated Root Access
Cisco has released critical security updates to address two severe vulnerabilities in its network security products. Both issues affect Cisco Identity Services Engine (ISE) and its associated component, the ISE Passive Identity Connector (ISE-PIC). Exploiting these flaws could allow threat actors to gain complete control over vulnerable devices by executing arbitrary code with superuser privileges.…