Zero-day allows code execution in WindChill and FlexPLM

The manufacturer warns and urges admins to urgently secure their instances with a workaround. A patch is still pending.

https://www.heise.de/en/news/Zero-day-allows-code-execution-in-WindChill-and-FlexPLM-11220546.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Exploit #IT #Security #news

VoidStealer malware steals Chrome master key via debugger trick

https://www.bleepingcomputer.com/news/security/voidstealer-malware-steals-chrome-master-key-via-debugger-trick/

Short summary: https://hackerworkspace.com/article/voidstealer-malware-steals-chrome-master-key-via-debugger-trick

#malware #vulnerability #exploit

USR just collapsed! 🚨

The stablecoin fell to $0.25 after an $80M unbacked mint exploit. Here’s what we know so far: https://auriccrypto.com/stable/stablecoin-shock-resolvs-usr-loses-peg-after-80m-mint/

#Stablecoin #Crash #Hack #Exploit

Zero-Day erlaubt Codeausführung in WindChill und FlexPLM

Der Hersteller warnt und bittet Admins, dringend ihre Instanzen mit einer Notlösung abzusichern. Ein Patch steht noch aus.

https://www.heise.de/news/Zero-Day-erlaubt-Codeausfuehrung-in-WindChill-und-FlexPLM-11220521.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Exploit #IT #Security #news

LLVM Adventures: Fuzzing Apache Modules

https://pwner.gg/blog/2026-03-20-apatchy

Short summary: https://hackerworkspace.com/article/llvm-adventures-fuzzing-apache-modules

#cybersecurity #exploit #reverseengineering

Cuidado con los teléfonos #Qualcomm antiguos, están sufriendo una vulnerabilidad, otra razón para empezar a usar custom ROM's, obvio si tienen la posibilidad y el conocimiento para hacerlo, así para estar al dia con las actualizaciones de seguridad que son muy importantes

Eso o ir ahorrando para otro teléfono mas actual...

https://thehackernews.com/2026/03/google-confirms-cve-2026-21385-in.html

https://youtu.be/J7O9PZPzsSo

#Android #Exploit #Security

wpForo Forum <= 2.4.14 - SQL Injection (CVE-2026-1581)

https://pentest-tools.com/vulnerabilities-exploits/wpforo-forum-2414-sql-injection_29049

Short summary: https://hackerworkspace.com/article/wpforo-forum-2-4-14-sql-injection-cve-2026-1581

#cybersecurity #vulnerability #exploit

Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

https://thehackernews.com/2026/03/oracle-patches-critical-cve-2026-21992.html

Short summary: https://hackerworkspace.com/article/oracle-patches-critical-cve-2026-21992-enabling-unauthenticated-rce-in-identity-manager

#cybersecurity #vulnerability #exploit

RAXE-2026-040: Claude Code Workspace Trust Dialog Bypass via Repository Settings (CVE-2026-33068) | RAXE Labs

https://raxe.ai/labs/advisories/RAXE-2026-040

Short summary: https://hackerworkspace.com/article/raxe-2026-040-claude-code-workspace-trust-dialog-bypass-via-repository-settings-cve-2026-33068-raxe-labs

#cybersecurity #vulnerability #exploit