Martedi 28 Luglio 2026 23:42:30 GMT+02:00

Netcrook

HomeManifesto
News
Corporate Security IncidentsCloud, SaaS & Identity SecurityIndustrial Cybersecurity & Critical InfrastructureCyber Intelligence, TrendsAI Security & Agentic SystemsCyber Intelligence & Threat TrendsCyber WarfareCyber Warfare & Nation-State OperationsCyber CriminalityBreaches & Data LeaksCybercrimeMalware & BotnetsRansomware & ExtortionSecurity Awareness & Social EngineeringLegal PolicyLegal, Policy & Government CybersecurityPrivacy, Regulation & ComplianceTechnology, InnovationTechnology, Innovation & Digital InfrastructureVulnerabilities Patch ManagementResearch, Exploits & Offensive SecurityVulnerabilities & Patch Management
Techcrook
Tutte le tecnologieIdentita e accessoFirewall e reteBackup e archiviazioneEnergia e continuitaPrivacy e sicurezza fisicaLaboratorio e prototipazioneStampa e tracciabilitaTecnologia quotidiana
Geocrook
AfricaAsiaEuropeMiddle EastNorth AmericaOceaniaSouth America
WikicrookTeamAppContattiLogin
ItalianoEnglish

#unauthenticated exploit

Il parser che poteva oltrepassare il confine fino all'esecuzione di codice

28 Luglio 2026 10:22Vulnerabilità e gestione delle patchAsia / CinaSECURESPECTER

Una vulnerabilità di Fastjson segnalata come attiva negli attacchi mostra come una normale libreria JSON possa diventare un punto di ingresso non autenticato quando le impostazioni predefinite rischiose restano invariate.

#Fastjson | #remote code execution | #unauthenticated exploit

The Weak Link in Oracle EBS Is Not the Login Page - It Is the Payment Pipe

30 June 2026 10:23Vulnerabilities & Patch ManagementNorth America / USANEONPALADIN

A critical Oracle E-Business Suite flaw tied to payment transmission shows how one narrow component can create outsized risk for enterprise finance operations.

#Oracle E-Business Suite | #CVE-2026-46817 | #unauthenticated exploit

Oracle WebLogic’s Hidden Door: Why One Unauthenticated CVE Demands Immediate Attention

02 June 2026 14:11Vulnerabilities & Patch ManagementNorth America / USASECURESPECTER

CVE-2024-21182 puts a network-reachable Oracle WebLogic weakness in the spotlight, and its unauthenticated nature makes it a high-priority concern for teams that still rely on middleware as a trusted internal layer.

#CVE-2024-21182 | #Oracle WebLogic | #unauthenticated exploit