DslogdRAT Malware Deployed in Ivanti Connect Secure Zero-Day Campaign

A new wave of attacks targeting Ivanti Connect Secure VPN devices has revealed a stealthy malware strain known as DslogdRAT, deployed alongside a simple but effective Perl web shell.
Security research …
Read more

Published Date:
Apr 24, 2025 (9 hours, 31 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-22457

CVE-2025-0282

Microsoft mystery folder fix might need a fix of its own

Turns out Microsoft’s latest patch job might need a patch of its own, again. This time, the culprit is a mysterious inetpub folder quietly deployed by Redmond, now hijacked by a security researcher to …
Read more

Published Date:
Apr 24, 2025 (3 hours, 55 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-21204

CVE ID : CVE-2025-43859

Published : April 24, 2025, 7:15 p.m. | 4 hours, 11 minutes ago

Description : h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11’s parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in version 0.16.0. Since exploitation requires the combination of buggy h11 with a buggy (reverse) proxy, fixing either component is sufficient to mitigate this issue.

Severity: 9.1 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…