BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
- Pulsegram - Integrated Keylogger With Telegram
- Scrapling - An Undetectable, Powerful, Flexible, High-Performance Python Library That Makes Web Scraping Simple And Easy Again!
- VulnKnox - A Go-based Wrapper For The KNOXSS API To Automate XSS Vulnerability Testing
- Camtruder - Advanced RTSP Camera Discovery and Vulnerability Assessment Tool
- Frogy2.0 - An Automated External Reconnaissance And Attack Surface Management (ASM) Toolkit
- PEGASUS-NEO - A Comprehensive Penetration Testing Framework Designed For Security Professionals And Ethical Hackers. It Combines Multiple Security Tools And Custom Modules For Reconnaissance, Exploitation, Wireless Attacks, Web Hacking, And More
- Text4Shell-Exploit - A Custom Python-based Proof-Of-Concept (PoC) Exploit Targeting Text4Shell (CVE-2022-42889), A Critical Remote Code Execution Vulnerability In Apache Commons Text Versions < 1.10
- Ghost-Route - Ghost Route Detects If A Next JS Site Is Vulnerable To The Corrupt Middleware Bypass Bug (CVE-2025-29927)
- Bytesrevealer - Online Reverse Enginerring Viewer
Exploit DB
- [local] unzip-stream 0.3.1 - Arbitrary File Write
- [remote] OpenSSH server (sshd) 9.8p1 - Race Condition
- [local] tar-fs 3.0.0 - Arbitrary File Write/Overwrite
- [remote] code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
- [local] Microsoft Windows 11 23h2 - CLFS.sys Elevation of Privilege
- [webapps] WordPress Core 6.2 - Directory Traversal
- [remote] WonderCMS 3.4.2 - Remote Code Execution (RCE)
- [local] Microsoft Windows 11 - Kernel Privilege Escalation
- [remote] Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution
- [webapps] FoxCMS 1.2.5 - Remote Code Execution (RCE)
Check Point Disputes Hacker’s Breach Claims
/in General NewsThe security vendor counters that none of the information came directly from its systems but rather was acquired over a period of time by targeting individuals.
darkreading – Read More
Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs
/in General NewsAn undocumented remote access backdoor in the Unitree Go1 Robot Dog allows remote control over the tunnel network and use of the vision cameras to see through their eyes.
The post Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs appeared first on SecurityWeek.
SecurityWeek – Read More
Oracle Hit with Lawsuit Over Alleged Cloud Breach Affecting Millions
/in General NewsOracle faces a class action lawsuit filed in Texas over a cloud data breach exposing sensitive data of 6M+ users; plaintiff alleges negligence and delays.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Japan Bolsters Cybersecurity Safeguards With Cyber Defense Bill
/in General NewsThe bill will allow Japan to implement safeguards and strategies that have been in use by other countries for some time.
darkreading – Read More
Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign
/in General NewsExposed PostgreSQL instances are the target of an ongoing campaign designed to gain unauthorized access and deploy cryptocurrency miners.
Cloud security firm Wiz said the activity is a variant of an intrusion set that was first flagged by Aqua Security in August 2024 that involved the use of a malware strain dubbed PG_MEM. The campaign has been attributed to a threat actor Wiz tracks as
The Hacker News – Read More
European Commission takes aim at end-to-end encryption and proposes Europol become an EU FBI
/in General NewsThe Commission said it would create roadmaps regarding both the “lawful and effective access to data for law enforcement” and on encryption.
The Record from Recorded Future News – Read More
5 tools I trust to keep my online conversations private and anonymous
/in General NewsPrivacy matters. These apps and services help you communicate without putting your identity or data at risk from prying eyes.
Latest stories for ZDNET in Security – Read More
Genetic sharing site openSNP to shut down, citing concerns of data privacy and ‘rise in authoritarian governments’
/in General NewsThe open source repository of genetic data will delete its banks of data on April 30, its co-founder confirms.
Security News | TechCrunch – Read More
Russia tightens cybersecurity measures as financial fraud hits record high
/in General NewsVladimir Putin signed a law on Monday that prohibits state institutions, banks and others from using foreign messaging apps when communicating with customers.
The Record from Recorded Future News – Read More
Hackers Looking for Vulnerable Palo Alto Networks GlobalProtect Portals
/in General NewsGreyNoise warns of a coordinated effort probing the internet for potentially vulnerable Palo Alto Networks GlobalProtect instances.
The post Hackers Looking for Vulnerable Palo Alto Networks GlobalProtect Portals appeared first on SecurityWeek.
SecurityWeek – Read More