Full Width [alt+shift+f] Shortcuts [alt+shift+k]
Sign Up [alt+shift+s] Log In [alt+shift+l]
14
Today we'd like to share a recent journey into (yet another) SSLVPN appliance vulnerability - a Format String vulnerability, unusually, in Fortinet's FortiGate devices. It affected (before patching) all currently-maintained branches, and recently was highlighted by CISA as being exploited-in-the-wild. This must be the first time
5 months ago

Improve your reading experience

Logged in users get linked directly to articles resulting in a better reading experience. Please login for free, it takes less than 1 minute.

More from watchTowr Labs

XSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748)

We know what you’re waiting for - this isn’t it. Today, we’re back with more tales of our adventures in Kentico’s Xperience CMS. Due to it’s wide usage, the type of solution, and the types of enterprises using this solution

2 days ago 6 votes
By Executive Order, We Are Banning Blacklists - Domain-Level RCE in Veeam Backup & Replication (CVE-2025-23120)

It’s us again! Once again, we hear the collective groans - but we're back and with yet another merciless pwnage of an inspired and clearly comprehensive RCE solution - no, wait, it's another vuln in yet another backup and replication solution.. While we would

2 weeks ago 11 votes
Bypassing Authentication Like It’s The ‘90s - Pre-Auth RCE Chain(s) in Kentico Xperience CMS

I recently joined watchTowr, and it is, therefore, time - time for my first watchTowr Labs blogpost, previously teased in a tweet of a pre-auth RCE chain affecting some ‘unknown software’. Joining the team, I wanted to maintain the trail of destruction left by the watchTowr Labs team,

2 weeks ago 11 votes
The Best Security Is When We All Agree To Keep Everything Secret (Except The Secrets) - NAKIVO Backup & Replication (CVE-2024-48248)

As an industry, we believe that we’ve come to a common consensus after 25 years of circular debates - disclosure is terrible, information is actually dangerous, it’s best that it’s not shared, and the only way to really to ensure that no one ever

a month ago 18 votes
8 Million Requests Later, We Made The SolarWinds Supply Chain Attack Look Amateur

Surprise surprise, we've done it again. We've demonstrated an ability to compromise significantly sensitive networks, including governments, militaries, space agencies, cyber security companies, supply chains, software development systems and environments, and more. “Ugh, won’t they just stick to creating poor-quality memes?” we

a month ago 26 votes

More in technology

The post you knew was coming about the Switch 2 display

Nintendo gave the Switch 2 it's grand unveiling today, and I think it looks great. $449 is a steep starting price, but considering the features and the fact we live in a world of inflation and significant tariffs on many goods coming into the US, it's

23 hours ago 2 votes
The Rapture

It’s fascinating how these vascular bundles, containing xylem and phloem, are arranged in a ring located beneath the skin (periderm) and the cortex.

15 hours ago 1 votes
This student made his own odds with a DIY slot machine

Today’s digital slot machines are anything but “fair,” in the way that most of us understand that word. There is tight regulation in most places, but the machines can still adjust their odds of payout in order to maintain a specific profit margin. If the machine thinks it has paid out too many wins recently, […] The post This student made his own odds with a DIY slot machine appeared first on Arduino Blog.

17 hours ago 1 votes
Some thoughts on the Switch 2

Nintendo finally rolled out the red carpet for the Switch 2 yesterday, and I'll be honest, I'm super excited for it. The hardware The hardware for the new Switch is everything I ever wanted, minus one thing. The performance looks pretty darn good, and it appears

2 hours ago 1 votes
The government should stop worrying about the Daily Mail Test

You can't fix the Civil Service by penny-pinching

yesterday 2 votes