SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Critical Zero-Day Flaw Actively Exploited in WordPress Fancy Product Designer Plugin
A critical zero-day vulnerability has been discovered in a WordPress plugin called Fancy Product Designer. A Wordfence Threat Intelligence team from WordPress security company Defiant alerted about this vulnerability. The vulnerability is under active attack, which is tracked as CVE-2021-24370 by us...
CVE Research
FortiDDoS Appliances Vulnerable to OS Command Injection, Urges Immediate Patching
Fortinet has recently addressed a medium-severity OS command injection vulnerability, CVE-2024-45325, in its FortiDDoS-F appliances. This flaw could allow a privileged attacker to execute unauthorized commands via the command-line interface (CLI). Given the critical role FortiDDoS-F appliances play ...
SCAP Feed Release – Part 1 : 13-Apr-2017
Qsnatch snatching credentials in an ongoing Campaign
CVE Research
Qsnatch snatching credentials in an ongoing Campaign
QSnatch, the new malware in town has already affected thousands of devices and wouldn’t call it quits. This malware was first discovered in October 2019 by the National Cyber Security Center of Finland (NCSC-FI) after it received reports via the Autoreporter service indicating the communication of i...
CVE Research
SonicWall Fixes Actively Exploited SMA 100 Vulnerability Used in Overstep Attacks
A critical zero-day flaw in SonicWall SMA 100 VPN appliances is being leveraged in the wild to distribute Overstep, a stealth malware capable of maintaining persistent access, stealing credentials, and executing lateral attacks. The vulnerability allows remote code execution without authentication, ...
CVE Research
Inside UNC5221’s BRICKSTORM: Unmasking a Stealthy Espionage Backdoor
Since at least early 2025, a suspected China-nexus cluster, tracked as UNC5221, has deployed the BRICKSTORM backdoor using the vulnerabilities CVE-2023-46805 and CVE-2024-21887 to establish long-term, stealthy access to high-value targets, notably legal services, SaaS providers, BPOs, and technology...
CVE Research
Versa Director Zero-Day Under Siege: Volt Typhoon and Bronze Silhouette Campaign
Cybercriminal groups and nation aligned advanced persistent threats (APTs) are increasingly converging on stealth first, persistence focused, and monetization driven operations. Recent reporting shows both financially motivated actors and suspected state aligned groups actively exploiting a critical...
CVE Research
CISA Issues Emergency Directive as Cisco ASA Zero-Day Exploited in the Wild
Cisco has issued an urgent security advisory, urging customers to patch two critical zero-day vulnerabilities affecting the VPN web server components of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. These flaws are actively ...