The Exploit Post

Sign in Subscribe

Red Dog Security

Gigabyte Motherboards Vulnerable to UEFI Malware

Gigabyte Motherboards Vulnerable to UEFI Malware

Multiple Gigabyte motherboard models are shipping with vulnerable UEFI firmware, exposing users to stealthy bootkit malware that operates below the operating system and is invisible to traditional security tools. The flaws allow attackers with local or remote administrative privileges to execute arbitrary code in System Management Mode (SMM)—a highly

Hackers Exploit Critical RCE Vulnerability in Wing FTP Server

Hackers Exploit Critical RCE Vulnerability in Wing FTP Server

Attackers began exploiting a critical vulnerability in Wing FTP Server just one day after technical details about the flaw were made public. The vulnerability, tracked as CVE-2025-47812, received the maximum CVSS severity score of 10.0. It stems from a combination of a null byte injection and Lua code execution,

eSIM Vulnerabilities Allow Card Cloning and User Surveillance

eSIM Vulnerabilities Allow Card Cloning and User Surveillance

Researchers from AG Security Research have uncovered serious vulnerabilities in eSIM technology, affecting billions of devices worldwide. The flaw lies in the eUICC software package developed by Kigen, a key player in the embedded SIM ecosystem. The Rise of eSIM—and Its Security Risks Embedded SIM cards (eSIMs) are rapidly

FBI Shuts Down Websites Distributing Pirated Games

FBI Shuts Down Websites Distributing Pirated Games

The Federal Bureau of Investigation (FBI) has seized the domain names of several websites tied to game piracy, including the long-targeted NSW2U[.]com, a site that Nintendo has been battling for years. According to TorrentFreak, the operation was carried out in cooperation with international law enforcement, including the Fiscal Information

Google Gemini Can Redirect Users to Phishing Sites

Google Gemini Can Redirect Users to Phishing Sites

Google Gemini for Workspace can be tricked into generating legitimate-looking email summaries that include malicious instructions, effectively redirecting users to phishing websites. This attack leverages hidden prompt injections embedded in emails—commands that Gemini unknowingly follows when summarizing messages. How the Attack Works Marco Figueroa, cybersecurity expert and manager of

GPUHammer: Rowhammer Attack Adapted for Nvidia GPUs

GPUHammer: Rowhammer Attack Adapted for Nvidia GPUs

Nvidia is urging users to enable System-Level Error-Correcting Code (ECC) after researchers demonstrated that GDDR6 memory in its GPUs is vulnerable to a variant of the infamous Rowhammer attack. “The risk of a successful Rowhammer exploit depends on the DRAM model, platform, architectural specifics, and system settings,” the company stated.

WordPress Plugin Gravity Forms Hacked – Backdoor Found in Official Installers

WordPress Plugin Gravity Forms Hacked – Backdoor Found in Official Installers

The popular WordPress plugin Gravity Forms has become the latest victim of a supply chain attack, with official installers from its website found to be infected with a dangerous backdoor. Gravity Forms is a premium plugin used to build contact forms, payment forms, and a wide range of other user-input