Skip to content
Threat Feed
Subscribe

Tag

Exposure

3 briefs RSS
high advisory

Exposure of Remote Procedure Call Services to the Internet

Publicly accessible Remote Procedure Call (RPC) services on TCP port 135 facilitate initial access and backdoor establishment by threat actors.

initial-access network-security rpc exposure
1r 2t
high threat

Fortinet FortiOS CVE-2025-68686 Sensitive Information Exposure Bypass

A remote unauthenticated attacker can exploit CVE-2025-68686 in Fortinet FortiOS to bypass a previously applied patch, allowing sensitive information exposure and enabling persistence post-exploitation, provided the product was already compromised at the filesystem level via another vulnerability.

exploited PoC FortiOS +7 fortinet vulnerability cve exposure persistence
1t 3c 4i updated
high advisory

OpenClaw Sandbox Browser CDP Relay Vulnerability Exposing DevTools Protocol

OpenClaw versions prior to 2026.4.10 are vulnerable to a configuration issue where the sandbox browser CDP relay could bind too broadly, exposing Chrome DevTools Protocol access outside the intended local/sandbox source range, potentially allowing unauthorized access to browser DevTools.

openclaw cdp devtools sandbox exposure
2r 2t