Topic: patch reverse engineering

SmarterMail Flaw Lets Attackers Hijack Admin Accounts

A critical authentication bypass flaw in SmarterMail's 'force-reset-password' API endpoint allows attackers to hijack administrator accounts and gain full server control. Threat actors began exploiting the vulnerability just two days after the patch was released, suggesting they reverse-engineere...