CVE-2025-53770

CVE-2025-53770 SharePoint Descrizione La deserializzazione di dati non attendibili in Microsoft SharePoint Server locale consente a un utente malintenzionato di eseguire codice in remoto e compromettere il sistema. Microsoft è a conoscenza dello sfruttamento attivo e sta preparando un aggiornamen...

CVE-2023-38831

CVE-2023-38831 Questo è uno strumento facile da usare che crea un exploit per CVE-2023-38831 che colpisce tutte le versioni di WinRAR precedenti alla 6.23. Ulteriori informazioni sull'exploit CVE-2023-38831 RARLAB WinRAR precedente alla 6.23 consente agli attaccanti di eseguire codice arbitrario...

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC Una vulnerabilità critica in Microsoft SharePoint Server consente l'esecuzione remota di codice senza autenticazione tramite deserializzazione di dati non attendibili. Microsoft è a conoscenza di uno sfruttamento attivo; applicare immediatamente l...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation

🚨 CVE-2025-49706 – Vulnerabilità di Spoofing di SharePoint sotto sfruttamento attivo Di Aditya Bhatt – Specialista VAPT | Red Teamer 📌 TL;DR Microsoft SharePoint è sotto minaccia attiva. CVE‑2025‑49706, una vulnerabilità di spoofing in SharePoint Server, si è evoluta da gravità media a...

bluefire-sharepoint-cve-2025-53770

🔐 Bluefire Redteam – Toolkit zur Erkennung und Behebung von SharePoint CVE-2025-53770 Dieses Open-Source-Toolkit bietet Sicherheitsteams kampferprobte Skripte zur Erkennung, Bewertung und Behebung der kritischen SharePoint Zero-Day-Schwachstelle CVE-2025-53770 CVSS 9.8 – derzeit wird sie in freie...

CVE-2023-38831-POC

Descrizione Nome : CVE-2023-38831 Punteggio CVSS : 7.8 Versioni interessate : Winrar 6.23 CVE-2023-38831 è una vulnerabilità zero-day che interessa tutte le versioni di WinRAR precedenti alla 6.23. Il problema risiede nell'elaborazione del formato ZIP, che potrebbe consentire agli aggressori di...

CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal

CVE-2025-8088: Path Traversal Zero-Day di WinRAR — Da Zero a Pwn 🗿 Introduzione – Il “Vecchio Amico” Appena Colto in Fallo WinRAR — il classico polveroso che tutti hanno installato ma nessuno aggiorna — è stato appena colpito da un zero-day ad alta gravità : CVE-2025-8088. Gravità: CVSS v3.1 → 8....

CVE-2025-10585-The-Chrome-V8-Zero-Day

CVE-2025-10585: Der Chrome V8 Zero-Day, den Sie heute patchen müssen ⚔️🛡️ Google hat diese Woche einen außerplanmäßigen Patch für CVE-2025-10585 veröffentlicht, eine schwerwiegende Type-Confusion -Sicherheitslücke in Chrome's V8 JavaScript/WebAssembly-Engine. Der Fehler ist nicht theoretisch –...

cve-2025-53770

CVE-2025-53770 PoC di Deserializzazione RCE di SharePoint Critico — Esecuzione remota di codice non autenticata tramite deserializzazione non sicura in Microsoft SharePoint Server CVE-2025-53770 Descrizione La deserializzazione di dati non attendibili in Microsoft SharePoint Server on-premises...

Linux Distros Unpatched Vulnerability : CVE-2026-77647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect...

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231 , is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation. "SAP...

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote code execution RCE. The security defect remain...

CVE-2026-18574 Authentication Bypass in Check Point Security Management Server

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

PT-2026-67387

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator VCO has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 CVSS score: 10.0, is a case of operating system command injection that could pave the way for arbitrary...

CVE-2026-16812 VeloCloud Orchestrator OS Command Injection

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vulnerability in question is CVE-2026-50522 CVSS score: 9.8, a critical deserialization of untrusted data in Microsoft Office SharePoint tha...

CVE-2026-15719

creationtimestamp| type| source ---|---|--- 2026-07-14 16:45:14+00:00| seen| https://www.acn.gov.it/portale/w/mozilla-rilevato-sfruttamento-attivo-di-nuove-vulnerabilita 2026-07-15 04:45:06+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260715...

CVE-2026-15718

creationtimestamp| type| source ---|---|--- 2026-07-14 16:45:12+00:00| seen| https://www.acn.gov.it/portale/w/mozilla-rilevato-sfruttamento-attivo-di-nuove-vulnerabilita 2026-07-15 04:45:03+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260715...