Lucene search
+L

19445 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/16 12:00 a.m.•3 views

CVE-2025-62412: Improper Neutralization of Input During Web Page Generation

LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0...

4.8CVSS6AI score0.00276EPSS
SaveExploits1References5
Circl
Circl
•added 2025/10/15 3:31 p.m.•21 views

CVE-2025-53474

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/ 2026-02-06 17:10:05+00:00| seen|...

8.7CVSS5.7AI score0.00348EPSS
SaveExploits0References3
Circl
Circl
•added 2025/10/15 2:16 p.m.•19 views

CVE-2025-59481

creationtimestamp| type| source ---|---|--- 2025-10-15 14:16:05+00:00| seen| Telegram/EoiprTyskng0KHCJL7AT9DJwBx-4M2ZHKuB4FYrrvAR6-Y 2026-02-04 19:28:38+00:00| seen| Telegram/00DHTaU6lTWShuv9TngbZkyCHrkrFZTa0zsIsXVjILusDA...

8.7CVSS5.7AI score0.00394EPSS
SaveExploits0
Snyk
Snyk
•added 2025/10/15 6:04 a.m.•7 views

Malicious Package

Overview curve-ui-kit-security-notice is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/15 6:04 a.m.•15 views

Malicious Package

Overview cryptocom-private-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Circl
Circl
•added 2025/10/15 1:58 a.m.•18 views

CVE-2025-11623

creationtimestamp| type| source ---|---|--- 2025-10-15 01:58:41+00:00| seen| https://poliverso.org/objects/0477a01e-a74d375c-c413eae3a2f903b8...

6.5CVSS6.8AI score0.00831EPSS
SaveExploits0References1
Circl
Circl
•added 2025/10/14 6:17 p.m.•22 views

CVE-2024-50571

creationtimestamp| type| source ---|---|--- 2025-10-14 18:17:41+00:00| seen| Telegram/HpzjxqiGLtm7b6F-ayme7ZHqHNvh0kEBjBtTOOaZs67yY...

7.2CVSS7.2AI score0.00536EPSS
SaveExploits0
Circl
Circl
•added 2025/10/14 6:17 p.m.•19 views

CVE-2025-25253

creationtimestamp| type| source ---|---|--- 2025-10-14 18:17:31+00:00| seen| Telegram/7DSe42ElHDKq2nxsDFHcYpUxpCQjTYbZ6NZaT2s57pWzLE...

7.5CVSS7.3AI score0.00114EPSS
SaveExploits1
Circl
Circl
•added 2025/10/14 4:13 p.m.•23 views

CVE-2025-59494

creationtimestamp| type| source ---|---|--- 2025-10-14 16:13:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0311 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:24:50+00:00| seen|...

7.8CVSS7.3AI score0.00635EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•20 views

Microsoft Windows Remote Desktop Services Authorization Vulnerability

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. An authorization issue vulnerability exists in Microsoft Windows Remote Desktop Services that stems from an...

7CVSS7.8AI score0.00307EPSS
SaveExploits0References1
Circl
Circl
•added 2025/10/13 8:13 a.m.•21 views

CVE-2025-10557

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:35+00:00| seen| Telegram/WM72dKC9JfGAo4CSStxbpLJ2VPHuwP9d0ucsocDyuRJiGyg...

8.7CVSS5.7AI score0.00201EPSS
SaveExploits0
Snyk
Snyk
•added 2025/10/13 3:20 a.m.•7 views

Malicious Package

Overview internallibv14 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/10/11 7:40 p.m.•220 views

Exploit for Use After Free in Microsoft

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Dete...

9.8CVSS8.6AI score0.74369EPSS
SaveExploits6
Circl
Circl
•added 2025/10/11 9:17 a.m.•18 views

CVE-2025-11518

creationtimestamp| type| source ---|---|--- 2025-10-11 09:17:11+00:00| seen| Telegram/Ql29tSAte7BFaSNSVPXra7LgWLH2fJoYi0dRwAjSjSvT7A...

5.3CVSS4.8AI score0.00233EPSS
SaveExploits0
Circl
Circl
•added 2025/10/11 9:16 a.m.•17 views

CVE-2025-58287

creationtimestamp| type| source ---|---|--- 2025-10-11 09:16:57+00:00| seen| Telegram/kmjuKfn41MRsce8zAIF3MLxJ0ho7Ipf0hb9FwZthKDgLD-c...

7.8CVSS5.7AI score0.001EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2025/10/10 11:00 a.m.•15 views

The AI SOC Stack of 2026: What Sets Top-Tier Platforms Apart?

The SOC of 2026 will no longer be a human-only battlefield. As organizations scale and threats evolve in sophistication and velocity, a new generation of AI-powered agents is reshaping how Security Operations Centers SOCs detect, respond, and adapt. But not all AI SOC platforms are created equal...

5.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/10 10:05 a.m.•15 views

Malicious code in mcp-runcommand-server2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 36fb61d44529c380f204d5a210017989695ef39df6adfce7ccfb08e48a17b594 Package starts a reverse shell to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7.6AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2025/10/10 10:05 a.m.•17 views

MAL-2025-191647 Malicious code in mcp-runcommand-server (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 17f8adb9e7e30e13f8656300881d4e04975f499c03c2f1dbea2e00fd86c357a5 Package starts a reverse shell to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7.5AI score
SaveExploits0References2
Circl
Circl
•added 2025/10/10 7:09 a.m.•16 views

CVE-2025-21053

creationtimestamp| type| source ---|---|--- 2025-10-10 07:09:31+00:00| seen| Telegram/UQBzo0gNemkavBCAEPU8gEzsBMEzXruSUAJE88fKV1dzo...

7.8CVSS4.8AI score0.00127EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/09 11:52 p.m.•9 views

EUVD-2025-33631

Malicious code in orbital-ledger npm...

6.6AI score
SaveExploits0References1
Rows per page
Query Builder