Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited—CISA Sounds Alarm

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added five security flaws impacting software from Cisco, Hitachi Vantara, Microsoft Windows, and Progress WhatsUp Gold to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of...

CVE-2024-57977

creationtimestamp| type| source ---|---|--- 2025-02-27 13:27:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5669 2025-03-08 04:35:53+00:00| seen| Telegram/Sou4NNu0Y0-F0BNghHuLL2mUptw41dExAIMTo7Y2a5SGUt8x 2025-06-12 10:00:00+00:00| seen|...

CVE-2021-29999

creationtimestamp| type| source ---|---|--- 2025-02-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-058-01...

CVE-2025-21795

creationtimestamp| type| source ---|---|--- 2025-02-27 06:11:23+00:00| seen| https://t.me/cvedetector/19002 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05 2026-07-28 16:17:22+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-...

CVE-2025-21796

creationtimestamp| type| source ---|---|--- 2025-02-27 06:11:20+00:00| seen| https://t.me/cvedetector/18999 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05 2025-08-13 09:00:05+00:00| seen|...

CVE-2025-21728

creationtimestamp| type| source ---|---|--- 2025-02-27 02:25:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5637 2025-02-27 04:30:15+00:00| seen| https://t.me/cvedetector/18980 2025-06-12 10:00:00+00:00| seen|...

CVE-2024-50696

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-26 23:33:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jztbvsh2w 2025-02-27 00:19:35+00:00| seen| https://t.me/cvedetector/189...

CVE-2024-50693

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-27 00:19:34+00:00| seen| https://t.me/cvedetector/18970 2025-03-04 21:35:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6442 2025-03-13...

CVE-2024-50688

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-26 23:33:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzsc4zb22 2025-02-27 00:19:29+00:00| seen| https://t.me/cvedetector/189...

CVE-2024-50691

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-26 23:33:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jztungb26 2025-02-27 00:19:31+00:00| seen| https://t.me/cvedetector/189...

Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two security flaws impacting Adobe ColdFusion and Oracle Agile Product Lifecycle Management PLM to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities in question ar...

Trump 2.0 Brings Cuts to Cyber, Consumer Protections

One month into his second term, President Trump's actions to shrink the government through mass layoffs, firings and withholding funds allocated by Congress have thrown federal cybersecurity and consumer protection programs into disarray. At the same time, agencies are battling an ongoing effort ...

CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks

A high-severity security flaw impacting the Craft content management system CMS has been added by the U.S. Cybersecurity and Infrastructure Security Agency CISA to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is...

CVE-2025-0352

creationtimestamp| type| source ---|---|--- 2025-02-20 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-05 2025-02-20 23:12:04+00:00| seen| https://t.me/cvedetector/18599...

Medixant RadiAnt DICOM Viewer

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a machine-in-the-middle attack MITM, resulting in malicious updates being delivered to the user. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

Elseta Vinci Protocol Analyzer

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and perform code execution on the affected system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such...

Automated Logic WebCTRL URL Redirection to Untrusted Site (CVE-2024-8526)

CWE-601 URL Redirection to Untrusted Site 'Open Redirect' vulnerability exists which could allow an attacker to send a maliciously crafted URL, which when visited by an authenticated WebCTRL user, results in the redirection of the user to a malicious webpage via 'index.jsp' This plugin only works...

Siemens SiPass Integrated

SUMMARY SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore. Siemens has released a new...

Automated Logic WebCTRL Premium Server Unrestricted Upload of File with Dangerous Type (CVE-2024-8525)

CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists which could allow an unauthenticated user to upload files of dangerous types without restrictions, leading to remote command execution. This plugin only works with Tenable.ot. Please visit...

CVE-2023-4623

creationtimestamp| type| source ---|---|--- 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09 2025-02-14 10:08:16+00:00| seen| Telegram/B3k3wgjVZS1x3mbQLW2Wp7ATd7Kfy0awTfXoc73gm-NNpX-...