Gladinet's Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability

A recently disclosed security flaw in Gladinet CentreStack also impacts its Triofox remote access and collaboration solution, according to Huntress, with seven different organizations compromised to date. Tracked as CVE-2025-30406 CVSS score: 9.0, the vulnerability refers to the use of a hard-cod...

CVE-2025-29705

creationtimestamp| type| source ---|---|--- 2025-04-10 16:18:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/30953 2025-04-10 23:00:05+00:00| published-proof-of-concept| Telegram/9LqTCC70Tmrs3-GJxOa30srOJB-prgOGFp9BSoM5dngRJY 2025-04-15 18:43:57+00:00| seen|...

togo.poho.com.au Cross Site Scripting vulnerability OBB-4042812

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fanosanchez.com Cross Site Scripting vulnerability OBB-4042268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Maximo Application Suite - Predict Component vulnerable to authenticate a server may fail to notice that the server was not authenticated.

Summary Security Bulletin: IBM Maximo Application Suite - Predict Component vulnerable to Clients that enable server-side raw public keys can still find out that raw public key verification. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

📄 Usermin 2.100 Username Enumeration

Usermin versions 2.100 and below suffer from a username enumeration vulnerability. Exploit Title: Usermin 2.100 - Username Enumeration Date: 10.02.2024 Exploit Author: Kjesper Vendor Homepage: https://www.webmin.com/usermin.html Software Link: https://github.com/webmin/usermin Version: = 2.100...

CVE-2025-31479

creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10144 2025-04-02 22:04:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270632021246470 2025-04-02 22:04:31+00:00| seen|...

CVE-2025-21965

In the Linux kernel, the following vulnerability has been resolved: schedext: Validate prevcpu in scxbpfselectcpudfl If a BPF scheduler provides an invalid CPU outside the nrcpuids range as prevcpu to scxbpfselectcpudfl it can cause a kernel crash. To prevent this, validate prevcpu in...

CVE-2025-31619

creationtimestamp| type| source ---|---|--- 2025-04-01 22:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxug4tzb2l 2025-04-01 23:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379557389873 2025-04-01 23:48:44+00:00| seen|...

CVE-2024-21082

creationtimestamp| type| source ---|---|--- 2025-03-26 20:40:11+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcnfyw7te2v...

CVE-2024-11958

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:26+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhc6orn2g...

CVE-2025-0652

CVE-2025-0652 affects GitLab EE/CE versions 16.9–17.7.6, 17.8.x prior to 17.8.5, and 17.9.x prior to 17.9.2. The issue enables unauthorized users to access confidential information intended for internal use. The published entries consistently describe this as an incorrect/unauthorized access auth...

CVE-2024-57977 memcg: fix soft lockup in the OOM process

In the Linux kernel, the following vulnerability has been resolved: memcg: fix soft lockup in the OOM process A soft lockup issue was found in the product with about 56,000 tasks were in the OOM cgroup, it was traversing them when the soft lockup was triggered. watchdog: BUG: soft lockup - CPU2...

Siemens APOGEE PXC and TALON TC Series Inadequate Encryption Strength (CVE-2024-54089)

Affected devices contain a weak encryption mechanism based on a hard-coded key. This could allow an attacker to guess or decrypt the password from the cyphertext. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

CVE-2025-25676

creationtimestamp| type| source ---|---|--- 2025-02-20 23:17:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4833 2025-02-21 00:55:49+00:00| seen| https://t.me/cvedetector/18613 2025-02-21 19:48:45+00:00| seen|...

Automated Logic WebCTRL Premium Server Unrestricted Upload of File with Dangerous Type (CVE-2024-8525)

CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists which could allow an unauthenticated user to upload files of dangerous types without restrictions, leading to remote command execution. This plugin only works with Tenable.ot. Please visit...

CVE-2025-21698

creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyefkir4t2g 2025-02-13 17:15:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4291...

PT-2025-6777 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM affected versions not specified Description: A problem with the network isolation mechanism of the Palo Alto Networks Cortex XDR Broker VM allows attackers unauthorized access to Docker containers from...

CVE-2024-46432

creationtimestamp| type| source ---|---|--- 2025-02-10 19:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7hy44y2q 2025-02-10 21:16:34+00:00| seen| https://t.me/cvedetector/17588 2025-02-10 22:48:54+00:00| seen|...

CVE-2025-20045

creationtimestamp| type| source ---|---|--- 2025-02-05 17:37:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113952492476102575 2025-02-05 18:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6k3cos62j...