CVE-2025-48827

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025...

Exploitation Observed: Ivanti Connect Secure — CVE-2023-46805 and CVE-2024-21887

...

CVE-2023-30801

creationtimestamp| type| source ---|---|--- 2023-10-10 18:16:40+00:00| exploited| https://t.me/cibsecurity/71941 2026-06-19 12:46:47+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acbd87d4-2cf7-443c-b844-85171fed11c0 2026-06-23 14:04:05+00:00| exploited|...

AZL-35117 CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now!

Progress Software, the company behind the MOVEit Transfer application, has released patches to address brand new SQL injection vulnerabilities affecting the file transfer solution that could enable the theft of sensitive information. "Multiple SQL injection vulnerabilities have been identified in...

CVE-2023-1017

creationtimestamp| type| source ---|---|--- 2023-02-28 22:33:09+00:00| seen| https://t.me/cibsecurity/59172 2023-03-03 15:51:33+00:00| seen| https://t.me/truesecator/4129 2023-03-03 22:26:32+00:00| seen| https://t.me/KomunitiSiber/17 2023-03-06 08:40:53+00:00| seen| https://t.me/kasperskyb2b/504...

CVE-2022-27255

creationtimestamp| type| source ---|---|--- 2022-08-01 16:16:54+00:00| seen| https://t.me/cibsecurity/47317 2022-08-12 19:07:37+00:00| seen| https://t.me/truesecator/3289 2022-08-14 13:05:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6591 2022-08-17 10:17:33+00:00|...

CVE-2021-35250

creationtimestamp| type| source ---|---|--- 2022-04-26 00:36:23+00:00| seen| https://t.me/cibsecurity/41415 2023-04-14 12:58:47+00:00| seen| https://t.me/poxek/2829 2023-04-14 22:46:49+00:00| published-proof-of-concept| https://t.me/dilagrafie/2882 2023-04-16 18:19:10+00:00|...

CVE-2022-22950

creationtimestamp| type| source ---|---|--- 2022-03-31 16:01:37+00:00| exploited| https://t.me/truesecator/2793 2022-04-02 02:20:09+00:00| seen| https://t.me/cibsecurity/40032 2022-04-06 20:32:36+00:00| exploited| https://t.me/truesecator/2816...

CVE-2021-41338

creationtimestamp| type| source ---|---|--- 2021-10-13 07:32:34+00:00| seen| https://t.me/cibsecurity/30485 2021-10-13 15:52:05+00:00| seen| https://t.me/truesecator/2209 2021-10-14 16:21:20+00:00| exploited| Telegram/0N8hYoIZNVMzLz29O1HKlSbPUHPxGySFoEhQpN9rXpV6UQ...