CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access PRA and Remote Support RS products to the Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The...

PT-2025-4212 · Microsoft · Windows Digital Media +1

Name of the Vulnerable Software and Affected Versions: Windows Digital Media affected versions not specified Description: The issue is related to an elevation of privilege, which allows attackers to affect the system. There is no information provided about the estimated number of potentially...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-12686link is external BeyondTrust Privileged Remote Access PRA and Remote Support RS OS Command Injection Vulnerability CVE-2023-48365link is external Qlik Sen...

CVE-2020-17518

creationtimestamp| type| source ---|---|--- 2025-01-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-12 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-14 00:00:00+00:00| seen| The Shadowserver...

CVE-2018-15517

creationtimestamp| type| source ---|---|--- 2025-01-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-12 2025-03-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-03-09 2025-03-09 00:00:00+00:00| exploited| The Shadowserver...

CVE-2024-12847

The vulnerability CVE-2024-12847 affects NETGEAR DGN1000 routers (prior to firmware version 1.1.00.48). The issue is an authentication bypass in the setup.cgi endpoint that lets a remote, unauthenticated attacker execute arbitrary OS commands as root. Impact is described as remote command executi...

CVE-2023-27639

creationtimestamp| type| source ---|---|--- 2025-01-09 20:17:14+00:00| exploited| https://t.me/DarkWebInformerCVEAlerts/1056 2026-06-19 12:46:54+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7004c6a5-8f2b-4862-88ba-c0ad72ee74bd 2026-06-23 14:04:05+00:00|...

CVE-2023-27640

creationtimestamp| type| source ---|---|--- 2025-01-08 21:13:28+00:00| exploited| https://t.me/DarkWebInformerCVEAlerts/834 2026-06-19 12:46:54+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c24fec1d-a5b5-44b9-8a2b-46a73fb1d8d0 2026-06-23 14:04:05+00:00|...

CISA Adds One Vulnerability to the KEV Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0282link is external Ivanti Connect Secure Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significa...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-41713link is external Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550link is external Mitel MiCollab Path Traversal Vulnerability CVE-2020-2883lin...

CVE-2024-48455

creationtimestamp| type| source ---|---|--- 2025-01-06 21:43:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113783589029330976 2025-01-06 22:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf45vs2etg2a 2025-01-07 00:28:31+00:00| seen|...

CVE-2022-22897

creationtimestamp| type| source ---|---|--- 2025-01-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-01 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-31 00:00:00+00:00| seen| The Shadowserver...

PT-2025-38298

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.185 Microsoft Edge affected versions not specified Chromium affected versions not specified Brave affected versions not specified Opera affected versions not specified Vivaldi affected versions not...

Obsidian Plugin Persistence

This module searches for Obsidian vaults for a user, and uploads a malicious community plugin to the vault. The vaults must be opened with community plugins enabled NOT restricted mode, but the plugin will be enabled automatically. Tested against Obsidian 1.7.7 on Kali, Ubuntu 22.04, and Windows...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-3393link is external Palo Alto Networks PAN-OS Malformed DNS Packet Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

CVE-2018-16159

creationtimestamp| type| source ---|---|--- 2024-12-29 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-29 2025-01-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-04 2025-01-26 00:00:00+00:00| seen| The Shadowserver...

CVE-2017-8961

creationtimestamp| type| source ---|---|--- 2024-12-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-28 2024-12-30 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-30 2025-01-01 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-12987

creationtimestamp| type| source ---|---|--- 2024-12-27 16:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5im54q2e 2024-12-27 17:41:58+00:00| seen| https://t.me/cvedetector/13786 2025-01-01 05:22:07+00:00| published-proof-of-concept| https://t.me/proxybar/2469...

CVE-2024-12856

creationtimestamp| type| source ---|---|--- 2024-12-27 16:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5eb7so2l 2024-12-27 17:41:58+00:00| seen| https://t.me/cvedetector/13787 2024-12-27 18:19:54+00:00| seen|...

CVE-2018-18852

creationtimestamp| type| source ---|---|--- 2024-12-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-27 2025-01-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-05 2025-01-07 00:00:00+00:00| seen| The Shadowserver...