Lucene search
+L

38654 matches found

The Hacker News
The Hacker News
added 2025/08/27 9:28 a.m.17 views

Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra

Cybersecurity researchers have discovered five distinct activity clusters linked to a persistent threat actor known as Blind Eagle between May 2024 and July 2025. These attacks, observed by Recorded Future Insikt Group, targeted various victims, but primarily within the Colombian government acros...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/08/27 12:00 a.m.9 views

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

8.6CVSS6.1AI score0.00585EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/08/27 12:00 a.m.9 views

The vulnerability of the Internet Key Exchange version 1 protocol (IKEv1) in Cisco IOS XE operating systems allows a attacker to induce a service failure.

The vulnerability of the Internet Key Exchange version 1 IKEv1 protocol in Cisco IOS XE operating systems is related to improper handling of undefined values. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.7CVSS6.7AI score0.00428EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/08/27 12:00 a.m.11 views

SPON IP Network Broadcast System 安全漏洞

SPON IP Network Broadcast System is a pure digital broadcasting system based on IP network from China SPON. A security vulnerability exists in the SPON IP Network Broadcast System that stems from insufficient input validation and could lead to arbitrary file reading...

8.7CVSS6.7AI score0.01056EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/08/27 12:00 a.m.11 views

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

5.8CVSS6.1AI score0.00675EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/08/27 12:00 a.m.8 views

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.8CVSS6.1AI score0.00675EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2022-23094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because...

7.5CVSS7.2AI score0.02523EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-16411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimestamp in decode-ipv4....

9.8CVSS8.3AI score0.02027EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-12066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

5.5CVSS5.5AI score0.00392EPSS
SaveExploits0References2
Circl
Circl
added 2025/08/26 5:04 a.m.20 views

CVE-2025-9430

creationtimestamp| type| source ---|---|--- 2025-08-26 05:04:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbqhtks6x2p...

4.8CVSS3.9AI score0.00271EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
added 2025/08/26 12:00 a.m.12 views

CITADEL: Continual Anomaly Detection for Enhanced Learning in IoT Intrusion Detection

The Internet of Things IoT, with its high degree of interconnectivity and limited computational resources, is particularly vulnerable to a wide range of cyber threats. Intrusion detection systems IDS have been extensively studied to enhance IoT security, and machine learning-based IDS ML-IDS show...

7AI score
SaveExploits0
NVD
NVD
added 2025/08/25 3:15 p.m.7 views

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...

6.5CVSS0.00432EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2025/08/25 12:00 a.m.12 views

$AutoGuardX$: a Comprehensive Cybersecurity Framework for Connected Vehicles

The rapid integration of Internet of Things IoT and interconnected systems in modern vehicles not only introduced a new era of convenience, automation, and connected vehicles but also elevated their exposure to sophisticated cyber threats. This is especially evident in US and Canada, where...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/25 12:00 a.m.10 views

PT-2025-34712 · Pypi · Request-Filtering-Agent

Name of the Vulnerable Software and Affected Versions: request-filtering-agent versions 1.x.x and earlier Description: request-filtering-agent is an https.Agent implementation designed to block requests to Private/Reserved IP addresses. HTTPS requests to 127.0.0.1 bypass IP address filtering, whi...

6.9CVSS6.4AI score0.00458EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/08/24 4:07 p.m.8 views

CVE-2025-38638

In the Linux kernel, the following vulnerability has been resolved: ipv6: add a retry logic in net6rtnotify inet6rtnotify can be called under RCU protection only. This means the route could be changed concurrently and rt6fillnode could return -EMSGSIZE. Re-size the skb when this happens and retry...

7CVSS6.1AI score0.00137EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/08/24 2:30 p.m.7 views

CVE-2009-10006

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...

9.3CVSS7.4AI score0.00867EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-10728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the...

5.3CVSS5.6AI score0.02232EPSS
SaveExploits1References2
Packet Storm News
Packet Storm News
added 2025/08/24 12:00 a.m.11 views

An Efficient Recommendation Filtering-Based Trust Model for Securing Internet of Things

Trust computation is crucial for ensuring the security of the Internet of Things IoT. However, current trust-based mechanisms for IoT have limitations that impact data security. Sliding window-based trust schemes cannot ensure reliable trust computation due to their inability to select appropriat...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/23 8:13 p.m.13 views

CVE-2010-20112

Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the application fails to enforce bounds on input supplied to the app parameter, allowing excessive data to overwrite memory structures including...

9.3CVSS7.6AI score0.01121EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/08/23 1:37 a.m.211 views

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-33053 POC Exploit Overview The working director...

8.8CVSS9.7AI score0.85289EPSS
SaveExploits10
Rows per page
Query Builder