CVE-2025-7978

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-632/...

CVE-2025-7989

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-640/...

CVE-2025-7981

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-634/...

CVE-2025-7987

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-641/...

ToolShell Zero-day: Microsoft Rushes Emergency Patch for Actively Exploited SharePoint Vulnerabilities

On July 19, 2025, Microsoft issued an emergency out-of-band security update to address two zero-day vulnerabilities in Microsoft SharePoint Server: CVE-2025-53770 and CVE-2025-53771. These vulnerabilities are under active exploitation in the wild and demand immediate attention to protect your...

CVE-2025-53770 - Zero-day exploitation in the wild of Microsoft SharePoint servers

Overview On Saturday July 19, 2025, Microsoft released an advisory for CVE-2025-53770, a critical Remote Code Execution RCE vulnerability affecting on-premise SharePoint servers. This vulnerability has been exploited in the wild as a zero-day by an unknown threat actor prior to the disclosure fro...

⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More

Even in well-secured environments, attackers are getting in—not with flashy exploits, but by quietly taking advantage of weak settings, outdated encryption, and trusted tools left unprotected. These attacks don’t depend on zero-days. They work by staying unnoticed—slipping through the cracks in...

CVE-2025-7974

creationtimestamp| type| source ---|---|--- 2025-07-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-627/ 2025-09-02 22:50:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxv7bt2duu2p...

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers

A critical security vulnerability in Microsoft SharePoint Server has been weaponized as part of an "active, large-scale" exploitation campaign. The zero-day flaw, tracked as CVE-2025-53770 CVSS score: 9.8, has been described as a variant of CVE-2025-49704 CVSS score: 8.8, a code injection and...

PT-2025-30160

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server affected versions not specified Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute arbitra...

Chrome fixes 6 security vulnerabilities. Get the update now!

Google has released an update for its Chrome browser to patch six security vulnerabilities, including one zero-day. This update is crucial since it addresses one actively exploited vulnerability which can be abused when the user visits a malicious website. It doesn’t require any further user...

CVE-2025-20285

creationtimestamp| type| source ---|---|--- 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-605/...

CVE-2025-37107

creationtimestamp| type| source ---|---|--- 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-614/...

CVE-2025-37105

creationtimestamp| type| source ---|---|--- 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-612/ 2025-09-09 20:56:46+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

CVE-2025-37106

creationtimestamp| type| source ---|---|--- 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-613/...

Update your browser: Security fix for Chrome zero-day CVE-2025-6558

News, Security Update your browser: Security fix for Chrome zero-day CVE-2025-6558 Share July 17th, 2025 Hi everyone! The latest patches to the Opera, Opera GX, and Opera Air address several recent vulnerabilities, including a zero-day exploit CVE-2025-6558. We recommend updating your browsers to...

Urgent: Google Releases Critical Chrome Update for CVE-2025-6558 Exploit Active in the Wild

Google on Tuesday rolled out fixes for six security issues in its Chrome web browser, including one that it said has been exploited in the wild. The high-severity vulnerability in question is CVE-2025-6558 CVSS score: 8.8, which has been described as an incorrect validation of untrusted input in...

Navigating the Cyber Threat Landscape in 2025: Key Insights for Security Leaders

2025 is half way done already and it has been evolving at an unprecedented pace, presenting new challenges and opportunities for security leaders. Last week, we launched The Hive Pro Cyber Horizons Annual Threat Report 2025. The report sheds light on the most pressing threats and offers actionabl...

Navigating the Cyber Threat Landscape in 2025: Key Insights for Security Leaders

2025 is half way done already and it has been evolving at an unprecedented pace, presenting new challenges and opportunities for security leaders. Last week, we launched The Hive Pro Cyber Horizons Annual Threat Report 2025. The report sheds light on the most pressing threats and offers actionabl...

CVE-2025-5037

creationtimestamp| type| source ---|---|--- 2025-07-15 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-597/ 2025-07-15 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-594/ 2025-07-15 03:00:00+00:00| seen|...