459 matches found
PT-2025-44700
Name of the Vulnerable Software and Affected Versions Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App versions prior to 3.6.1 Description The Post SMTP plugin for WordPress has a flaw due to a missing capability check within the construct function. This allows...
Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation
Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server Update Services WSUS vulnerability with a proof-of-concept Poc exploit publicly available and has come under active exploitation in the wild. The vulnerability in question is CVE-2025-59287 CVS...
Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Motex Lanscope Endpoint Manager to its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2025-61932 CVSS v4...
CISA Adds Five Known Exploited Vulnerabilities to Catalog
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2022-48503link is external Apple Multiple Products Unspecified Vulnerability CVE-2025-2746link is external Kentico Xperience Staging Sync Server Digest Passwor...
CISA Flags Adobe AEM Flaw with Perfect 10.0 Score — Already Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Adobe Experience Manager to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2025-54253 CVSS score:...
CVE-2025-11371
creationtimestamp| type| source ---|---|--- 2025-10-10 07:34:00+00:00| seen| https://thehackernews.com/2025/10/from-lfi-to-rce-active-exploitation.html 2025-10-10 08:10:45+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-rilevato-sfruttamento-in-rete-della-cve-2025-11371 2025-10-10...
EUVD-2021-17678
Malware in sbrugna...
EUVD-2022-27732
Malicious code in bioql PyPI...
EUVD-2023-36653
Malicious code in bioql PyPI...
EUVD-2023-45582
Malicious code in bioql PyPI...
EUVD-2021-7246
Malicious code in bioql PyPI...
EUVD-2023-47245
Malicious code in bioql PyPI...
Exploit for CVE-2025-10585
CVE-2025-10585: The Chrome V8 Zero-Day You Need to Patch Today...
PT-2025-37425
Name of the Vulnerable Software and Affected Versions ImageIO affected versions not specified Description An issue exists in ImageIO that could allow for arbitrary code execution through maliciously crafted images. This issue was actively exploited. The vulnerability does not provide access to...
Critical CVE-2025-5086 in DELMIA Apriso Actively Exploited, CISA Issues Warning
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a critical security flaw impacting Dassault Systèmes DELMIA Apriso Manufacturing Operations Management MOM software to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The...
PT-2025-36575
Name of the Vulnerable Software and Affected Versions FortiAP versions 7.6.0 through 7.6.2 FortiAP versions 7.4.0 through 7.4.5 FortiAP version 7.2 FortiAP version 7.0 FortiAP version 6.4 FortiAP-U versions 7.0.0 through 7.0.5 FortiAP-U version 6.2 FortiAP-W2 versions 7.4.0 through 7.4.4 FortiAP-...
PT-2025-36464
Name of the Vulnerable Software and Affected Versions ABB Terra AC wallbox UL40/80A versions through 1.8.32 ABB Terra AC wallbox UL32A versions through 1.8.2 ABB Terra AC wallbox MID/ CE -Terra AC MID versions through 1.8.32 ABB Terra AC wallbox MID/ CE -Terra AC Juno CE versions through 1.8.32 A...
Critical SAP Vulnerability CVE-2025-42957 Actively Exploited by Hackers
Urgent security alert for SAP users! A critical vulnerability CVE-2025-42957 allows attackers to take full control of your…...
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild
A critical security vulnerability impacting SAP S/4HANA, an Enterprise Resource Planning ERP software, has come under active exploitation in the wild. The command injection vulnerability, tracked as CVE-2025-42957 CVSS score: 9.9, was fixed by SAP as part of its monthly updates last month. "SAP...
CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a high-severity security flaw impacting TP-Link TL-WA855RE Wi-Fi Ranger Extender products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, CVE-2020-24363...