PT-2025-29822 · Undefined · Undefined

Google patched CVE-2025-2465, a critical type confusion flaw in Chrome’s V8 engine under active exploitation. Update immediately to prevent remote code execution. ChromeUpdate ZeroDay CVE20252465 BrowserSecurity CyberSecurity RCE GoogleChrome PatchNow ThreatIntelligence https://t.co/52UynMSvj6...

Vulnerabilities fixed in Microsoft Edge (Chromium based)

Microsoft fixed vulnerabilities in Edge Chromium-based A malicious party could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, or to access sensitive data in the context of the victim's browser. This update also fixes the vulnerability with attribute...

Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability

Zyxel users beware: A critical remote code execution flaw CVE-2023-28771 in Zyxel devices is under active exploitation by a Mirai-like botnet. GreyNoise observed a surge on June 16, targeting devices globally...

TP-Link Router Flaw CVE-2023-33538 Under Active Exploit, CISA Issues Immediate Alert

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a high-severity security flaw in TP-Link wireless routers to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability in question is CVE-2023-33538 CVSS score: 8.8, a...

PT-2025-25650

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway affected versions not specified Description The issue concerns improper access control on the NetScaler Management Interface in Citrix NetScaler ADC and NetScaler Gateway. Recommendations At the momen...

Researchers Drop PoC for Fortinet CVE-2025-32756, Urging Quick Patching

Researchers have released PoC for CVE-2025-32756, a severe security flaw, that is actively being exploited in Fortinet products…...

CVE-2023-41992

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS...

CVE-2023-41061

A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...

CVE-2023-3460

The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild...

CVE-2021-30807

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been...

CVE-2021-30713

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited...

PT-2025-22318 · Papin · Companion Auto Update

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is an issue that is being actively exploited. The estimated number of potentially affected devices worldwide is not available. Details about real-world incidents where this issue was...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-4427link is external Ivanti Endpoint Manager Mobile EPMM Authentication Bypass Vulnerability CVE-2025-4428link is external Ivanti Endpoint Manager Mobile EPMM...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-32756link is external Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability These types of vulnerabilities are frequent attack vectors for malicio...

PT-2025-21215 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is an issue that is being actively exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2025-21010

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description The issue is related to a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock, which allows an authorized attacker to eleva...

Recently Disclosed SureTriggers Critical Privilege Escalation Vulnerability Under Active Exploitation

On May 2nd, 2025 the Wordfence Threat Intelligence team added a new critical vulnerability to the Wordfence Intelligence vulnerability database in the OttoKit: All-in-One Automation Platform Formerly SureTriggers plugin publicly disclosed by a third-party CNA on April 30th, 2025. This vulnerabili...

Here Comes Mirai: IoT Devices RSVP to Active Exploitation

...

watchTowr Warns of Active Exploitation of SonicWall SMA 100 Devices

watchTowr reveals active exploitation of SonicWall SMA 100 vulnerabilities CVE-2024-38475 & CVE-2023-44221 potentially leading to full system takeover…...

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added two high-severity security flaws impacting Broadcom Brocade Fabric OS and Commvault Web Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerabilities...