CVE-2025-38562

creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-917/ 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-10924

creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-913/...

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is a network operating system from Cisco USA. A security vulnerability exists in Cisco IOS XE Software that stems from an incomplete cleanup of the Day One setup process, which could allow an unauthenticated remote attacker to access the PKI server...

PT-2025-39298

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL affected versions not specified Description A flaw exists in the Day One setup process that may allow a remote, unauthenticated attacker to access the...

CVE-2025-8892

creationtimestamp| type| source ---|---|--- 2025-09-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-908/...

CVE-2025-8354

creationtimestamp| type| source ---|---|--- 2025-09-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-907/...

PT-2025-39212

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.34 Description Chamilo is a learning management system. A Cross-Site Request Forgery CSRF issue allows an attacker to delete projects within a course without the victim’s consent. Sensitive actions, such as proje...

PT-2025-39213

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.34 Description Chamilo is a learning management system susceptible to a stored cross-site scripting XSS issue. An attacker with a low-privileged account, such as a trainer, can inject malicious JavaScript into th...

PT-2025-39214

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.34 Description Chamilo is a learning management system susceptible to a stored cross-site scripting XSS issue. An attacker with limited access, such as a trainer, can inject malicious JavaScript into the course...

⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More

The security landscape now moves at a pace no patch cycle can match. Attackers aren't waiting for quarterly updates or monthly fixes—they adapt within hours, blending fresh techniques with old, forgotten flaws to create new openings. A vulnerability closed yesterday can become the blueprint for...

CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday released details of two sets of malware that were discovered in an unnamed organization's network following the exploitation of security flaws in Ivanti Endpoint Manager Mobile EPMM. "Each set contains loaders for maliciou...

Update your Chrome today: Google patches 4 vulnerabilities including one zero-day

Google has released an update for its Chrome browser to patch four security vulnerabilities, including one zero-day. A zero-day vulnerability refers to a bug that has been found and exploited by cybercriminals before the vendor even knew about it they have "zero days" to fix it. This update is...

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

Google on Wednesday released security updates for the Chrome web browser to address four vulnerabilities, including one that it said has been exploited in the wild. The zero-day vulnerability in question is CVE-2025-10585 , which has been described as a type confusion issue in the V8 JavaScript a...

CVE-2025-43368

creationtimestamp| type| source ---|---|--- 2025-09-18 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-901/ 2025-09-26 22:48:41+00:00| seen| https://gist.github.com/EbonJaeger/172fddcd6ea3906a8f574edf86e204c5 2026-01-21 16:30:13+00:00| seen|...

Update your browser: Security fix for Chrome zero-day CVE-2025-10585

News, Security Update your browser: Security fix for Chrome zero-day CVE-2025-10585 Share September 18th, 2025 Hi everyone! The latest patches to Opera, Opera GX, Opera Air, and Opera for Android address several recent vulnerabilities, including a zero-day exploit CVE-2025-10585. We recommend...

CVE-2025-10585

creationtimestamp| type| source ---|---|--- 2025-09-17 23:21:47+00:00| seen| https://bsky.app/profile/secureblue.dev/post/3lz2y23vazc2f 2025-09-18 03:00:11+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lz3eamyenc2c 2025-09-18 03:49:00+00:00| seen|...

CVE-2025-10643

creationtimestamp| type| source ---|---|--- 2025-09-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-895/ 2025-09-18 03:02:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lz3edve4ru2m 2025-09-18 23:37:23+00:00| seen|...

CVE-2025-10644

creationtimestamp| type| source ---|---|--- 2025-09-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-896/ 2025-09-18 01:32:06+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lz37d3ud7l2o...

CVE-2025-10203

creationtimestamp| type| source ---|---|--- 2025-09-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-894/...

WindowsRegistryRootkit

It is an offensive tool for Windows. This repository contains a kernel rootkit that resides within Windows registry value data, developed by Oleksiuk Dmytro aka Cr4sh. The rootkit exploits a zero-day vulnerability in win32k.sys, a Windows kernel-mode driver, through a buffer overflow in the...