CISA Warns of CentreStack's Hard-Coded MachineKey Vulnerability Enabling RCE Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a critical security flaw impacting Gladinet CentreStack to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerability, tracked as CVE-2025-30406 CVSS score:...

Patch Tuesday, April 2025 Edition

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft's most-dire "critical" rating, meaning malware or malcontents could...

CVE-2025-30678

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-236/ 2025-06-20 13:43:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18956...

CVE-2025-3482

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-244/ 2025-05-22 01:42:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17219 2025-05-22 04:55:25+00:00| seen|...

CVE-2025-3483

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-243/ 2025-05-22 01:42:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17220 2025-05-22 05:00:25+00:00| seen|...

CVE-2025-3480

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-246/ 2025-05-22 01:42:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17217 2025-05-22 07:53:37+00:00| seen|...

CVE-2025-3484

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-242/ 2025-05-22 01:42:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17221 2025-05-22 05:15:27+00:00| seen|...

CVE-2025-1046

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-231/...

CVE-2025-1047

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-232/...

CVE-2025-1048

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-223/ 2025-04-23 18:48:05+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114388768177743771 2025-04-23 20:14:34+00:00| seen|...

CVE-2025-30680

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-238/...

CVE-2025-1045

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-233/...

Patch Tuesday - April 2025

Microsoft is addressing 121 vulnerabilities this April 2025 Patch Tuesday, which is more than twice as many as last month. Microsoft has evidence of in-the-wild exploitation for just one of the vulnerabilities published today, which is already reflected in CISA KEV. Once again, Microsoft has...

Microsoft and Adobe Patch Tuesday, April 2025 Security Update Review

Microsoft's April 2025 Patch Tuesday has arrived, delivering critical security updates and fixes across the various products, features, and roles. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for April 2025 In this month's Patch Tuesday, April 2025 edition, Microsoft...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Circumvention of security measure - Execution of arbitrary code root/admin privileges - Execution o...

Exploitation of CLFS zero-day leads to ransomware activity

Microsoft Threat Intelligence Center MSTIC and Microsoft Security Response Center MSRC have discovered post-compromise exploitation of a zero-day elevation of privilege vulnerability in the Windows Common Log File System CLFS against a small number of targets. The targets include organizations in...

CVE-2025-26673

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:47:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10979 2025-08-11 08:26:12+00:00| seen|...

CVE-2025-29819

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:46:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10962 2025-07-23 06:33:03+00:00| seen|...

CVE-2025-29805

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:46:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10966 2025-08-09 17:25:37+00:00| seen|...

CVE-2025-26679

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:47:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10992...