CVE-2025-26642

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

Google fixes two actively exploited zero-day vulnerabilities in Android

Google has patched 62 vulnerabilities in Android, including two actively exploited zero-days in its April 2025 Android Security Bulletin. When we say "zero-day" we mean an exploitable software vulnerability for which there was no patch at the time of the vulnerability being exploited or published...

A week in security (March 31 – April 6)

Last week on Malwarebytes Labs: Why we’re no longer doing April Fools’ Day Intimate images from kink and LGBTQ+ dating apps left exposed online "Urgent reminder" tax scam wants to phish your Microsoft credentials "Nudify" deepfakes stored unprotected online Location, name, and photos of random ki...

CVE-2025-2761

creationtimestamp| type| source ---|---|--- 2025-04-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-204/ 2025-04-23 21:10:30+00:00| seen| https://t.me/cvedetector/23610 2025-05-17 14:22:35+00:00| seen|...

CVE-2025-27529

creationtimestamp| type| source ---|---|--- 2025-04-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-201/...

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering and reporting two security flaws in Windows last month, painting a picture of a "conflicted" individual straddling a legitimate career in cybersecurity and pursuing cybercrime. In a new extensive...

Pentales: Red Team vs. N-Day (and How We Won)

During a recent Vector Command operation, I had the chance to sit down with one of our red teamers to hear firsthand how they identified and exploited an N-Day vulnerability in a customer’s environment. It’s a clear example of how continuous red teaming can uncover and validate real-world risks...

CVE-2025-1658

creationtimestamp| type| source ---|---|--- 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:32:44+00:00| seen|...

CVE-2025-1660

creationtimestamp| type| source ---|---|--- 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-03 03:00:00+00:00| seen|...

CVE-2025-24244

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-188/ 2025-04-01 03:00:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114260469802135825 2025-04-01 03:00:07+00:00| seen|...

CVE-2025-24243

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-189/ 2026-04-02 22:15:08+00:00| seen| Telegram/A1zSU9KcM20ZRLemoMFRz3NG5DsD-KNcnO6EGaNoIwAY1a4...

CVE-2025-24256

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-194/ 2026-04-02 22:15:13+00:00| seen| Telegram/LEjwKyuBTB6b6mFnoSKeIfUM-CoxQ2buHbucYd1vZ1GovQ...

CVE-2025-24210

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-195/ 2025-04-01 14:33:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9904...

WordPress Multi Days Events and Multi Events in One Day Calendar plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Pham Van Tam in WordPress Plugin Multi Days Events and Multi Events in One Day Calendar versions = 1.1.3...

CVE-2025-31572

Cross-Site Request Forgery CSRF vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar dragon-calendar-free-version allows Cross Site Request Forgery.This issue affects Multi Days Events and Multi Events in One Day Calendar: from n/a through = 1.1.3...

WordPress plugin Multi Days Events and Multi Events in One Day Calendar 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the WordPress...

A Deep Dive into Water Gamayun’s Arsenal and Infrastructure

Trend Research discusses the delivery methods, custom payloads, and techniques used by Water Gamayun, the suspected Russian threat actor abusing a zero-day vulnerability in the Microsoft Management Console framework CVE-2025-26633 to execute malicious code on infected machines...

Exploit for Improper Authentication in Google Android

h0nkbtexploit Samsung devices are vulnerable to a critical...

Update your browser: Security fixes for latest Chrome zero-day

News, Security Update your browser: Security fixes for latest Chrome zero-day Share March 27th, 2025 Hi everyone! The latest patches to the Opera and Opera GX address several recent vulnerabilities, including a zero-day exploit CVE-2025-2783. We recommend updating your browsers to the latest...

Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks

Google has released out-of-band fixes to address a high-severity security flaw in its Chrome browser for Windows that has been exploited in the wild as part of attacks targeting organizations in Russia. The vulnerability, tracked as CVE-2025-2783 , has been described as a case of "incorrect handl...