7517 matches found
CVE-2025-7977
creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-629/...
CVE-2025-7992
creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-642/...
CVE-2025-7990
creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-638/...
CVE-2025-7978
creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-632/...
CVE-2025-7989
creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-640/...
CVE-2025-7983
creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-635/...
CVE-2025-7981
creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-634/...
CVE-2025-7987
creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-641/...
ToolShell Zero-day: Microsoft Rushes Emergency Patch for Actively Exploited SharePoint Vulnerabilities
On July 19, 2025, Microsoft issued an emergency out-of-band security update to address two zero-day vulnerabilities in Microsoft SharePoint Server: CVE-2025-53770 and CVE-2025-53771. These vulnerabilities are under active exploitation in the wild and demand immediate attention to protect your...
CVE-2025-53770 - Zero-day exploitation in the wild of Microsoft SharePoint servers
Overview On Saturday July 19, 2025, Microsoft released an advisory for CVE-2025-53770, a critical Remote Code Execution RCE vulnerability affecting on-premise SharePoint servers. This vulnerability has been exploited in the wild as a zero-day by an unknown threat actor prior to the disclosure fro...
⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More
Even in well-secured environments, attackers are getting in—not with flashy exploits, but by quietly taking advantage of weak settings, outdated encryption, and trusted tools left unprotected. These attacks don’t depend on zero-days. They work by staying unnoticed—slipping through the cracks in...
CVE-2025-7974
creationtimestamp| type| source ---|---|--- 2025-07-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-627/ 2025-09-02 22:50:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxv7bt2duu2p...
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers
A critical security vulnerability in Microsoft SharePoint Server has been weaponized as part of an "active, large-scale" exploitation campaign. The zero-day flaw, tracked as CVE-2025-53770 CVSS score: 9.8, has been described as a variant of CVE-2025-49704 CVSS score: 8.8, a code injection and...
PT-2025-30160
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute arbitrary code over a network. The issue occurs...
Ivanti Flaws Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks
Cybersecurity researchers have disclosed details of a new malware called MDifyLoader that has been observed in conjunction with cyber attacks exploiting security flaws in Ivanti Connect Secure ICS appliances. According to a report published by JPCERT/CC today, the threat actors behind the...
Chrome fixes 6 security vulnerabilities. Get the update now!
Google has released an update for its Chrome browser to patch six security vulnerabilities, including one zero-day. This update is crucial since it addresses one actively exploited vulnerability which can be abused when the user visits a malicious website. It doesn’t require any further user...
CVE-2025-37107
creationtimestamp| type| source ---|---|--- 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-614/...
CVE-2025-37105
creationtimestamp| type| source ---|---|--- 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-612/ 2025-09-09 20:56:46+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...