CVE-2025-24073

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-26642

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-27476

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-21191

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-05-19 23:03:00+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkokz2bns24...

CVE-2025-27736

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-26648

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:47:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10977...

Google fixes two actively exploited zero-day vulnerabilities in Android

Google has patched 62 vulnerabilities in Android, including two actively exploited zero-days in its April 2025 Android Security Bulletin. When we say "zero-day" we mean an exploitable software vulnerability for which there was no patch at the time of the vulnerability being exploited or published...

A week in security (March 31 – April 6)

Last week on Malwarebytes Labs: Why we’re no longer doing April Fools’ Day Intimate images from kink and LGBTQ+ dating apps left exposed online "Urgent reminder" tax scam wants to phish your Microsoft credentials "Nudify" deepfakes stored unprotected online Location, name, and photos of random ki...

CVE-2025-27529

creationtimestamp| type| source ---|---|--- 2025-04-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-201/...

CVE-2025-2761

creationtimestamp| type| source ---|---|--- 2025-04-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-204/ 2025-04-23 21:10:30+00:00| seen| https://t.me/cvedetector/23610 2025-05-17 14:22:35+00:00| seen|...

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering and reporting two security flaws in Windows last month, painting a picture of a "conflicted" individual straddling a legitimate career in cybersecurity and pursuing cybercrime. In a new extensive...

Pentales: Red Team vs. N-Day (and How We Won)

During a recent Vector Command operation, I had the chance to sit down with one of our red teamers to hear firsthand how they identified and exploited an N-Day vulnerability in a customer’s environment. It’s a clear example of how continuous red teaming can uncover and validate real-world risks...

CVE-2025-1660

creationtimestamp| type| source ---|---|--- 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-03 03:00:00+00:00| seen|...

CVE-2025-1658

creationtimestamp| type| source ---|---|--- 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:32:44+00:00| seen|...

CVE-2025-24244

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-188/ 2025-04-01 03:00:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114260469802135825 2025-04-01 03:00:07+00:00| seen|...

CVE-2025-24243

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-189/ 2026-04-02 22:15:08+00:00| seen| Telegram/A1zSU9KcM20ZRLemoMFRz3NG5DsD-KNcnO6EGaNoIwAY1a4...

CVE-2025-24210

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-195/ 2025-04-01 14:33:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9904...

CVE-2025-24256

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-194/ 2026-04-02 22:15:13+00:00| seen| Telegram/LEjwKyuBTB6b6mFnoSKeIfUM-CoxQ2buHbucYd1vZ1GovQ...

WordPress Multi Days Events and Multi Events in One Day Calendar plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Pham Van Tam in WordPress Plugin Multi Days Events and Multi Events in One Day Calendar versions = 1.1.3...

CVE-2025-31572

Cross-Site Request Forgery CSRF vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar dragon-calendar-free-version allows Cross Site Request Forgery.This issue affects Multi Days Events and Multi Events in One Day Calendar: from n/a through = 1.1.3...