WordPress plugin Multi Days Events and Multi Events in One Day Calendar 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the WordPress...

CVE-2025-31572: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar dragon-calendar-free-version allows Cross Site Request Forgery.This issue affects Multi Days Events and Multi Events in One Day Calendar: from n/a through = 1.1.3...

A Deep Dive into Water Gamayun’s Arsenal and Infrastructure

Trend Research discusses the delivery methods, custom payloads, and techniques used by Water Gamayun, the suspected Russian threat actor abusing a zero-day vulnerability in the Microsoft Management Console framework CVE-2025-26633 to execute malicious code on infected machines...

Exploit for Improper Authentication in Google Android

h0nkbtexploit Samsung devices are vulnerable to a critical...

Update your browser: Security fixes for latest Chrome zero-day

News, Security Update your browser: Security fixes for latest Chrome zero-day Share March 27th, 2025 Hi everyone! The latest patches to the Opera and Opera GX address several recent vulnerabilities, including a zero-day exploit CVE-2025-2783. We recommend updating your browsers to the latest...

Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks

Google has released out-of-band fixes to address a high-severity security flaw in its Chrome browser for Windows that has been exploited in the wild as part of attacks targeting organizations in Russia. The vulnerability, tracked as CVE-2025-2783 , has been described as a case of "incorrect handl...

Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain

In mid-March 2025, Kaspersky technologies detected a wave of infections by previously unknown and highly sophisticated malware. In all cases, infection occurred immediately after the victim clicked on a link in a phishing email, and the attackers' website was opened using the Google Chrome web...

CVE-2025-2768

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-182/ 2025-04-23 20:32:34+00:00| published-proof-of-concept| Telegram/tGlnxgJ45kvnhr-0GuZEauiX58JIxKMY4hRnREk7fiyk0 2025-04-23 21:10:34+00:00| seen|...

CVE-2025-2762

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-176/ 2025-04-23 21:10:28+00:00| seen| https://t.me/cvedetector/23607...

CVE-2025-2766

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-180/ 2025-06-06 21:23:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxrf2ujit2s...

CVE-2025-2763

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-179/ 2025-04-23 21:10:27+00:00| seen| https://t.me/cvedetector/23606...

PT-2025-12847 · Bec Technologies · Bec Technologies Multiple Routers

Name of the Vulnerable Software and Affected Versions: BEC Technologies Multiple Routers affected versions not specified Description: The issue concerns an authentication bypass vulnerability. It is reported to be a 0-day vulnerability, meaning it is being exploited in the wild before a fix is...

CVE-2025-26633: How Water Gamayun Weaponizes MUIPath using MSC EvilTwin

Trend Research identified Russian threat actor Water Gamayun exploiting CVE-2025-26633, a zero-day vulnerability in the Microsoft Management Console that attackers exploit to execute malicious code and exfiltrate data...

PT-2025-12845 · Bdrive · Bdrive Netdrive

Name of the Vulnerable Software and Affected Versions: Bdrive NetDrive affected versions not specified Description: The issue is related to an uncontrolled search path element, which can lead to local privilege escalation. This is a 0-day vulnerability, meaning it is being exploited before a fix ...

Oracle Denies Breach Amid Hacker’s Claim of Access to 6 Million Records

Oracle denies breach claims as hacker alleges access to 6 million cloud records. CloudSEK reports a potential zero-day exploit affecting 140,000 tenants...

CVE-2024-50629

creationtimestamp| type| source ---|---|--- 2025-03-19 06:52:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8030 2025-03-19 07:57:35+00:00| seen| https://t.me/cvedetector/20620 2025-03-27 09:26:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9037 2025-04-09 03:00:00+00:00| seen|...

CVE-2024-50631

creationtimestamp| type| source ---|---|--- 2025-03-19 06:52:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8028 2025-03-19 07:57:40+00:00| seen| https://t.me/cvedetector/20622 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-213/...

CVE-2024-10444

creationtimestamp| type| source ---|---|--- 2025-03-19 02:49:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8013 2025-03-19 04:36:54+00:00| seen| https://t.me/cvedetector/20612 2025-03-24 01:44:06+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3ll3mypef772r 2025-04-09...

CVE-2025-1427

creationtimestamp| type| source ---|---|--- 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-162/ 2025-04-04 14:35:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10452...

CVE-2025-1428

creationtimestamp| type| source ---|---|--- 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-161/ 2025-04-04 14:35:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10450...