CVE-2024-27834

creationtimestamp| type| source ---|---|--- 2025-02-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-093/ 2025-10-01 17:45:01+00:00| seen| Telegram/NsEmTFCOjSJbTHlnR1YZZFRmKmacy2al4F27E4YEx6XJl7yQ 2026-02-12 03:20:05+00:00| seen|...

CVE-2024-27833

creationtimestamp| type| source ---|---|--- 2025-02-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-092/...

SLiMS 安全漏洞

SLiMS Senayan Library Management System is a free library management system from SLiMS open source. A security vulnerability exists in SLiMS version 9.6.1, which stems from the month parameter of monitorreportday.php not being handled correctly, allowing remote attackers to elevate privileges...

CVE-2025-25505

creationtimestamp| type| source ---|---|--- 2025-02-21 17:18:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4922 2025-02-21 19:46:48+00:00| seen| https://t.me/cvedetector/18675 2025-08-12 16:01:32+00:00| seen|...

A week in security (February 10 – February 16)

Last week on Malwarebytes Labs: A suicide reveals the lonely side of AI chatbots, with Courtney Brown Lock and Code S06E03 Apple ordered to grant access to users’ encrypted data Phishing evolves beyond email to become latest Android app threat Apple fixes zero-day vulnerability used in "extremely...

Monero 18.3.4 Denial of Service

Monero version 18.3.4 suffers from a memory exhaustion vulnerability. Hello, About an hour ago, a group appearing to be named WyRCV2 posted a note on the nostr social network, which can be found at the following link:...

CVE-2024-11347

creationtimestamp| type| source ---|---|--- 2025-02-13 18:58:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113998108985571018 2025-02-13 19:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3flxeq5x2z 2025-02-13 20:34:56+00:00| seen|...

CVE-2024-11346

creationtimestamp| type| source ---|---|--- 2025-02-13 18:58:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113998108970991505 2025-02-13 19:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3flvan2a2a 2025-02-13 20:35:03+00:00| seen|...

CVE-2025-1094: PostgreSQL psql SQL injection (FIXED)

Rapid7 discovered a high-severity SQL injection vulnerability, CVE-2025-1094, affecting the PostgreSQL interactive tool psql. This discovery was made while Rapid7 was performing research into the recent exploitation of CVE-2024-12356 — an unauthenticated remote code execution RCE vulnerability th...

Patch Tuesday: Microsoft Fixes 63 Bugs with 2 Zero-Days

Microsoft's February Patch Tuesday addresses 63 security vulnerabilities, including two actively exploited zero-days. Update your systems now to…...

Microsoft Patch Tuesday, February 2025 Edition

Microsoft today issued security updates to fix at least 56 vulnerabilities in its Windows operating systems and supported software, including two zero-day flaws that are being actively exploited. All supported Windows operating systems will receive an update this month for a buffer overflow...

Patch Tuesday - February 2025

Microsoft is addressing 56 vulnerabilities this February 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for two of the vulnerabilities published today, which is reflected in CISA KEV. Microsoft is aware of public disclosure for two other vulnerabilities. This is now the...

Patch Tuesday - February 2025

Microsoft is addressing 56 vulnerabilities this February 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for two of the vulnerabilities published today, which is reflected in CISA KEV. Microsoft is aware of public disclosure for two other vulnerabilities. This is now the...

Microsoft and Adobe Patch Tuesday, February 2025 Security Update Review

As the second Patch Tuesday of 2025 arrives, Microsoft has released crucial updates to strengthen cybersecurity defenses. Let's explore the highlights and what they mean for users. Microsoft Patch Tuesday for February 2025 Microsoft Patch's Tuesday, February 2025 edition addressed 67...

CVE-2025-21373

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbfpze7r2a 2025-02-11 19:49:20+00:00| seen|...

CVE-2024-50569

creationtimestamp| type| source ---|---|--- 2025-02-11 16:51:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113986285732278387 2025-02-11 17:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5yinz452h 2025-02-11 17:45:29+00:00| seen|...

Apple fixes zero-day vulnerability used in “extremely sophisticated attack”

Apple has released an emergency security update for a vulnerability which it says may have been exploited in an "extremely sophisticated attack against specific targeted individuals.” The update is available for: iOS 18.3.1 and iPadOS 18.3.1 - iPhone XS and later, iPad Pro 13-inch, iPad Pro...

CVE-2024-52606

creationtimestamp| type| source ---|---|--- 2025-02-11 07:21:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113984042858977898 2025-02-11 08:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhv7rnz7ir2h 2025-02-11 11:29:53+00:00| seen|...

XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells

Threat actors have been observed exploiting multiple security flaws in various software products, including Progress Telerik UI for ASP.NET AJAX and Advantive VeraCore, to drop reverse shells and web shells, and maintain persistent remote access to compromised systems. The zero-day exploitation o...

CVE-2025-20172

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 17:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh35tvxig27 2025-02-05 19:09:14+00:00| seen|...