7764 matches found
Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks
On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function CWE-306 in the FortiManager...
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...
The Crypto Game of Lazarus APT: Investors vs. Zero-days
Introduction Lazarus APT and its BlueNoroff subgroup are a highly sophisticated and multifaceted Korean-speaking threat actor. We closely monitor their activities and quite often see them using their signature malware in their attacks — a full-feature backdoor called Manuscrypt. According to our...
CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...
CVE-2024-21259
creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1413/...
CVE-2024-48904
creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1418/ 2024-10-22 18:30:05+00:00| seen| https://t.me/truesecator/6347 2024-10-22 22:09:10+00:00| seen| https://t.me/cvedetector/8647...
CVE-2024-48903
creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1419/ 2024-10-22 22:09:09+00:00| seen| https://t.me/cvedetector/8645...
Malware in mp3-do-wnload-file-to-day-273202-shadow-of-fear-t2vwz-niymvj
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in mp3-do-wnload-file-to-day-5794-street-hassle-pf8jn-wucrqe
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in mp3-do-wnload-file-to-day-32025-moss-side-story-zcimi-mvspdd
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in mp3-do-wnload-file-to-day-47472-adjagas-e6r7u-jlkfci
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in mp3-do-wnload-file-to-day-46223-waltz-of-a-ghetto-fly-i2glp-eayvqc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-45710
creationtimestamp| type| source ---|---|--- 2024-10-16 11:20:37+00:00| seen| https://t.me/cvedetector/8027 2025-03-01 05:27:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6042 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-710/...
North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware
The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT. The vulnerability in question is CVE-2024-38178 CVSS score: 7.5, a memory corruption bug in the Scripting Engine...
CVE-2024-9954
creationtimestamp| type| source ---|---|--- 2024-10-16 00:28:32+00:00| seen| https://t.me/cvedetector/7973 2025-01-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-060/ 2026-07-05 19:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpwd6arne526...
CVE-2024-21273
creationtimestamp| type| source ---|---|--- 2024-10-15 22:48:03+00:00| seen| https://t.me/cvedetector/7956 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1414/ 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-692/...
The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short
In recent years, the number and sophistication of zero-day vulnerabilities have surged, posing a critical threat to organizations of all sizes. A zero-day vulnerability is a security flaw in software that is unknown to the vendor and remains unpatched at the time of discovery. Attackers exploit...
CVE-2024-9710
creationtimestamp| type| source ---|---|--- 2024-10-15 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1383/ 2026-07-19 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqxndwy55x2u...
CVE-2024-6519
creationtimestamp| type| source ---|---|--- 2024-10-15 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1382/ 2024-10-21 17:41:25+00:00| seen| https://t.me/cvedetector/8500 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
