7011 matches found
CVE-2025-61677
creationtimestamp| type| source ---|---|--- 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-965/...
CVE-2025-61759
creationtimestamp| type| source ---|---|--- 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-957/...
CVE-2025-20359
creationtimestamp| type| source ---|---|--- 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-966/ 2026-02-13 18:33:26+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116064754433006900...
Mem3nt0 mori – The Hacking Team is back!
In March 2025, Kaspersky detected a wave of infections that occurred when users clicked on personalized phishing links sent via email. No further action was required to initiate the infection; simply visiting the malicious website using Google Chrome or another Chromium-based web browser was...
Important: p7zip
Issue Overview: This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handlin...
Rapid7 at Pwn2Own: Raising the Bar in Vuln Intel
As the 2025 edition of Pwn2Own Ireland draws to a close, we are taking a beat to reflect on Rapid7’s participation and achievements, both this year and last, in the world of competitive zero day exploit development. Pwn2Own is a zero day exploit competition run by the Zero Day Initiative ZDI and...
Exploit for Improper Input Validation in Atlassian Confluence_Data_Center
LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0...
Envoy Air (American Airlines) Confirms Oracle EBS 0-Day Breach Linked to Cl0p
Envoy Air American Airlines confirms a breach by CL0P after they exploited the critical CVE-2025-61882 zero-day flaw in Oracle E-Business Suite...
Cyberattack Detection in Critical Infrastructure and Supply Chains
Cyberattack detection in Critical Infrastructure and Supply Chains has become challenging in Industry 4.0. Intrusion Detection Systems IDS are deployed to counter the cyberattacks. However, an IDS effectively detects attacks based on the known signatures and patterns, Zero-day attacks go...
OSV-2025-845 Global-buffer-overflow in icaltime_day_of_year
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452914686 Crash type: Global-buffer-overflow READ 4 Crash state: icaltimedayofyear expandyeardays iteratorsetstart...
GHSA-6G2V-66CH-6XMH LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
Executive Summary Product: LibreNMS Vendor: LibreNMS Vulnerability Type: Cross-Site Scripting XSS CVSS Score: 4.3 AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L Affected Version: 25.8.0 latest at time of discovery POC File: Download POC Ticket: ZDI-CAN-28105: LibreNMS Alert Rules Cross-Site Scripting...
CVE-2025-11463
creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-954/ 2025-10-29 23:30:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4em3o6xwa2j...
CVE-2025-11465
creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-956/ 2025-10-29 23:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4emb2c7er2k...
CVE-2025-11464
creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-955/ 2025-10-29 23:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4en6ec2bh2s...
CVE-2025-48982
creationtimestamp| type| source ---|---|--- 2025-10-15 14:05:45+00:00| seen| https://vulnerability.circl.lu/bundle/cafe2e2f-6c80-497d-93e2-f209820608e6 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-963/ 2025-10-31 14:01:49+00:00| seen|...
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
Microsoft on Tuesday released fixes for a whopping 183 security flaws spanning its products, including three vulnerabilities that have come under active exploitation in the wild, as the tech giant officially ended support for its Windows 10 operating system unless the PCs are enrolled in the...
Patch Tuesday, October 2025 ‘End of 10’ Edition
Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least two vulnerabilities that are already being actively exploited. October's Patch Tuesday also marks the final month that Microsoft will ship security updates for...
Patch Tuesday - October 2025
Microsoft is publishing 172 new vulnerabilities today. Microsoft is aware of public disclosure for just two of the vulnerabilities published today, and claims no evidence of in-the-wild exploitation. Today sees six zero-day vulnerabilities patched, but only a single one is evaluated as critical...
Microsoft and Adobe Patch Tuesday, October 2025 Security Update Review
As cybersecurity threats evolve, Microsoft's October 2025 Patch Tuesday delivers one of the most comprehensive security updates of the year. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for October 2025 This month's release addresses a staggering 193 vulnerabilities,...