Ivanti Endpoint Manager Mobile exploit chain exploited in the wild

On May 13, 2025, Ivanti disclosed an exploited in the wild exploit chain, comprising of two new vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM: CVE-2025-4427 and CVE-2025-4428. Ivanti EPMM is an enterprise-focused software suite for IT teams to manage mobile devices, applications,...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-32756link is external Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability These types of vulnerabilities are frequent attack vectors for malicio...

Patch Tuesday - May 2025

Microsoft is addressing 77 vulnerabilities this May 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for five of the vulnerabilities published today, and these are already reflected in CISA KEV. Separately, Microsoft is aware of existing public disclosure for two...

Update to How CISA Shares Cyber-Related Alerts and Notifications

Update May 13 : In an effort to enhance user experience and highlight the most timely and actionable information for cyber defenders, CISA announced a shift in how we share cybersecurity alerts and advisories. We recognize this has caused some confusion in the cyber community. As such, we have...

Geo Vision EoL Devices Improper Neutralization of Special Elements used in an OS Command (CVE-2024-11120)

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received relat...

CVE-2024-5827

creationtimestamp| type| source ---|---|--- 2025-05-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-12 2025-06-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-06-26 2025-11-11 00:00:00+00:00| exploited| The...

CVE-2022-1390

creationtimestamp| type| source ---|---|--- 2025-05-10 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-10 2026-05-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-05-18 2026-06-06 00:00:00+00:00| exploited| The Shadowserver...

CVE-2025-47729

CVE-2025-47729 relates to TeleMessage’s archiving backend (TM SGNL/Archive Signal). The public records state that the archiving backend stores cleartext copies of user messages, contrary to the stated end-to-end encryption claim, and this exposure has been exploited in the wild as of May 2025. Th...

Exploit for Unrestricted Upload of File with Dangerous Type in Themefic Ultimate_Before_After_Image_Slider_\&_Gallery

Ultimate Before After Image Slider & Gallery – BEAF 1: lo: mt...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-6047link is external GeoVision Devices OS Command Injection Vulnerability CVE-2024-11120link is external GeoVision Devices OS Command Injection Vulnerability...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. The vulnerabilities are in the Keymaster trustlet, SmartManagerCN and FreeType, among others. The vulnerabilities allow a local attacker to run code on the device and execute code with SmartManagerCN privileges. Google reports receiving information tha...

Exploit for Path Traversal in Ollama

Ollama CVE-2024-39722 Exploit Tool This tool is designed to e...

CVE-2025-32052 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-32052 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

CVE-2025-4357

creationtimestamp| type| source ---|---|--- 2025-05-06 18:39:53+00:00| exploited| https://t.me/cvedetector/24617...

CVE-2025-4360

creationtimestamp| type| source ---|---|--- 2025-05-06 15:21:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15135 2025-05-06 18:39:46+00:00| exploited| https://t.me/cvedetector/24612...

CVE-2025-4359

creationtimestamp| type| source ---|---|--- 2025-05-06 14:21:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15124 2025-05-06 16:30:21+00:00| published-proof-of-concept| Telegram/v4oxpfo9WMwho6oVFHxSNkbuEpcKYYoL6DEjmxP4vSCwZHA 2025-05-06 18:39:58+00:00| exploited|...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-3248link is external Langflow Missing Authentication Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

nuclei-templates

Nuclei Templates Community curated list of templates for the nu...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-34028link is external Commvault Command Center Path Traversal Vulnerability CVE-2024-58136link is external Yiiframework Yii Improper Protection of Alternate Pa...

CVE-2025-4173

creationtimestamp| type| source ---|---|--- 2025-05-01 17:15:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14333 2025-05-01 20:41:53+00:00| exploited| https://t.me/cvedetector/24254...