CISA Adds One Vulnerability to the KEV Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0282link is external Ivanti Connect Secure Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significa...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-41713link is external Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550link is external Mitel MiCollab Path Traversal Vulnerability CVE-2020-2883lin...

CVE-2024-48455

creationtimestamp| type| source ---|---|--- 2025-01-06 21:43:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113783589029330976 2025-01-06 22:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf45vs2etg2a 2025-01-07 00:28:31+00:00| seen|...

CVE-2022-22897

creationtimestamp| type| source ---|---|--- 2025-01-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-01 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-31 00:00:00+00:00| seen| The Shadowserver...

PT-2025-38298

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.185 Microsoft Edge affected versions not specified Chromium affected versions not specified Brave affected versions not specified Opera affected versions not specified Vivaldi affected versions not...

Obsidian Plugin Persistence

This module searches for Obsidian vaults for a user, and uploads a malicious community plugin to the vault. The vaults must be opened with community plugins enabled NOT restricted mode, but the plugin will be enabled automatically. Tested against Obsidian 1.7.7 on Kali, Ubuntu 22.04, and Windows...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-3393link is external Palo Alto Networks PAN-OS Malformed DNS Packet Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

CVE-2018-16159

creationtimestamp| type| source ---|---|--- 2024-12-29 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-29 2025-01-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-04 2025-01-26 00:00:00+00:00| seen| The Shadowserver...

CVE-2017-8961

creationtimestamp| type| source ---|---|--- 2024-12-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-28 2024-12-30 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-30 2025-01-01 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-12987

creationtimestamp| type| source ---|---|--- 2024-12-27 16:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5im54q2e 2024-12-27 17:41:58+00:00| seen| https://t.me/cvedetector/13786 2025-01-01 05:22:07+00:00| published-proof-of-concept| https://t.me/proxybar/2469...

CVE-2024-12856

creationtimestamp| type| source ---|---|--- 2024-12-27 16:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5eb7so2l 2024-12-27 17:41:58+00:00| seen| https://t.me/cvedetector/13787 2024-12-27 18:19:54+00:00| seen|...

CVE-2019-11370

creationtimestamp| type| source ---|---|--- 2024-12-27 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-27 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-30 00:00:00+00:00| exploited| The Shadowserver...

CVE-2018-18852

creationtimestamp| type| source ---|---|--- 2024-12-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-27 2025-01-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-05 2025-01-07 00:00:00+00:00| seen| The Shadowserver...

CVE-2018-1000130

creationtimestamp| type| source ---|---|--- 2024-12-25 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-25 2024-12-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-26 2024-12-27 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-35219

creationtimestamp| type| source ---|---|--- 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-02 2025-01-13 00:00:00+00:00| seen| The Shadowserver...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2021-44207link is external Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability These types of vulnerabilities are frequent attack vectors for malicio...

CVE-2018-3760

creationtimestamp| type| source ---|---|--- 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2024-12-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-24 2024-12-29 00:00:00+00:00| seen| The Shadowserver...

CVE-2017-18349

creationtimestamp| type| source ---|---|--- 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2024-12-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-27 2024-12-30 00:00:00+00:00| seen| The Shadowserver...

CVE-2018-8006

creationtimestamp| type| source ---|---|--- 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2025-02-05 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-05 2025-06-20 00:00:00+00:00| seen| The Shadowserver...

CVE-2020-12832

creationtimestamp| type| source ---|---|--- 2024-12-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-22 2025-02-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-01 2025-02-15 00:00:00+00:00| seen| The Shadowserver...