Geo Vision EoL Devices Improper Neutralization of Special Elements used in an OS Command (CVE-2024-11120)

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received relat...

CVE-2024-5827

creationtimestamp| type| source ---|---|--- 2025-05-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-12 2025-06-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-06-26 2025-11-11 00:00:00+00:00| exploited| The...

CVE-2022-1390

creationtimestamp| type| source ---|---|--- 2025-05-10 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-10 2026-05-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-05-18 2026-06-06 00:00:00+00:00| exploited| The Shadowserver...

CVE-2025-47729

CVE-2025-47729 relates to TeleMessage’s archiving backend (TM SGNL/Archive Signal). The public records state that the archiving backend stores cleartext copies of user messages, contrary to the stated end-to-end encryption claim, and this exposure has been exploited in the wild as of May 2025. Th...

Exploit for Unrestricted Upload of File with Dangerous Type in Themefic Ultimate_Before_After_Image_Slider_\&_Gallery

Ultimate Before After Image Slider & Gallery – BEAF 1: lo: mt...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-6047link is external GeoVision Devices OS Command Injection Vulnerability CVE-2024-11120link is external GeoVision Devices OS Command Injection Vulnerability...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. The vulnerabilities are in the Keymaster trustlet, SmartManagerCN and FreeType, among others. The vulnerabilities allow a local attacker to run code on the device and execute code with SmartManagerCN privileges. Google reports receiving information tha...

Exploit for Path Traversal in Ollama

Ollama CVE-2024-39722 Exploit Tool This tool is designed to e...

CVE-2025-32052 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-32052 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

CVE-2025-4357

creationtimestamp| type| source ---|---|--- 2025-05-06 18:39:53+00:00| exploited| https://t.me/cvedetector/24617...

CVE-2025-4360

creationtimestamp| type| source ---|---|--- 2025-05-06 15:21:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15135 2025-05-06 18:39:46+00:00| exploited| https://t.me/cvedetector/24612...

CVE-2025-4359

creationtimestamp| type| source ---|---|--- 2025-05-06 14:21:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15124 2025-05-06 16:30:21+00:00| published-proof-of-concept| Telegram/v4oxpfo9WMwho6oVFHxSNkbuEpcKYYoL6DEjmxP4vSCwZHA 2025-05-06 18:39:58+00:00| exploited|...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-3248link is external Langflow Missing Authentication Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

nuclei-templates

Nuclei Templates Community curated list of templates for the nu...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-34028link is external Commvault Command Center Path Traversal Vulnerability CVE-2024-58136link is external Yiiframework Yii Improper Protection of Alternate Pa...

CVE-2025-4173

creationtimestamp| type| source ---|---|--- 2025-05-01 17:15:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14333 2025-05-01 20:41:53+00:00| exploited| https://t.me/cvedetector/24254...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38475link is external Apache HTTP Server Improper Escaping of Output Vulnerability CVE-2023-44221link is external SonicWall SMA100 Appliances OS Command...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-31324link is external SAP NetWeaver Unrestricted File Upload Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-1976link is external Broadcom Brocade Fabric OS Code Injection Vulnerability CVE-2025-42599link is external Qualitia Active! Mail Stack-Based Buffer Overflow...

CVE-2025-3928

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217...