CVE-2025-66201

creationtimestamp| type| source ---|---|--- 2025-11-29 09:02:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/115632175106170376...

CVE-2025-65112

creationtimestamp| type| source ---|---|--- 2025-11-29 01:33:55+00:00| seen| https://infosec.exchange/users/offseq/statuses/115630409860080919 2026-07-26 02:00:07+00:00| seen| https://t.me/cyberwarehouse/1005...

PT-2025-48188

Name of the Vulnerable Software and Affected Versions Revive Adserver affected versions not specified Description The software contains a flaw in username validation that allows anyone to register look-alike accounts and impersonate administrators. This issue persists after a previous fix for...

CVE-2025-13597

creationtimestamp| type| source ---|---|--- 2025-11-25 21:00:05+00:00| published-proof-of-concept| Telegram/JmOfzmPuwFaGVUe1ryxZaualiroKxV8Ljh6xRZNwM5xTm4 2025-11-26 00:02:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/115613064530964196 2025-11-26 00:02:47+00:00| seen|...

CVE-2024-59373

creationtimestamp| type| source ---|---|--- 2025-11-25 15:05:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115610951630509357...

CVE-2024-47856

creationtimestamp| type| source ---|---|--- 2025-11-24 22:09:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115606956710100159 2025-11-25 01:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gad4i6zk2u...

MINI-8XV5-PX2R-JJVF

Bulletin has no description...

SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny

The U.S. Securities and Exchange Commission SEC has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the security practices that led to the 2020 supply chain attack. In a joint motion filed November 20, 2025,...

StealthCup: Realistic, Multi-Stage, Evasion-Focused CTF for Benchmarking IDS

Intrusion Detection Systems IDS are critical to defending enterprise and industrial control environments, yet evaluating their effectiveness under realistic conditions remains an open challenge. Existing benchmarks rely on synthetic datasets e.g., NSL-KDD, CICIDS2017 or scripted replay frameworks...

CVE-2025-36161

IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

EUVD-2025-198280

In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey system by sending a malformed session cookie. Instead of displaying a generic error message, the system exposes internal backend information, including the use of the Yii framework, the MySQL/MariaDB database...

CVE-2023-41347

creationtimestamp| type| source ---|---|--- 2025-11-19 21:59:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578606002979278 2025-11-19 22:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578608301178805 2025-11-20 21:02:47+00:00| seen|...

CVE-2023-41345

creationtimestamp| type| source ---|---|--- 2025-11-19 21:59:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578606002979278 2025-11-19 22:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578608301178805 2025-11-20 08:08:05+00:00| seen|...

EUVD-2025-198196

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated script-management endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxScript.php. The saveScript action writes attacker-supplie...

CVE-2025-13035

creationtimestamp| type| source ---|---|--- 2025-11-19 09:02:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/115575551429768240 2025-11-19 09:02:43+00:00| seen| https://gist.github.com/Darkcrai86/474957a48d87b3178f86a9cc044d968d...

EUVD-2025-198092

A mongocbulkoperationt may read invalid memory if large options are passed...

EUVD-2025-198190

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser...

PT-2025-47536

Name of the Vulnerable Software and Affected Versions Campcodes Online Hospital Management System version 1.0 Description The Campcodes Online Hospital Management System version 1.0 is susceptible to SQL Injection. This issue affects the admin panel and specifically occurs through the username...

CISA: Bulletproof Defense: Mitigating Risks from Bulletproof Hosting Providers

CISA, in collaboration with the U.S. National Security Agency, U.S. Department of Defense Cyber Crime Center, U.S. Federal Bureau of Investigation, and international partners, have released the guide Bulletproof Defense: Mitigating Risks from Bulletproof Hosting Providers to help internet service...

CVE-2025-58034

creationtimestamp| type| source ---|---|--- 2025-11-18 20:20:20+00:00| seen| https://infosec.exchange/users/mttaggart/statuses/115572553780813909 2025-11-18 20:20:37+00:00| seen| https://bsky.app/profile/taggart-tech.com/post/3m5wkt6hi722g 2025-11-18 20:22:18+00:00| seen|...