Lucene search
+L

1334 matches found

The Hacker News
The Hacker News
•added 2025/10/23 5:37 a.m.•14 views

Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Motex Lanscope Endpoint Manager to its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2025-61932 CVSS v4...

9.8CVSS8.6AI score0.02768EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2025/10/23 5:37 a.m.•11 views

Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Motex Lanscope Endpoint Manager to its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2025-61932 CVSS v4...

9.8CVSS8.6AI score0.02768EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2025/10/22 12:56 p.m.•16 views

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft SharePoint to breach a telecommunications company in the Middle East after it was publicly disclosed and patched in July 2025. Also targeted were government departments in an African country, as well as...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits42
The Hacker News
The Hacker News
•added 2025/10/22 12:56 p.m.•24 views

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft SharePoint to breach a telecommunications company in the Middle East after it was publicly disclosed and patched in July 2025. Also targeted were government departments in an African country, as well as...

9.8CVSS7.1AI score0.99999EPSS
SaveExploits46
OSV
OSV
•added 2025/10/21 6:02 p.m.•5 views

GHSA-6WH5-MW9H-5C3W Shopware vulnerable to path traversal via Plugin upload

Impact Malicious actors can exploit this vulnerability to write files within arbitrary directories on the filesystem of the Shopware web container. This could allow them to gain persistent shell access by uploading a PHP-shell file to an accessible folder. It is important to note that this...

2.7CVSS7.2AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/10/21 7:34 a.m.•16 views

CVE-2025-61932

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets...

9.8CVSS8.9AI score0.02768EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/21 12:00 a.m.•2 views

PT-2025-45678

Impact Malicious actors can exploit this vulnerability to write files within arbitrary directories on the filesystem of the Shopware web container. This could allow them to gain persistent shell access by uploading a PHP-shell file to an accessible folder. It is important to note that this...

2.7CVSS6.1AI score
SaveExploits0References4
OSV
OSV
•added 2025/10/20 8:15 a.m.•19 views

CVE-2025-61932

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets...

9.3CVSS8.9AI score0.02768EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/20 8:15 a.m.•25 views

CVE-2025-61932

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets...

9.8CVSS0.02768EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/20 7:25 a.m.•23 views

EUVD-2025-35038

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets...

9.8CVSS8.9AI score0.02768EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/20 7:25 a.m.•10 views

CVE-2025-61932

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets...

9.8CVSS8.9AI score0.02768EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/20 7:25 a.m.•129 views

CVE-2025-61932

CVE-2025-61932 affects MOTEX/Lanscope Endpoint Manager (On-Premises) — the Client (MR) and Detection Agent (DA) fail to properly verify the origin of incoming requests, enabling remote code execution via specially crafted packets. Affected products include Lanscope Endpoint Manager versions up to...

9.8CVSS8.9AI score0.02768EPSS
SaveIn wildExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/10/20 7:25 a.m.•139 views

CVE-2025-61932

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets...

9.8CVSS0.02768EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/20 12:00 a.m.•20 views

MOTEX Lanscope Endpoint Manager 安全漏洞

MOTEX Lanscope Endpoint Manager is an enterprise endpoint security and asset management system from MOTEX Japan. A security vulnerability exists in MOTEX Lanscope Endpoint Manager On-Premises that stems from not properly validating the source of incoming requests, which could lead to the executio...

9.8CVSS8.6AI score0.02768EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2025/10/20 12:00 a.m.•13 views

VulnCheck KEV: CVE-2025-61932

Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets...

9.8CVSS8.9AI score0.02768EPSS
SaveIn wildExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/20 12:00 a.m.•5 views

CVE-2025-61932: Improper Verification of Source of a Communication Channel

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets...

9.8CVSS8.9AI score0.02768EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-8978

Malware in sbrugna...

5.4CVSS5.5AI score0.01432EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-9313

Malware in sbrugna...

6.1CVSS6.3AI score0.00826EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2021-21684

Malware in sbrugna...

6.1CVSS6.3AI score0.00587EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-19485

Malware in sbrugna...

6.5CVSS6.7AI score0.00953EPSS
SaveExploits0References3
Rows per page
Query Builder