⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

Cybersecurity leaders aren't just dealing with attacks—they're also protecting trust, keeping systems running, and maintaining their organization's reputation. This week's developments highlight a bigger issue: as we rely more on digital tools, hidden weaknesses can quietly grow. Just fixing...

firefox -- out-of-bounds read/write

[email protected] reports: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...

GHSA-9H3W-F3H4-QQRH

creationtimestamp| type| source ---|---|--- 2025-05-16 14:39:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16692 2025-05-16 15:17:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518172966589726...

CVE-2025-47809

creationtimestamp| type| source ---|---|--- 2025-05-16 01:34:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16595 2025-05-16 02:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpaypftjsr2o 2025-08-14 10:00:00+00:00| seen|...

Wordfence Intelligence Weekly WordPress Vulnerability Report (May 5, 2025 to May 11, 2025)

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. Last week, there were 224 vulnerabilities disclosed in 207 WordPress...

CVE-2025-0132

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0132 2025-05-14 18:32:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16369 2025-05-14 19:03:31+00:00| seen|...

CVE-2025-43572

creationtimestamp| type| source ---|---|--- 2025-05-13 20:31:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16227 2025-05-14 00:07:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3peiqokx2e...

50,000 WordPress Sites Affected by PHP Object Injection Vulnerability in Uncanny Automator WordPress Plugin

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. On April 26th, 2024, we received a submission for an authenticated PHP...

CVE-2025-40579

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16096 2025-05-13 10:48:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cn4u6yr42 2025-05-13 10:52:45+00:00| seen|...

CVE-2025-4536

creationtimestamp| type| source ---|---|--- 2025-05-11 10:13:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lov5sjeuv3s2 2025-05-11 12:37:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lovhuwiqjl2l 2025-05-11...

CVE-2025-4498

creationtimestamp| type| source ---|---|--- 2025-05-10 10:19:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lospphwr3tp2 2025-05-10 10:26:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15887 2025-05-10...

CVE-2025-3794

creationtimestamp| type| source ---|---|--- 2025-05-09 23:25:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15857 2025-05-10 00:05:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lormmzq2ajr2 2025-05-10 02:31:40+00:00| seen|...

CVE-2025-3811

creationtimestamp| type| source ---|---|--- 2025-05-09 02:25:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15656 2025-05-09 04:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lopmefntwq2p 2025-05-09 05:01:06+00:00| seen|...

CVE-2025-37826

creationtimestamp| type| source ---|---|--- 2025-05-08 07:11:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lonebwerh6c2 2025-05-08 07:23:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15484 2025-05-08...

CVE-2025-29746

creationtimestamp| type| source ---|---|--- 2025-05-07 19:22:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15382 2025-05-07 22:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxucpn52j 2025-05-07 23:12:22+00:00| seen|...

CERTFR-2025-ACT-019

creationtimestamp| type| source ---|---|--- 2025-05-05 13:36:33+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3logifdas742t...

CVE-2025-4256

creationtimestamp| type| source ---|---|--- 2025-05-05 01:18:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14820 2025-05-05 04:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofj2q2rth2o 2025-05-05 05:50:26+00:00| seen|...

CVE-2025-46335

creationtimestamp| type| source ---|---|--- 2025-05-04 23:34:03+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-mwfg-948f-2cc5 2025-05-05 20:16:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loh6qqqemo2l...

CVE-2024-11142

creationtimestamp| type| source ---|---|--- 2025-05-02 08:16:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14464 2025-05-02 11:45:44+00:00| seen| https://t.me/cvedetector/24336 2025-05-02 12:00:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6rn5izn62p 2025-05-02...

CVE-2022-49877

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix the sk-skforwardalloc warning of skstreamkillqueues When running testsockmap selftests, the following warning appears: WARNING: CPU: 2 PID: 197 at net/core/stream.c:205 skstreamkillqueues+0xd3/0xf0 Call Trace:...