CVE-2025-47866

creationtimestamp| type| source ---|---|--- 2025-05-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-296/...

CVE-2025-47867

creationtimestamp| type| source ---|---|--- 2025-05-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-297/ 2025-06-18 04:39:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18687...

PT-2025-29667

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.1.10 Description An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Successful attacks can result in a takeover of Oracle VM VirtualBox. Attacks may...

Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards

Mozilla has released security updates to address two critical security flaws in its Firefox browser that could be potentially exploited to access sensitive data or achieve code execution. The vulnerabilities, both of which were exploited as a zero-day at Pwn2Own Berlin, are listed below -...

⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

Cybersecurity leaders aren't just dealing with attacks—they're also protecting trust, keeping systems running, and maintaining their organization's reputation. This week's developments highlight a bigger issue: as we rely more on digital tools, hidden weaknesses can quietly grow. Just fixing...

BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan

At least two different cybercrime groups BianLian and RansomExx are said to have exploited a recently disclosed security flaw in SAP NetWeaver tracked as CVE-2025-31324, indicating that multiple threat actors are taking advantage of the bug. Cybersecurity firm ReliaQuest, in a new update publishe...

Patch Tuesday, May 2025 Edition

Microsoft on Tuesday released software updates to fix at least 70 vulnerabilities in Windows and related products, including five zero-day flaws that are already seeing active exploitation. Adding to the sense of urgency with this month's patch batch from Redmond are fixes for two other weaknesse...

Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server

Microsoft on Tuesday shipped fixes to address a total of 78 security flaws across its software lineup, including a set of five zero-days that have come under active exploitation in the wild. Of the 78 flaws resolved by the tech giant, 11 are rated Critical, 66 are rated Important, and one is rate...

Fortinet Patches CVE-2025-32756 Zero-Day RCE Flaw Exploited in FortiVoice Systems

Fortinet has patched a critical security flaw that it said has been exploited as a zero-day in attacks targeting FortiVoice enterprise phone systems. The vulnerability, tracked as CVE-2025-32756, carries a CVSS score of 9.6 out of 10.0. "A stack-based overflow vulnerability CWE-121 in FortiVoice,...

Patch Tuesday - May 2025

Microsoft is addressing 77 vulnerabilities this May 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for five of the vulnerabilities published today, and these are already reflected in CISA KEV. Separately, Microsoft is aware of existing public disclosure for two...

Patch Tuesday - May 2025

Microsoft is addressing 77 vulnerabilities this May 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for five of the vulnerabilities published today, and these are already reflected in CISA KEV. Separately, Microsoft is aware of existing public disclosure for two...

Microsoft and Adobe Patch Tuesday, May 2025 Security Update Review

Microsoft's May 2025 Patch Tuesday rolls out critical security updates, addressing multiple vulnerabilities across Windows, Office, and other key products. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for May 2025 In this month's Patch Tuesday, May 2025 edition,...

CVE-2025-29840

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-14 04:32:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16289...

CVE-2025-29969

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-14 04:31:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16283 2026-02-19 19:51:32+00:00| seen|...

CVE-2025-29841

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 22:31:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16272 2025-07-22 04:03:52+00:00| seen|...

CVE-2025-29970

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-12-22 09:23:51+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3makvxu4mrz2h 2025-12-23 12:00:05+00:00| seen|...

CVE-2025-29966

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-14 08:36:25+00:00| seen| https://t.me/kasperskyb2b/1734 2025-05-14 21:15:29+00:00| seen|...

CVE-2025-21264

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 18:30:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16179 2025-06-17 18:48:36+00:00| seen|...

CVE-2025-30393

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 20:31:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16237...

CVE-2025-29842

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 18:31:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16192...