5438 matches found
CVE-2024-8025
creationtimestamp| type| source ---|---|--- 2024-10-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1422/...
Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks
On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function CWE-306 in the FortiManager...
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...
The Crypto Game of Lazarus APT: Investors vs. Zero-days
Introduction Lazarus APT and its BlueNoroff subgroup are a highly sophisticated and multifaceted Korean-speaking threat actor. We closely monitor their activities and quite often see them using their signature malware in their attacks — a full-feature backdoor called Manuscrypt. According to our...
CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...
CVE-2024-48904
creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1418/ 2024-10-22 18:30:05+00:00| seen| https://t.me/truesecator/6347 2024-10-22 22:09:10+00:00| seen| https://t.me/cvedetector/8647...
CVE-2024-48903
creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1419/ 2024-10-22 22:09:09+00:00| seen| https://t.me/cvedetector/8645...
CVE-2024-21259
creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1413/...
CVE-2024-45710
creationtimestamp| type| source ---|---|--- 2024-10-16 11:20:37+00:00| seen| https://t.me/cvedetector/8027 2025-03-01 05:27:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6042 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-710/...
North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware
The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT. The vulnerability in question is CVE-2024-38178 CVSS score: 7.5, a memory corruption bug in the Scripting Engine...
CVE-2024-9954
creationtimestamp| type| source ---|---|--- 2024-10-16 00:28:32+00:00| seen| https://t.me/cvedetector/7973 2025-01-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-060/ 2026-07-05 19:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpwd6arne526...
CVE-2024-21273
creationtimestamp| type| source ---|---|--- 2024-10-15 22:48:03+00:00| seen| https://t.me/cvedetector/7956 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1414/ 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-692/...
The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short
In recent years, the number and sophistication of zero-day vulnerabilities have surged, posing a critical threat to organizations of all sizes. A zero-day vulnerability is a security flaw in software that is unknown to the vendor and remains unpatched at the time of discovery. Attackers exploit...
CVE-2024-6519
creationtimestamp| type| source ---|---|--- 2024-10-15 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1382/ 2024-10-21 17:41:25+00:00| seen| https://t.me/cvedetector/8500 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2024-9710
creationtimestamp| type| source ---|---|--- 2024-10-15 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1383/ 2026-07-19 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqxndwy55x2u...
Zero-day Flaws Exposed EV Chargers to Shutdowns and Data Theft
NCC Group experts share details of how they exploited critical zero-day vulnerabilities in Phoenix Contact EV chargers electric…...
Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration
A suspected nation-state adversary has been observed weaponizing three security flaws in Ivanti Cloud Service Appliance CSA as zero-days to perform a series of malicious actions. That's according to findings from Fortinet FortiGuard Labs, which said the vulnerabilities were abused to gain...
THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7 - Oct 13)
Hey there, it's your weekly dose of "what the heck is going on in cybersecurity land " – and trust me, you NEED to be in the loop this time. We've got everything from zero-day exploits and AI gone rogue to the FBI playing crypto kingpin – it's full of stuff they don't 🤫 want you to know. So let's...
CVE-2024-8531
creationtimestamp| type| source ---|---|--- 2024-10-11 17:01:18+00:00| seen| https://t.me/cvedetector/7678 2024-10-15 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-289-02 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1417/...