Linux Distros Unpatched Vulnerability : CVE-2024-36886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page sam4k working with Trend Micro Zero Day Initiative...

Multiple Zero-Day Vulnerabilities in Broadcom VMware ESXi and Other Products

On Tuesday, March 4, 2025, Broadcom published a critical security advisory VMSA-2025-0004 on 3 new zero-day vulnerabilities affecting multiple VMware products, including ESXi, Workstation, and Fusion. The most severe of the vulnerabilities is CVE-2025-22224, a critical vulnerability in ESXi and...

Multiple Zero-Day Vulnerabilities in Broadcom VMware ESXi and Other Products

On Tuesday, March 4, 2025, Broadcom published a critical security advisory VMSA-2025-0004 on 3 new zero-day vulnerabilities affecting multiple VMware products, including ESXi, Workstation, and Fusion. The most severe of the vulnerabilities is CVE-2025-22224, a critical vulnerability in ESXi and...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed several vulnerabilities in Android and Samsung Mobile, including two zero-day vulnerabilities that were actively exploited in targeted attacks. The vulnerabilities are in the Android kernel and the ExternalStorageProvider.java, which can lead to local privilege escalation and...

Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks

Threat actors have been exploiting a security vulnerability in Paragon Partition Manager's BioNTdrv.sys driver in ransomware attacks to escalate privileges and execute arbitrary code. The zero-day flaw CVE-2025-0289 is part of a set of five vulnerabilities that was discovered by Microsoft,...

⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists

This week, a 23-year-old Serbian activist found themselves at the crossroads of digital danger when a sneaky zero-day exploit turned their Android device into a target. Meanwhile, Microsoft pulled back the curtain on a scheme where cybercriminals used AI tools for harmful pranks, and a massive...

CVE-2025-23118

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6035 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19205 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-376/ 2025-08-19 18:29:29+00:0...

CVE-2025-23119

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6031 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19206 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-377/ 2025-08-19 18:29:29+00:0...

Amnesty Finds Cellebrite's Zero-Day Used to Unlock Serbian Activist's Android Phone

A 23-year-old Serbian youth activist had their Android phone targeted by a zero-day exploit developed by Cellebrite to unlock the device, according to a new report from Amnesty International. "The Android phone of one student protester was exploited and unlocked by a sophisticated zero-day exploi...

CVE-2025-26595

creationtimestamp| type| source ---|---|--- 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:31+00:00| seen| https://t.me/cvedetector/18895 2025-02-26 07:27:09+00:00| seen| https://bsky.app/profile/bsd.cafe/post/3lj2tzliwsqw2...

CVE-2025-26594

creationtimestamp| type| source ---|---|--- 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:30+00:00| seen| https://t.me/cvedetector/18894 2025-02-26 07:27:09+00:00| seen| https://bsky.app/profile/bsd.cafe/post/3lj2tzliwsqw2...

CVE-2025-26597

creationtimestamp| type| source ---|---|--- 2025-02-25 16:23:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5329 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:36+00:00| seen| https://t.me/cvedetector/18897 2025-02-26...

CVE-2025-26599

creationtimestamp| type| source ---|---|--- 2025-02-25 16:23:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5325 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:24+00:00| seen| https://t.me/cvedetector/18890 2025-02-26...

CVE-2025-26600

creationtimestamp| type| source ---|---|--- 2025-02-25 16:22:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5313 2025-02-25 17:32:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114065717510498810 2025-02-25 17:35:32+00:00| seen|...

CVE-2025-1520

creationtimestamp| type| source ---|---|--- 2025-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-099/...

CVE-2025-1521

creationtimestamp| type| source ---|---|--- 2025-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-096/...

CVE-2024-27834

creationtimestamp| type| source ---|---|--- 2025-02-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-093/ 2025-10-01 17:45:01+00:00| seen| Telegram/NsEmTFCOjSJbTHlnR1YZZFRmKmacy2al4F27E4YEx6XJl7yQ 2026-02-12 03:20:05+00:00| seen|...

CVE-2024-27833

creationtimestamp| type| source ---|---|--- 2025-02-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-092/...

CVE-2025-25505

creationtimestamp| type| source ---|---|--- 2025-02-21 17:18:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4922 2025-02-21 19:46:48+00:00| seen| https://t.me/cvedetector/18675 2025-08-12 16:01:32+00:00| seen|...

A week in security (February 10 – February 16)

Last week on Malwarebytes Labs: A suicide reveals the lonely side of AI chatbots, with Courtney Brown Lock and Code S06E03 Apple ordered to grant access to users’ encrypted data Phishing evolves beyond email to become latest Android app threat Apple fixes zero-day vulnerability used in "extremely...