CVE-2024-44284

creationtimestamp| type| source ---|---|--- 2024-10-28 22:51:51+00:00| seen| https://t.me/cvedetector/9190 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1451/ 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:28+00:00...

CVE-2024-44302

creationtimestamp| type| source ---|---|--- 2024-10-28 22:51:44+00:00| seen| https://t.me/cvedetector/9185 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1442/ 2025-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-016/ 2025-01-09...

Exploit for CVE-2024-52940

AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Tra...

UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575)

Fortinet and Mandiant investigated the mass exploitation of FortiManager devices via CVE-2024-47575, impacting 50+ systems across industries. Threat…...

CVE-2024-7763

creationtimestamp| type| source ---|---|--- 2024-10-25 00:21:24+00:00| seen| https://t.me/cvedetector/8848 2024-11-18 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1512/ 2026-06-22 07:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moueusvgtc2i...

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome to seize control of infected devices. Cybersecurity vendor Kaspersky said it made the discovery after it came across a novel attack chain in May 20...

CVE-2024-8025

creationtimestamp| type| source ---|---|--- 2024-10-24 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1422/...

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function CWE-306 in the FortiManager...

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...

The Crypto Game of Lazarus APT: Investors vs. Zero-days

Introduction Lazarus APT and its BlueNoroff subgroup are a highly sophisticated and multifaceted Korean-speaking threat actor. We closely monitor their activities and quite often see them using their signature malware in their attacks — a full-feature backdoor called Manuscrypt. According to our...

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...

CVE-2024-21259

creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1413/...

CVE-2024-48903

creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1419/ 2024-10-22 22:09:09+00:00| seen| https://t.me/cvedetector/8645...

CVE-2024-48904

creationtimestamp| type| source ---|---|--- 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1418/ 2024-10-22 18:30:05+00:00| seen| https://t.me/truesecator/6347 2024-10-22 22:09:10+00:00| seen| https://t.me/cvedetector/8647...

CVE-2024-45710

creationtimestamp| type| source ---|---|--- 2024-10-16 11:20:37+00:00| seen| https://t.me/cvedetector/8027 2025-03-01 05:27:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6042 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-710/...

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT. The vulnerability in question is CVE-2024-38178 CVSS score: 7.5, a memory corruption bug in the Scripting Engine...

CVE-2024-9954

creationtimestamp| type| source ---|---|--- 2024-10-16 00:28:32+00:00| seen| https://t.me/cvedetector/7973 2025-01-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-060/ 2026-07-05 19:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpwd6arne526...

CVE-2024-21273

creationtimestamp| type| source ---|---|--- 2024-10-15 22:48:03+00:00| seen| https://t.me/cvedetector/7956 2024-10-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1414/ 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-692/...

The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short

In recent years, the number and sophistication of zero-day vulnerabilities have surged, posing a critical threat to organizations of all sizes. A zero-day vulnerability is a security flaw in software that is unknown to the vendor and remains unpatched at the time of discovery. Attackers exploit...

CVE-2024-9710

creationtimestamp| type| source ---|---|--- 2024-10-15 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1383/ 2026-07-19 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqxndwy55x2u...