Visit Website →

Recent Items

CVE-2026-48908 - Confirmed Exploitation

CVE-2026-48908

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-06 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-06

Asserted: 2026-07-06

Scope Notes: Affected: JoomShaper / SP Page Builder extension for Joomla | Description: Critical vulnerability that allows unauthenticated users to upload arbitrary files. | CWEs…

Published on Mon, 06 Jul 2026 00:00:00 +0000

CVE-2026-48907 - Confirmed Exploitation

CVE-2026-48907

Status: Confirmed

Exploited: Yes

Status Updated: 2026-07-06 00:00 UTC

Evidence Sources: 1

First Seen: 2026-07-06

Asserted: 2026-07-06

Scope Notes: Affected: Widget Factory (Pty) Ltd / Joomla Content Editor (JCE) | Description: Critical vulnerability in JCE editor extension. | CWEs: CWE-284 | Origin source: CERT…

Published on Mon, 06 Jul 2026 00:00:00 +0000

CVE-2026-1731 - Confirmed Exploitation

CVE-2026-1731

Status: Confirmed

Exploited: Yes

Status Updated: 2026-06-04 00:00 UTC

Evidence Sources: 1

First Seen: 2026-06-04

Asserted: 2026-06-04

Scope Notes: Affected: BeyondTrust / Remote Support (RS), Privileged Remote Access (PRA) | Description: Critical pre-authentication RCE vulnerability. | CWEs: CWE-78 | Origin sour…

Published on Thu, 04 Jun 2026 00:00:00 +0000

CVE-2026-41940 - Confirmed Exploitation

CVE-2026-41940

Status: Confirmed

Exploited: Yes

Status Updated: 2026-05-08 00:00 UTC

Evidence Sources: 1

First Seen: 2026-05-08

Asserted: 2026-05-08

Scope Notes: Affected: WebPros / cPanel | Description: cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenti…

Published on Fri, 08 May 2026 00:00:00 +0000

CVE-2024-42009 - Confirmed Exploitation

CVE-2024-42009

Status: Confirmed

Exploited: Yes

Status Updated: 2026-04-27 00:00 UTC

Evidence Sources: 1

First Seen: 2026-04-27

Asserted: 2026-04-27

Scope Notes: Affected: RoundCube / Webmail | Description: A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to stea…

Published on Mon, 27 Apr 2026 00:00:00 +0000

CVE-2025-22457 - Confirmed Exploitation

CVE-2025-22457

Status: Confirmed

Exploited: Yes

Status Updated: 2026-04-08 00:00 UTC

Evidence Sources: 1

First Seen: 2026-04-08

Asserted: 2026-04-08

Scope Notes: Affected: Ivanti / Ivanti Connect Secure | Description: Evidence of active exploitation in the wild against ICS 9.X (end of life) and 22.7R2.5 and earlier versions s…

Published on Wed, 08 Apr 2026 00:00:00 +0000

CVE-2025-4428 - Confirmed Exploitation

CVE-2025-4428

Status: Confirmed

Exploited: Yes

Status Updated: 2026-04-08 00:00 UTC

Evidence Sources: 1

First Seen: 2026-04-08

Asserted: 2026-04-08

Scope Notes: Affected: Ivanti / Endpoint Manager Mobile (EPMM) | Description: High severity vulnerability. Successful exploitation may lead to unauthenticated remote code executio…

Published on Wed, 08 Apr 2026 00:00:00 +0000

CVE-2025-4427 - Confirmed Exploitation

CVE-2025-4427

Status: Confirmed

Exploited: Yes

Status Updated: 2026-04-08 00:00 UTC

Evidence Sources: 1

First Seen: 2026-04-08

Asserted: 2026-04-08

Scope Notes: Affected: Ivanti / Endpoint Manager Mobile (EPMM) | Description: Medium severity vulnerability. Successful exploitation may lead to unauthenticated remote code execut…

Published on Wed, 08 Apr 2026 00:00:00 +0000

CVE-2025-55182 - Confirmed Exploitation

CVE-2025-55182

Status: Confirmed

Exploited: Yes

Status Updated: 2026-04-08 00:00 UTC

Evidence Sources: 1

First Seen: 2026-04-08

Asserted: 2026-04-08

Scope Notes: Affected: Meta / React Server Components | Description: Flaw in how React decodes payloads sent to React Server Function endpoints enabled unauthenticated remote cod…

Published on Wed, 08 Apr 2026 00:00:00 +0000

CVE-2025-53770 - Confirmed Exploitation

CVE-2025-53770

Status: Confirmed

Exploited: Yes

Status Updated: 2026-04-08 00:00 UTC

Evidence Sources: 1

First Seen: 2026-04-08

Asserted: 2026-04-08

Scope Notes: Affected: Microsoft / SharePoint | Description: Microsoft confirmation of active attacks targeting on-premises SharePoint Server customers by exploiting vulnerabilit…

Published on Wed, 08 Apr 2026 00:00:00 +0000

CVE-2026-20963 - Confirmed Exploitation

CVE-2026-20963

Status: Confirmed

Exploited: Yes

Status Updated: 2026-03-12 00:00 UTC

Evidence Sources: 1

First Seen: 2026-03-12

Asserted: 2026-03-12

Scope Notes: Affected: Microsoft / Microsoft SharePoint | Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute c…

Published on Thu, 12 Mar 2026 00:00:00 +0000

CVE-2026-1340 - Confirmed Exploitation

CVE-2026-1340

Status: Confirmed

Exploited: Yes

Status Updated: 2026-01-29 00:00 UTC

Evidence Sources: 1

First Seen: 2026-01-29

Asserted: 2026-01-29

Scope Notes: Affected: Ivanti / Endpoint Manager Mobile (EPMM) | Description: A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remo…

Published on Thu, 29 Jan 2026 00:00:00 +0000

CVE-2026-1281 - Confirmed Exploitation

CVE-2026-1281

Status: Confirmed

Exploited: Yes

Status Updated: 2026-01-29 00:00 UTC

Evidence Sources: 1

First Seen: 2026-01-29

Asserted: 2026-01-29

Scope Notes: Affected: Ivanti / Endpoint Manager Mobile (EPMM) | Description: A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remo…

Published on Thu, 29 Jan 2026 00:00:00 +0000

CVE-2025-59719 - Confirmed Exploitation

CVE-2025-59719

Status: Confirmed

Exploited: Yes

Status Updated: 2026-01-27 00:00 UTC

Evidence Sources: 1

First Seen: 2026-01-27

Asserted: 2026-01-27

Scope Notes: Affected: Fortinet / Fortiweb | Description: An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb may allow an unauthenticated atta…

Published on Tue, 27 Jan 2026 00:00:00 +0000

CVE-2025-59718 - Confirmed Exploitation

CVE-2025-59718

Status: Confirmed

Exploited: Yes

Status Updated: 2026-01-27 00:00 UTC

Evidence Sources: 1

First Seen: 2026-01-27

Asserted: 2026-01-27

Scope Notes: Affected: Fortinet / FortiOS,FortiProxy,FortiSwitchManager | Description: A improper verification of cryptographic signature vulnerability in Fortinet FortiOS, Forti…

Published on Tue, 27 Jan 2026 00:00:00 +0000

CVE-2025-25231 - Confirmed Exploitation

CVE-2025-25231

Status: Confirmed

Exploited: Yes

Status Updated: 2025-09-09 00:00 UTC

Evidence Sources: 1

First Seen: 2025-09-09

Asserted: 2025-09-09

Scope Notes: Affected: Omnissa / Omnissa Workspace ONE UEM | Description: Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor m…

Published on Tue, 09 Sep 2025 00:00:00 +0000

CVE-2025-6543 - Confirmed Exploitation

CVE-2025-6543

Status: Confirmed

Exploited: Yes

Status Updated: 2025-07-18 00:00 UTC

Evidence Sources: 1

First Seen: 2025-07-18

Asserted: 2025-07-18

Scope Notes: Affected: Citrix / Citrix ADC and Citrix Gateway | Origin source: cnw

Published on Fri, 18 Jul 2025 00:00:00 +0000

CVE-2010-0738 - Confirmed Exploitation

CVE-2010-0738

Status: Confirmed

Exploited: Yes

Status Updated: 2025-07-14 00:00 UTC

Evidence Sources: 1

First Seen: 2025-07-14

Asserted: 2025-07-14

Scope Notes: Affected: Red Hat / JBoss Application Server | Description: this management interface allows administrative operations to be performed without adequate access control…

Published on Mon, 14 Jul 2025 00:00:00 +0000

CVE-2011-4085 - Confirmed Exploitation

CVE-2011-4085

Status: Confirmed

Exploited: Yes

Status Updated: 2025-07-14 00:00 UTC

Evidence Sources: 1

First Seen: 2025-07-14

Asserted: 2025-07-14

Scope Notes: Affected: Red Hat / JBoss Application Server | Description: some management interfaces remain accessible and lack effective access control mechanisms | Origin source:…

Published on Mon, 14 Jul 2025 00:00:00 +0000

CVE-2017-12149 - Confirmed Exploitation

CVE-2017-12149

Status: Confirmed

Exploited: Yes

Status Updated: 2025-07-14 00:00 UTC

Evidence Sources: 1

First Seen: 2025-07-14

Asserted: 2025-07-14

Scope Notes: Affected: Red Hat / JBoss Application Server | Description: the servlet exposes an endpoint that allows you to invoke Java Management Extensions (JMX) operations wit…

Published on Mon, 14 Jul 2025 00:00:00 +0000