News

News and articles related to high-impact vulnerabilities

CSURFACE · 2025-03-29
Researchers Exploit Vulnerability to Expose BlackLock Ransomware Operations
Researchers exploited a vulnerability in BlackLock ransomware's leak site, exposing the group's operations.
phishing has-threat-actor
CSURFACE · 2025-03-26 ·Highlight
Critical Kubernetes Flaw CVE-2025-1974 Allows Remote Code Execution
CVE-2025-1974 in Kubernetes' ingress-nginx allows remote code execution, demanding urgent patching.
CVE-2025-1974 poc-released rce breach active-exploitation container has-poc ssvc:attend severity:CRITICAL
CSURFACE · 2025-03-26 ·Highlight
Critical Authentication Bypass Flaws in Kentico Xperience Exploited in the Wild
Two critical authentication bypass vulnerabilities in Kentico Xperience are being actively exploited, urging immediate patching.
CVE-2025-2746 CVE-2025-2747 ssvc:act severity:CRITICAL auth-bypass cisa-kev kev active-exploitation confirmed-exploited
CSURFACE · 2025-03-26 ·Highlight
Critical Kubernetes Ingress-NGINX Flaw Allows Remote Code Execution
CVE-2025-1974 in Kubernetes ingress-nginx allows remote code execution, urging immediate patching.
CVE-2025-1974 ssvc:attend severity:CRITICAL disclosed active-exploitation container poc-released rce has-poc
CSURFACE · 2025-03-25
Arkana Ransomware Strikes WideOpenWest, Disrupting Services
Arkana ransomware attack disrupts WideOpenWest services, highlighting critical infrastructure vulnerabilities.
has-threat-actor
CSURFACE · 2025-03-17
Cactus Ransomware Group Claims Two New Victims on Dark Web
Cactus ransomware group lists two new victims on its dark web portal, highlighting ongoing ransomware threats.
ransomware-used has-threat-actor
CSURFACE · 2025-03-17
Apos Security Ransomware Hits KIU System Solutions
Apos Security ransomware attack disrupts operations at KIU System Solutions.
has-threat-actor
CSURFACE · 2025-03-14 ·Highlight
Apple Patches Critical Safari Zero-Day Exploited in the Wild
Apple has patched a critical Safari zero-day vulnerability, CVE-2025-24201, actively exploited in the wild.
CVE-2025-24201 confirmed-exploited ssvc:act severity:CRITICAL poc-released zero-day breach active-exploitation cisa-kev kev has-poc
CSURFACE · 2025-03-07 ·Highlight
Critical Flaw in Edimax IP Cameras Exploited by Mirai Botnets
Mirai botnets exploit critical Edimax IP camera flaw for remote code execution.
CVE-2025-1316 kev confirmed-exploited active-exploitation rce ssvc:act severity:CRITICAL zero-day cisa-kev
CSURFACE · 2025-03-04 ·Highlight
PostgreSQL SQL Injection Flaw CVE-2025-1094 Exploited in US Treasury Hack
A high-severity SQL injection flaw in PostgreSQL, CVE-2025-1094, was exploited in a US Treasury hack.
CVE-2025-1094 zero-day has-poc ssvc:track* severity:HIGH poc-released active-exploitation rce sqli database has-exploit
CSURFACE · 2025-03-04 ·Highlight
Active Exploitation of PostgreSQL SQL Injection Flaw CVE-2025-1094
PostgreSQL's CVE-2025-1094 SQL injection flaw is actively exploited, risking arbitrary code execution.
CVE-2025-1094 has-poc ssvc:track* poc-released zero-day rce database active-exploitation sqli has-exploit severity:HIGH
CSURFACE · 2025-02-20 ·Highlight
Palo Alto Networks PAN-OS Vulnerability CVE-2025-0111 Actively Exploited
CVE-2025-0111 in Palo Alto Networks PAN-OS is actively exploited, allowing file access via the management interface.
CVE-2025-0111 active-exploitation cisa-kev firewall kev confirmed-exploited ssvc:attend severity:MEDIUM
CSURFACE · 2025-02-20 ·Highlight
Palo Alto Networks PAN-OS Flaws Exploited in Active Ransomware Campaigns
Two critical vulnerabilities in Palo Alto Networks' PAN-OS are being actively exploited, linked to ransomware campaigns.
CVE-2025-0108 CVE-2024-9474 poc-released zero-day kev has-exploit severity:CRITICAL auth-bypass ransomware severity:HIGH cisa-kev confirmed-exploited has-poc ssvc:attend ssvc:act active-exploitation priv-esc firewall
CSURFACE · 2025-02-19 ·Highlight
Trimble Cityworks Vulnerability CVE-2025-0994 Actively Exploited
Trimble Cityworks vulnerability CVE-2025-0994 is being actively exploited, allowing remote code execution.
CVE-2025-0994 confirmed-exploited ssvc:attend poc-released rce deserialization cisa-kev kev active-exploitation has-poc severity:HIGH
CSURFACE · 2025-02-11 ·Highlight
Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200
Apple patched CVE-2025-24200, a zero-day iOS flaw exploited in the wild, in an emergency update.
CVE-2025-24200 confirmed-exploited ssvc:attend severity:MEDIUM active-exploitation zero-day cisa-kev kev
CSURFACE · 2025-02-11 ·Highlight
Advantive VeraCore Flaws Exploited by XE Group in Active Campaign
XE Group exploits Advantive VeraCore vulnerabilities CVE-2024-57968 and CVE-2025-25181 in active attacks.
CVE-2024-57968 CVE-2025-25181 zero-day sqli confirmed-exploited ssvc:attend ssvc:act active-exploitation cisa-kev campaign kev severity:HIGH
CSURFACE · 2025-02-05 ·Highlight
Advantive VeraCore Vulnerabilities Exploited in the Wild
Two high-severity vulnerabilities in Advantive VeraCore have been actively exploited, necessitating immediate patching.
CVE-2025-25181 CVE-2024-57968 ssvc:attend severity:HIGH ssvc:act active-exploitation zero-day sqli cisa-kev kev confirmed-exploited
CSURFACE · 2025-02-03 ·Highlight
Critical Zero-Day in Apple Products Actively Exploited, Patch Now
A critical zero-day vulnerability in Apple products, CVE-2025-24085, is being actively exploited, prompting urgent patches.
CVE-2025-24085 poc-released kev confirmed-exploited severity:CRITICAL active-exploitation zero-day memory-corruption cisa-kev has-poc ssvc:act
CSURFACE · 2025-02-03 ·Highlight
Critical CVE-2025-24085 Exploited in Apple Devices, Patch Now Available
Apple's CVE-2025-24085 zero-day, actively exploited, prompts urgent patching across devices.
CVE-2025-24085 zero-day priv-esc memory-corruption cisa-kev has-poc ssvc:act severity:CRITICAL poc-released kev confirmed-exploited active-exploitation
CSURFACE · 2025-01-29
Cacti Vulnerability CVE-2025-22604 Allows Remote Code Execution
A high-severity flaw in Cacti allows authenticated users to execute remote code, with a PoC available.
CVE-2025-22604 rce has-poc ssvc:track* severity:HIGH poc-released
CSURFACE · 2025-01-22 ·Highlight
SQL Injection Flaw in Apache Traffic Control Exploitable by Privileged Users
A high-severity SQL injection vulnerability in Apache Traffic Control allows privileged users to execute arbitrary SQL commands.
CVE-2024-45387 ssvc:track severity:HIGH active-exploitation sqli
CSURFACE · 2024-11-09
Frag Ransomware Exploits Veeam Backup Flaw in New Attack
Frag ransomware group exploits Veeam Backup flaw in new attack campaign.
has-threat-actor
CSURFACE · 2024-10-29 ·Highlight
Critical SonicWall SonicOS Flaw Exploited by Multiple Ransomware Groups
SonicWall SonicOS vulnerability CVE-2024-40766 is exploited by ransomware groups, urging immediate patching.
CVE-2024-40766 ssvc:act cisa-kev breach confirmed-exploited active-exploitation ransomware has-threat-actor kev severity:CRITICAL
CSURFACE · 2024-10-13 ·Highlight
Critical RCE Flaw in Veeam Backup Exploited by Multiple Ransomware Groups
CVE-2024-40711 in Veeam Backup is exploited by ransomware groups, demanding urgent patching.
CVE-2024-40711 has-threat-actor kev ssvc:act cisa-kev ransomware severity:CRITICAL poc-released rce confirmed-exploited active-exploitation has-poc
CSURFACE · 2024-10-10 ·Highlight
ASUS Router Flaw CVE-2024-3080 Exploited in Massive DDoS Attack
A critical flaw in ASUS routers, CVE-2024-3080, is being exploited in a massive DDoS attack.
CVE-2024-3080 active-exploitation auth-bypass networking ssvc:attend severity:CRITICAL
CSURFACE · 2024-10-10 ·Highlight
Eldorado Ransomware Exploits HTE Technologies' Automation Systems
Eldorado ransomware exploits vulnerabilities in HTE Technologies' systems, targeting industrial automation.
has-threat-actor
CSURFACE · 2024-09-04 ·Highlight
ALPHV Ransomware Exploits Veritas Backup Exec Vulnerabilities for Initial Access
ALPHV ransomware exploits Veritas Backup Exec vulnerabilities for initial access, increasing ransom demands.
campaign breach has-threat-actor ransomware-used
CSURFACE · 2024-09-02
RansomHub Ransomware Group Hits 210 Victims in Critical Sectors
RansomHub ransomware group targets 210 victims across critical sectors, highlighting ongoing threats.
has-threat-actor
CSURFACE · 2024-08-01 ·Highlight
Critical RCE Vulnerability in ServiceNow Exploited in the Wild
A critical RCE vulnerability in ServiceNow is being actively exploited, prompting urgent patching.
CVE-2024-4879 has-poc severity:CRITICAL active-exploitation rce kev confirmed-exploited ssvc:act poc-released cisa-kev
CSURFACE · 2024-05-24 ·Highlight
Google Chrome Zero-Day CVE-2024-5274 Actively Exploited in the Wild
A critical zero-day in Google Chrome, CVE-2024-5274, is actively exploited; users must update immediately.
CVE-2024-5274 has-poc ssvc:attend poc-released kev cisa-kev critical confirmed-exploited severity:CRITICAL active-exploitation zero-day
1 2 3 4 5 ... 10 11 12