Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell: two critical PHP flaws affect most WordPress hosting. See if your site is affectedFlagged by our vulnerability database: PHP2Shell, two critical PHP flaws. DetailsFlagged: PHP2Shell. Check your site
HuttenlocherTechnologies
843-331-6339
Start a project →
Updated 7 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,754exploited flaws on CISA’s list
33added in the last 30 days
293new WordPress flaws this week
13,868entries in the database

1,754 results · page 10 of 36

  • Mar 18, 2025Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityCVE-2025-24472 · Network & remote access · FortinetExploitedRansomware

    Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.

    Product
    FortiOS and FortiProxy
    On CISA’s list since
    Mar 18, 2025 (federal fix deadline Apr 8, 2025)
    What to do
    Attackers are using this now. Install Fortinet’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 18, 2025tj-actions/changed-files GitHub Action Embedded Malicious Code VulnerabilityCVE-2025-30066 · Other software · tj-actionsExploited

    tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tokens (PATs), npm tokens, and private RSA keys.

    Product
    changed-files GitHub Action
    On CISA’s list since
    Mar 18, 2025 (federal fix deadline Apr 8, 2025)
    What to do
    Attackers are using this now. Install tj-actions’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 13, 2025Juniper Junos OS Improper Isolation or Compartmentalization VulnerabilityCVE-2025-21590 · Network & remote access · JuniperExploited

    Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.

    Product
    Junos OS
    On CISA’s list since
    Mar 13, 2025 (federal fix deadline Apr 3, 2025)
    What to do
    Attackers are using this now. Install Juniper’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 13, 2025Apple Multiple Products WebKit Out-of-Bounds Write VulnerabilityCVE-2025-24201 · Computers, phones & browsers · AppleExploited

    Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

    Product
    Multiple Products
    On CISA’s list since
    Mar 13, 2025 (federal fix deadline Apr 3, 2025)
    What to do
    Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 11, 2025Microsoft Windows NTFS Heap-Based Buffer Overflow VulnerabilityCVE-2025-24993 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.

    Product
    Windows
    On CISA’s list since
    Mar 11, 2025 (federal fix deadline Apr 1, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 11, 2025Microsoft Windows NTFS Out-Of-Bounds Read VulnerabilityCVE-2025-24991 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.

    Product
    Windows
    On CISA’s list since
    Mar 11, 2025 (federal fix deadline Apr 1, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 11, 2025Microsoft Windows Fast FAT File System Driver Integer Overflow VulnerabilityCVE-2025-24985 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.

    Product
    Windows
    On CISA’s list since
    Mar 11, 2025 (federal fix deadline Apr 1, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 11, 2025Microsoft Windows NTFS Information Disclosure VulnerabilityCVE-2025-24984 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.

    Product
    Windows
    On CISA’s list since
    Mar 11, 2025 (federal fix deadline Apr 1, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 11, 2025Microsoft Windows Win32k Use-After-Free VulnerabilityCVE-2025-24983 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

    Product
    Windows
    On CISA’s list since
    Mar 11, 2025 (federal fix deadline Apr 1, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 11, 2025Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityCVE-2025-26633 · Computers, phones & browsers · MicrosoftExploitedRansomware

    Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.

    Product
    Windows
    On CISA’s list since
    Mar 11, 2025 (federal fix deadline Apr 1, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 10, 2025Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityCVE-2024-13161 · Network & remote access · IvantiExploited

    Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.

    Product
    Endpoint Manager (EPM)
    On CISA’s list since
    Mar 10, 2025 (federal fix deadline Mar 31, 2025)
    What to do
    Attackers are using this now. Install Ivanti’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 10, 2025Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityCVE-2024-13160 · Network & remote access · IvantiExploited

    Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.

    Product
    Endpoint Manager (EPM)
    On CISA’s list since
    Mar 10, 2025 (federal fix deadline Mar 31, 2025)
    What to do
    Attackers are using this now. Install Ivanti’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 10, 2025Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityCVE-2024-13159 · Network & remote access · IvantiExploited

    Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.

    Product
    Endpoint Manager (EPM)
    On CISA’s list since
    Mar 10, 2025 (federal fix deadline Mar 31, 2025)
    What to do
    Attackers are using this now. Install Ivanti’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 10, 2025Advantive VeraCore Unrestricted File Upload VulnerabilityCVE-2024-57968 · Other software · AdvantiveExploited

    Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to unintended folders via upload.apsx.

    Product
    VeraCore
    On CISA’s list since
    Mar 10, 2025 (federal fix deadline Mar 31, 2025)
    What to do
    Attackers are using this now. Install Advantive’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 10, 2025 Advantive VeraCore SQL Injection VulnerabilityCVE-2025-25181 · Other software · AdvantiveExploited

    Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter.

    Product
    VeraCore
    On CISA’s list since
    Mar 10, 2025 (federal fix deadline Mar 31, 2025)
    What to do
    Attackers are using this now. Install Advantive’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 4, 2025VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityCVE-2025-22224 · Other software · VMwareExploited

    VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.

    Product
    ESXi and Workstation
    On CISA’s list since
    Mar 4, 2025 (federal fix deadline Mar 25, 2025)
    What to do
    Attackers are using this now. Install VMware’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 4, 2025Linux Kernel Use of Uninitialized Resource VulnerabilityCVE-2024-50302 · Computers, phones & browsers · LinuxExploited

    The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.

    Product
    Kernel
    On CISA’s list since
    Mar 4, 2025 (federal fix deadline Mar 25, 2025)
    What to do
    Attackers are using this now. Install Linux’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 4, 2025VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityCVE-2025-22226 · Other software · VMwareExploited

    VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.

    Product
    ESXi, Workstation, and Fusion
    On CISA’s list since
    Mar 4, 2025 (federal fix deadline Mar 25, 2025)
    What to do
    Attackers are using this now. Install VMware’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 4, 2025VMware ESXi Arbitrary Write VulnerabilityCVE-2025-22225 · Other software · VMwareExploitedRansomware

    VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.

    Product
    ESXi
    On CISA’s list since
    Mar 4, 2025 (federal fix deadline Mar 25, 2025)
    What to do
    Attackers are using this now. Install VMware’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 3, 2025Progress WhatsUp Gold Path Traversal VulnerabilityCVE-2024-4885 · Other software · ProgressExploited

    Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution.

    Product
    WhatsUp Gold
    On CISA’s list since
    Mar 3, 2025 (federal fix deadline Mar 24, 2025)
    What to do
    Attackers are using this now. Install Progress’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 3, 2025Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityCVE-2018-8639 · Computers, phones & browsers · MicrosoftExploitedRansomware

    Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

    Product
    Windows
    On CISA’s list since
    Mar 3, 2025 (federal fix deadline Mar 24, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 3, 2025Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityCVE-2022-43769 · Other software · Hitachi VantaraExploited

    Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution.

    Product
    Pentaho Business Analytics (BA) Server
    On CISA’s list since
    Mar 3, 2025 (federal fix deadline Mar 24, 2025)
    What to do
    Attackers are using this now. Install Hitachi Vantara’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 3, 2025Hitachi Vantara Pentaho BA Server Authorization Bypass VulnerabilityCVE-2022-43939 · Other software · Hitachi VantaraExploited

    Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.

    Product
    Pentaho Business Analytics (BA) Server
    On CISA’s list since
    Mar 3, 2025 (federal fix deadline Mar 24, 2025)
    What to do
    Attackers are using this now. Install Hitachi Vantara’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 3, 2025Cisco Small Business RV Series Routers Command Injection VulnerabilityCVE-2023-20118 · Network & remote access · CiscoExploited

    Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.

    Product
    Small Business RV Series Routers
    On CISA’s list since
    Mar 3, 2025 (federal fix deadline Mar 24, 2025)
    What to do
    Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 25, 2025Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityCVE-2023-34192 · Email & office · SynacorExploited

    Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.

    Product
    Zimbra Collaboration Suite (ZCS)
    On CISA’s list since
    Feb 25, 2025 (federal fix deadline Mar 18, 2025)
    What to do
    Attackers are using this now. Install Synacor’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 25, 2025Microsoft Partner Center Improper Access Control VulnerabilityCVE-2024-49035 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.

    Product
    Partner Center
    On CISA’s list since
    Feb 25, 2025 (federal fix deadline Mar 18, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 24, 2025Oracle Agile Product Lifecycle Management (PLM) Deserialization VulnerabilityCVE-2024-20953 · Other software · OracleExploited

    Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.

    Product
    Agile Product Lifecycle Management (PLM)
    On CISA’s list since
    Feb 24, 2025 (federal fix deadline Mar 17, 2025)
    What to do
    Attackers are using this now. Install Oracle’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 24, 2025Adobe ColdFusion Deserialization VulnerabilityCVE-2017-3066 · Websites & servers · AdobeExploited

    Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.

    Product
    ColdFusion
    On CISA’s list since
    Feb 24, 2025 (federal fix deadline Mar 17, 2025)
    What to do
    Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 21, 2025Microsoft Power Pages Improper Access Control VulnerabilityCVE-2025-24989 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.

    Product
    Power Pages
    On CISA’s list since
    Feb 21, 2025 (federal fix deadline Mar 14, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 20, 2025Palo Alto Networks PAN-OS File Read VulnerabilityCVE-2025-0111 · Network & remote access · Palo Alto NetworksExploited

    Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.

    Product
    PAN-OS
    On CISA’s list since
    Feb 20, 2025 (federal fix deadline Mar 13, 2025)
    What to do
    Attackers are using this now. Install Palo Alto Networks’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 20, 2025Craft CMS Code Injection VulnerabilityCVE-2025-23209 · Other software · Craft CMSExploited

    Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote code execution.

    Product
    Craft CMS
    On CISA’s list since
    Feb 20, 2025 (federal fix deadline Mar 13, 2025)
    What to do
    Attackers are using this now. Install Craft CMS’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 18, 2025Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityCVE-2025-0108 · Network & remote access · Palo Alto NetworksExploited

    Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.

    Product
    PAN-OS
    On CISA’s list since
    Feb 18, 2025 (federal fix deadline Mar 11, 2025)
    What to do
    Attackers are using this now. Install Palo Alto Networks’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 18, 2025SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityCVE-2024-53704 · Network & remote access · SonicWallExploitedRansomware

    SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.

    Product
    SonicOS
    On CISA’s list since
    Feb 18, 2025 (federal fix deadline Mar 11, 2025)
    What to do
    Attackers are using this now. Install SonicWall’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 13, 2025SimpleHelp Path Traversal VulnerabilityCVE-2024-57727 · Other software · SimpleHelp ExploitedRansomware

    SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.

    Product
    SimpleHelp
    On CISA’s list since
    Feb 13, 2025 (federal fix deadline Mar 6, 2025)
    What to do
    Attackers are using this now. Install SimpleHelp ’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 12, 2025Apple iOS and iPadOS Incorrect Authorization VulnerabilityCVE-2025-24200 · Computers, phones & browsers · AppleExploited

    Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.

    Product
    iOS and iPadOS
    On CISA’s list since
    Feb 12, 2025 (federal fix deadline Mar 5, 2025)
    What to do
    Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 12, 2025Mitel SIP Phones Argument Injection VulnerabilityCVE-2024-41710 · Email & office · MitelExploited

    Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.

    Product
    SIP Phones
    On CISA’s list since
    Feb 12, 2025 (federal fix deadline Mar 5, 2025)
    What to do
    Attackers are using this now. Install Mitel’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 11, 2025Zyxel DSL CPE OS Command Injection VulnerabilityCVE-2024-40891 · Network & remote access · ZyxelExploited

    Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.

    Product
    DSL CPE Devices
    On CISA’s list since
    Feb 11, 2025 (federal fix deadline Mar 4, 2025)
    What to do
    Attackers are using this now. Install Zyxel’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 11, 2025Zyxel DSL CPE OS Command Injection VulnerabilityCVE-2024-40890 · Network & remote access · ZyxelExploited

    Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.

    Product
    DSL CPE Devices
    On CISA’s list since
    Feb 11, 2025 (federal fix deadline Mar 4, 2025)
    What to do
    Attackers are using this now. Install Zyxel’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 11, 2025Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityCVE-2025-21418 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

    Product
    Windows
    On CISA’s list since
    Feb 11, 2025 (federal fix deadline Mar 4, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 11, 2025Microsoft Windows Storage Link Following VulnerabilityCVE-2025-21391 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.

    Product
    Windows
    On CISA’s list since
    Feb 11, 2025 (federal fix deadline Mar 4, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 7, 2025Trimble Cityworks Deserialization VulnerabilityCVE-2025-0994 · Other software · TrimbleExploited

    Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet Information Services (IIS) web server.

    Product
    Cityworks
    On CISA’s list since
    Feb 7, 2025 (federal fix deadline Feb 28, 2025)
    What to do
    Attackers are using this now. Install Trimble’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 6, 2025Sophos XG Firewall Buffer Overflow VulnerabilityCVE-2020-15069 · Network & remote access · SophosExploited

    Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature.

    Product
    XG Firewall
    On CISA’s list since
    Feb 6, 2025 (federal fix deadline Feb 27, 2025)
    What to do
    Attackers are using this now. Install Sophos’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 6, 2025CyberoamOS (CROS) SQL Injection VulnerabilityCVE-2020-29574 · Network & remote access · SophosExploitedRansomware

    CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.

    Product
    CyberoamOS
    On CISA’s list since
    Feb 6, 2025 (federal fix deadline Feb 27, 2025)
    What to do
    Attackers are using this now. Install Sophos’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 6, 2025Microsoft Outlook Improper Input Validation VulnerabilityCVE-2024-21413 · Email & office · MicrosoftExploited

    Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.

    Product
    Office Outlook
    On CISA’s list since
    Feb 6, 2025 (federal fix deadline Feb 27, 2025)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 6, 2025Dante Discovery Process Control VulnerabilityCVE-2022-23748 · Other software · AudinateExploited

    Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.

    Product
    Dante Discovery
    On CISA’s list since
    Feb 6, 2025 (federal fix deadline Feb 27, 2025)
    What to do
    Attackers are using this now. Install Audinate’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 6, 20257-Zip Mark of the Web Bypass VulnerabilityCVE-2025-0411 · Other software · 7-ZipExploited

    7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.

    Product
    7-Zip
    On CISA’s list since
    Feb 6, 2025 (federal fix deadline Feb 27, 2025)
    What to do
    Attackers are using this now. Install 7-Zip’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 5, 2025Linux Kernel Out-of-Bounds Write VulnerabilityCVE-2024-53104 · Computers, phones & browsers · LinuxExploited

    Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.

    Product
    Kernel
    On CISA’s list since
    Feb 5, 2025 (federal fix deadline Feb 26, 2025)
    What to do
    Attackers are using this now. Install Linux’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 4, 2025Apache OFBiz Forced Browsing VulnerabilityCVE-2024-45195 · Websites & servers · ApacheExploited

    Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access.

    Product
    OFBiz
    On CISA’s list since
    Feb 4, 2025 (federal fix deadline Feb 25, 2025)
    What to do
    Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 4, 2025Paessler PRTG Network Monitor Local File Inclusion VulnerabilityCVE-2018-19410 · Other software · PaesslerExploited

    Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator).

    Product
    PRTG Network Monitor
    On CISA’s list since
    Feb 4, 2025 (federal fix deadline Feb 25, 2025)
    What to do
    Attackers are using this now. Install Paessler’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Feb 4, 2025Paessler PRTG Network Monitor OS Command Injection VulnerabilityCVE-2018-9276 · Other software · PaesslerExploited

    Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.

    Product
    PRTG Network Monitor
    On CISA’s list since
    Feb 4, 2025 (federal fix deadline Feb 25, 2025)
    What to do
    Attackers are using this now. Install Paessler’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. The WordPress, CMS and hosting-panel entries come from the National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan and others); we show who. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Start a project

Tell us what you're building.

A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll build it writes back
02A planning call, then a written plan with the price and the date
03A preview on your phone while it's being built
04Launch night handled: redirects, email, Google
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?

No newsletter, no sales sequence. Just a reply.