CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

	🏴‍☠️ J has just published a new victim : psec.com.ar Description: [AI generated] N/A Source: Ransomware.live May 12th, 2025 (about 2 months ago)
	🏴‍☠️ Kraken has just published a new victim : www.circul-aire.com, www.dectron.com Description: Leaked ~80GB http://mvr2bidstp52pkaybzccjueux4hqbkukuqiss6vhn72qwqruzc7awsid.onion/... Source: Ransomware.live May 12th, 2025 (about 2 months ago)
	Output Messenger flaw exploited as zero-day in espionage attacks Description: A Türkiye-backed cyberespionage group exploited a zero-day vulnerability to attack Output Messenger users linked to the Kurdish military in Iraq. [...] Source: BleepingComputer May 12th, 2025 (about 2 months ago)
	Russia’s ‘outsourced’ Bulgarian spy ring sentenced to more than 50 years in UK Description: Six Bulgarians tasked with spy operations in the U.K. on behalf of Russian intelligence each received multi-year prison sentences for their activities. Source: The Record May 12th, 2025 (about 2 months ago)
CVE-2025-45779	Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter. Description: Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter. EPSS Score: 0.06% Source: CVE May 12th, 2025 (about 2 months ago)
	DieNet Targeted the Website of Federal Energy Regulatory Commission (FERC) in United States Description: DieNet Targeted the Website of Federal Energy Regulatory Commission (FERC) in United States Source: DarkWebInformer May 12th, 2025 (about 2 months ago)
	Alleged Data Leak of Loyola University of Chicago Description: Alleged Data Leak of Loyola University of Chicago Source: DarkWebInformer May 12th, 2025 (about 2 months ago)
	Attackers pwn charter airline helping Trump's deportation campaign Source: TheRegister May 12th, 2025 (about 2 months ago)
CVE-2025-44830	EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface. Description: EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface. EPSS Score: 0.04% Source: CVE May 12th, 2025 (about 2 months ago)
CVE-2024-25221	A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload... Description: A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php. EPSS Score: 0.15% SSVC Exploitation: poc Source: CVE May 12th, 2025 (about 2 months ago)