Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-41362 |
Description: Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
June 6th, 2025 (1 day ago)
|
|
CVE-2025-41361 |
Description: Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit this vulnerability, PROCOME ports must be configured and active, with communications encryption active.
CVSS: HIGH (8.3) EPSS Score: 0.03%
June 6th, 2025 (1 day ago)
|
|
CVE-2025-41360 |
Description: Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The device is vulnerable to a packet flooding denial of service attack.
CVSS: HIGH (8.7) EPSS Score: 0.04%
June 6th, 2025 (1 day ago)
|
|
CVE-2025-39358 |
Description: Deserialization of Untrusted Data vulnerability in Teastudio.Pl WP Posts Carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through 1.3.12.
CVSS: HIGH (8.8) EPSS Score: 0.04%
June 6th, 2025 (1 day ago)
|
|
Description: The U.S. government wants to confiscate millions of dollars in funds tied to illegal employment of North Korean IT workers at American companies.
June 6th, 2025 (1 day ago)
|
|
Description: The new PathWiper, spotted in an attack on Ukrainian critical infrastructure, has similarities to wiper malware previously deployed by the Russian group known as Sandworm.
June 6th, 2025 (1 day ago)
|
|
|
|
CVE-2025-5757 |
Description: A vulnerability was found in code-projects Traffic Offense Reporting System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /save-reported.php. The manipulation of the argument offence_id/vehicle_no/driver_license/name/address/gender/officer_reporting/offence leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Eine problematische Schwachstelle wurde in code-projects Traffic Offense Reporting System 1.0 ausgemacht. Davon betroffen ist unbekannter Code der Datei /save-reported.php. Dank der Manipulation des Arguments offence_id/vehicle_no/driver_license/name/address/gender/officer_reporting/offence mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
CVSS: MEDIUM (5.1) EPSS Score: 0.03%
June 6th, 2025 (1 day ago)
|
|
CVE-2025-5756 |
Description: A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/EditCity.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. In code-projects Real Estate Property Management System 1.0 wurde eine kritische Schwachstelle ausgemacht. Hierbei betrifft es unbekannten Programmcode der Datei /Admin/EditCity.php. Durch Beeinflussen mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
CVSS: MEDIUM (6.9) EPSS Score: 0.03%
June 6th, 2025 (1 day ago)
|
|
Description: Mass layoffs create cybersecurity vulnerabilities through dormant accounts and disgruntled employees.
June 6th, 2025 (1 day ago)
|