Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

Description: All data of this company will be available for download on 17.06.2025.Every member of the Frylite team is proud to contribute to the complete supply of vegetable oil and waste cooking oil collection to all our customers throughout Ireland. Fo ...
Source: Ransomware.live
June 5th, 2025 (2 days ago)
Description: All data of this company will be available for download on 16.06.2025. The famous Schönenberg Golf and Country Club. In this privileged geographical location, a challenging 18-hole golf course was built in 1967, which has since met the highe ...
Source: Ransomware.live
June 5th, 2025 (2 days ago)
Source: TheRegister
June 5th, 2025 (2 days ago)
Description: The FBI is warning that the BADBOX 2.0 malware campaign has infected over 1 million home Internet-connected devices, converting consumer electronics into residential proxies that are used for malicious activity. [...]
Source: BleepingComputer
June 5th, 2025 (2 days ago)

CVE-2025-5694

Description: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Eine kritische Schwachstelle wurde in PHPGurukul Human Metapneumovirus Testing Management System 1.0 ausgemacht. Davon betroffen ist unbekannter Code der Datei /search-report-result.php. Durch das Beeinflussen des Arguments serachdata mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.

CVSS: MEDIUM (6.3)

EPSS Score: 0.03%

SSVC Exploitation: poc

Source: CVE
June 5th, 2025 (2 days ago)

CVE-2025-48133

Description: Missing Authorization vulnerability in Uncanny Owl Uncanny Automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through 6.4.0.2.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
June 5th, 2025 (2 days ago)

CVE-2025-47966

Description: Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.

CVSS: CRITICAL (9.8)

EPSS Score: 0.12%

Source: CVE
June 5th, 2025 (2 days ago)

CVE-2024-1009

Description: A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252278 is the identifier assigned to this vulnerability. Eine kritische Schwachstelle wurde in SourceCodester Employee Management System 1.0 ausgemacht. Betroffen davon ist ein unbekannter Prozess der Datei /Admin/login.php. Durch Manipulation des Arguments txtusername mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.

CVSS: HIGH (7.3)

EPSS Score: 0.06%

SSVC Exploitation: none

Source: CVE
June 5th, 2025 (2 days ago)
Description: Cellebrite, a controversial digital forensics firm, is set to acquire virtualization vendor Corellium in a $170 million deal.
Source: Dark Reading
June 5th, 2025 (2 days ago)
Description: The Veethree Group is an alliance of companies, driven by common technologies and innovation. Today the group of companies has employees worldwide, with sites over 4 continents, serving 100’s of OEM customers. Those companies include: Indication Instruments Ltd – India Veethree New Zealand – New Zealand Veethree North America LLC – USA Veethree Electronics & Marine LLC – USA Veethree Technologies (CANtronik Ltd) – UK
Source: Ransomware.live
June 5th, 2025 (2 days ago)