CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-23974 |
Description: Incorrect Privilege Assignment vulnerability in ifkooo One-Login allows Privilege Escalation. This issue affects One-Login: from n/a through 1.4.
CVSS: HIGH (8.1) EPSS Score: 0.05%
June 9th, 2025 (about 1 month ago)
|
|
CVE-2024-31585 |
Description: FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS: MEDIUM (5.3) EPSS Score: 0.03% SSVC Exploitation: none
June 9th, 2025 (about 1 month ago)
|
|
Description: Sensata Technologies is warning former and current employees it suffered a data breach after concluding an investigation into an April ransomware attack. [...]
June 9th, 2025 (about 1 month ago)
|
|
Description: Alleged data breach of IMS Consultores
June 9th, 2025 (about 1 month ago)
|
|
Description: NyN is a real estate developer in Barcelona and provinces.
We are going to upload about 30 GB of corporate data. Lots of fin
ancial data of almost all of their hotels and other divisions, in
ternal correspondence, a bit of personal files of employees, lots
of contracts and agreements, clients data, NDAs, etc.
June 9th, 2025 (about 1 month ago)
|
|
Description: RipperSec Targeted the Website of Vice President of India
June 9th, 2025 (about 1 month ago)
|
|
Description: Discover how NodeZero's autonomous RAT operates, why credentials dominate post-exploitation, and what it means for your cyber defense.
June 9th, 2025 (about 1 month ago)
|
|
CVE-2025-5885 |
Description: A vulnerability has been found in Konica Minolta bizhub up to 20250202 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. In Konica Minolta bizhub bis 20250202 wurde eine problematische Schwachstelle gefunden. Das betrifft eine unbekannte Funktionalität. Durch Manipulation mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
CVSS: MEDIUM (5.3) EPSS Score: 0.02%
June 9th, 2025 (about 1 month ago)
|
|
CVE-2025-5884 |
Description: A vulnerability, which was classified as problematic, was found in Konica Minolta bizhub up to 20250202. This affects an unknown part of the component Display MFP Information List. The manipulation of the argument Model Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Es wurde eine problematische Schwachstelle in Konica Minolta bizhub bis 20250202 gefunden. Es betrifft eine unbekannte Funktion der Komponente Display MFP Information List. Durch die Manipulation des Arguments Model Name mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
CVSS: MEDIUM (5.1) EPSS Score: 0.03% SSVC Exploitation: poc
June 9th, 2025 (about 1 month ago)
|
|
CVE-2025-5881 |
Description: A vulnerability was found in code-projects Chat System up to 1.0 and classified as critical. This issue affects some unknown processing of the file /user/confirm_password.php. The manipulation of the argument cid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Eine kritische Schwachstelle wurde in code-projects Chat System bis 1.0 gefunden. Hierbei geht es um eine nicht exakt ausgemachte Funktion der Datei /user/confirm_password.php. Durch das Beeinflussen des Arguments cid mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
CVSS: MEDIUM (6.3) EPSS Score: 0.03% SSVC Exploitation: poc
June 9th, 2025 (about 1 month ago)
|