Español
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어

#cve resultados de búsqueda

johnk3r's profile picture. Threat Hunter
Johnk3r
 @johnk3r
29 sept

Observed threat actor abusing a vulnerable driver (wsftprm.sys, Topaz OFD – Brazilian antifraud vendor, #CVE-2023-52271) for defense evasion. Attack chain: cartel.exe → vulnerable driver → Lazarus.exe (final payload, extension ".cry"). First seen in Colombia. 1/3

johnk3r's tweet image. Observed threat actor abusing a vulnerable driver (wsftprm.sys, Topaz OFD – Brazilian antifraud vendor, #CVE-2023-52271) for defense evasion. Attack chain: cartel.exe → vulnerable driver → Lazarus.exe (final payload, extension ".cry"). First seen in Colombia. 1/3
johnk3r's tweet image. Observed threat actor abusing a vulnerable driver (wsftprm.sys, Topaz OFD – Brazilian antifraud vendor, #CVE-2023-52271) for defense evasion. Attack chain: cartel.exe → vulnerable driver → Lazarus.exe (final payload, extension ".cry"). First seen in Colombia. 1/3
johnk3r's tweet image. Observed threat actor abusing a vulnerable driver (wsftprm.sys, Topaz OFD – Brazilian antifraud vendor, #CVE-2023-52271) for defense evasion. Attack chain: cartel.exe → vulnerable driver → Lazarus.exe (final payload, extension ".cry"). First seen in Colombia. 1/3
5
36
114
40
11K
prakhar0x01's profile picture. ᴀɴ ᴏʀᴅɪɴᴀʀʏ ɢᴜʏ ɪɴ ᴛʜᴇ ᴡᴀʏ ᴛᴏ ʙᴇᴄᴏᴍᴇ ᴇxᴛʀᴀᴏʀᴅɪɴᴀʀʏ
𝙶𝚑𝚘𝚜𝚝 🇮🇳
 @prakhar0x01
23 sept

Just got 3 CVEs assigned for 0-days i discovered in a major LMS (30 Million+ users): 1. CVE-2025-59541 : CSRF (High 🟠) 2. CVE-2025-59542 : Account Takeover (Critical🔴) 3. CVE-2025-59543 : Account Takeover (Critical🔴) Can’t disclose much, public release is pending. #CVE

prakhar0x01's tweet image. Just got 3 CVEs assigned for 0-days i discovered in a major LMS (30 Million+ users): 1. CVE-2025-59541 : CSRF (High 🟠) 2. CVE-2025-59542 : Account Takeover (Critical🔴) 3. CVE-2025-59543 : Account Takeover (Critical🔴) Can’t disclose much, public release is pending. #CVE
prakhar0x01's tweet image. Just got 3 CVEs assigned for 0-days i discovered in a major LMS (30 Million+ users): 1. CVE-2025-59541 : CSRF (High 🟠) 2. CVE-2025-59542 : Account Takeover (Critical🔴) 3. CVE-2025-59543 : Account Takeover (Critical🔴) Can’t disclose much, public release is pending. #CVE
prakhar0x01's tweet image. Just got 3 CVEs assigned for 0-days i discovered in a major LMS (30 Million+ users): 1. CVE-2025-59541 : CSRF (High 🟠) 2. CVE-2025-59542 : Account Takeover (Critical🔴) 3. CVE-2025-59543 : Account Takeover (Critical🔴) Can’t disclose much, public release is pending. #CVE
8
9
167
30
9K
RedDrip7's profile picture. Technical Twitter of QiAnXin Technology, leading Chinese security vendor. It is operated by RedDrip Team which focuses on malware, APT and threat intelligence.
RedDrip Team
 @RedDrip7
9 sept

Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…

RedDrip7's tweet image. Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…
RedDrip7's tweet image. Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…
RedDrip7's tweet image. Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…
6
47
154
78
13K
tuo4n8's profile picture. 🧑‍💻 Computer User - @vngsecresponse
tuo4n8
 @tuo4n8
6 oct

#CVE-2025-61882 PoC leak is real. The exploit requires outbound connections to a malicious server. 🤔🤔🤔 nuclei detect for ssrf: gist.github.com/tuo4n8/0e16056…

tuo4n8's tweet image. #CVE-2025-61882 PoC leak is real. The exploit requires outbound connections to a malicious server. 🤔🤔🤔 nuclei detect for ssrf: gist.github.com/tuo4n8/0e16056…
1
1
10
2
4K
pdnuclei_bot's profile picture. Tweeting fresh CVE templates from @pdnuclei's Nuclei Templates repository. Stay updated with the latest security vulnerabilities and CVEs 🤖
pdnuclei-bot
 @pdnuclei_bot
37 min

🚨 CVE-2020-4427 - critical 🚨 IBM Data Risk Manager - Authentication Bypass via SAML > IBM Data Risk Manager versions 2.0.1 through 2.0.6 are vulnerable to authentication b... 👾 cloud.projectdiscovery.io/library/CVE-20… @pdnuclei #NucleiTemplates #cve

pdnuclei_bot's tweet card. IBM Data Risk Manager versions 2.0.1 through 2.0.6 are vulnerable to authentication bypass when configured with SAML authentication. A remote attacker can bypass security restrictions by sending a...
IBM Data Risk Manager - Authentication Bypass via SAML
Fuente: cloud.projectdiscovery.io
0
0
1
0
29
CISACyber's profile picture. Part of @CISAgov, we respond to major incidents, analyze threats, and exchange critical cybersecurity information with partners around the world.
CISA Cyber
 @CISACyber
25 sept

🎉 We are excited to welcome Azure Access Technology as a #CVE Partner to help disseminate vulnerability information! For more info on efforts to protect #ICS or how your org can become a CVE Numbering Authority, visit 👉 cve.org/PartnerInforma…

CISACyber's tweet image. 🎉 We are excited to welcome Azure Access Technology as a #CVE Partner to help disseminate vulnerability information! For more info on efforts to protect #ICS or how your org can become a CVE Numbering Authority, visit 👉 cve.org/PartnerInforma…
3
6
22
1
8K
pdnuclei_bot's profile picture. Tweeting fresh CVE templates from @pdnuclei's Nuclei Templates repository. Stay updated with the latest security vulnerabilities and CVEs 🤖
pdnuclei-bot
 @pdnuclei_bot
2 h

🚨 CVE-2021-33766 - high 🚨 Microsoft Exchange - Authentication Bypass > Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability en... 👾 cloud.projectdiscovery.io/library/CVE-20… @pdnuclei #NucleiTemplates #cve

pdnuclei_bot's tweet card. Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal.
Microsoft Exchange - Authentication Bypass
Fuente: cloud.projectdiscovery.io
0
0
2
0
60
hackthebox_eu's profile picture. Cyber Mastery: Community Inspired. Enterprise Trusted.
Hack The Box
@hackthebox_eu
4 oct

Your attack surface isn’t just servers and endpoints 🤖 A single #CVE can turn an everyday tool into an entry point. That’s why CVE literacy is key to building CTEM maturity, helping you spot patterns of risk, not just individual bugs. 📚 Read the full breakdown of the CUPS…

hackthebox_eu's tweet image. Your attack surface isn’t just servers and endpoints 🤖 A single #CVE can turn an everyday tool into an entry point. That’s why CVE literacy is key to building CTEM maturity, helping you spot patterns of risk, not just individual bugs. 📚 Read the full breakdown of the CUPS…
hackthebox_eu's tweet image. Your attack surface isn’t just servers and endpoints 🤖 A single #CVE can turn an everyday tool into an entry point. That’s why CVE literacy is key to building CTEM maturity, helping you spot patterns of risk, not just individual bugs. 📚 Read the full breakdown of the CUPS…
hackthebox_eu's tweet image. Your attack surface isn’t just servers and endpoints 🤖 A single #CVE can turn an everyday tool into an entry point. That’s why CVE literacy is key to building CTEM maturity, helping you spot patterns of risk, not just individual bugs. 📚 Read the full breakdown of the CUPS…
1
19
175
59
12K
helpnetsecurity's profile picture. Independent cybersecurity news since 1998. Discover what matters in the world of information security today.
Help Net Security
 @helpnetsecurity
2 h

Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884) - helpnetsecurity.com/2025/10/12/ano… - @Oracle #vulnerability #CVE @OracleSecurity #CyberSecurityNews #CyberSecurity

helpnetsecurity's tweet image. Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884) - helpnetsecurity.com/2025/10/12/ano… - @Oracle #vulnerability #CVE @OracleSecurity #CyberSecurityNews #CyberSecurity
0
0
0
0
230
fluidattacks's profile picture. Go beyond automation when securing your applications. Fluid Attacks performs comprehensive continuous hacking at the speed of your business.
Fluid Attacks
 @fluidattacks
7 oct

Fluid Attacks' research team found a zero-day vulnerability in Ghost. As a #CNA, we assigned the ID CVE-2025-9862. Details here: 🔗 fluidattacks.com/pt/advisories/…. We have disclosed 201 #CVE to this date: 🔗fluidattacks.com/advisories/

fluidattacks's tweet image. Fluid Attacks' research team found a zero-day vulnerability in Ghost. As a #CNA, we assigned the ID CVE-2025-9862. Details here: 🔗 fluidattacks.com/pt/advisories/…. We have disclosed 201 #CVE to this date: 🔗fluidattacks.com/advisories/
0
0
2
0
101
CVEannounce's profile picture. Account maintained by the CVE™ Program to update the community on CVE-related announcements. https://t.co/2P9qfFrKeu
CVE Announcements
 @CVEannounce
30 sept

Almaviva is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities in its proprietary software solutions: Joshua CybeRisk Vision, Jiano, Sofia, & Giotto cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew

CVEannounce's tweet image. Almaviva is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities in its proprietary software solutions: Joshua CybeRisk Vision, Jiano, Sofia, & Giotto cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew
1
0
0
0
521
CISACyber's profile picture. Part of @CISAgov, we respond to major incidents, analyze threats, and exchange critical cybersecurity information with partners around the world.
CISA Cyber
 @CISACyber
25 sept

🎉 We are excited to welcome Leonardo Spa as a #CVE Partner to help disseminate vulnerability information! For more info on efforts to protect #ICS or how your org can become a CVE Numbering Authority, visit 👉 cve.org/PartnerInforma…

CISACyber's tweet image. 🎉 We are excited to welcome Leonardo Spa as a #CVE Partner to help disseminate vulnerability information! For more info on efforts to protect #ICS or how your org can become a CVE Numbering Authority, visit 👉 cve.org/PartnerInforma…
2
9
29
6
9K
CVEannounce's profile picture. Account maintained by the CVE™ Program to update the community on CVE-related announcements. https://t.co/2P9qfFrKeu
CVE Announcements
 @CVEannounce
23 sept

YesWeHack is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities discovered by @YesWeHack community hunters on products with the permission of their owners cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew

CVEannounce's tweet image. YesWeHack is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities discovered by @YesWeHack community hunters on products with the permission of their owners cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew
1
0
4
0
581
CVEannounce's profile picture. Account maintained by the CVE™ Program to update the community on CVE-related announcements. https://t.co/2P9qfFrKeu
CVE Announcements
 @CVEannounce
23 sept

Echo is now a CVE Numbering Authority (CNA) assigning CVE IDs for Echo products + vulnerabilities discovered by or reported to Echo not in another CNA’s scope cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew

CVEannounce's tweet image. Echo is now a CVE Numbering Authority (CNA) assigning CVE IDs for Echo products + vulnerabilities discovered by or reported to Echo not in another CNA’s scope cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew
0
0
2
0
502
eki_erk's profile picture.
Ekitji
 @eki_erk
6 oct

Offensive SIEM 👊🏽 Flip your SIEM mindset from reactive detection to proactive hunting. Uncover local privilege escalations, hidden misconfigs, and even potential #CVE before attackers do 🔥🔥 🎥 youtu.be/5nfL_4ek4dY #BlueTeam #SIEM #CyberSecurity #ThreatHunting #DFIR

eki_erk's tweet card. SEC-T 0x11: Erkan Ekici & Shanti Lindström - Offensive SIEM: When the...

youtube.com

YouTube

SEC-T 0x11: Erkan Ekici & Shanti Lindström - Offensive SIEM: When the...

Fuente: youtube.com
4
11
70
69
17K
CVEannounce's profile picture. Account maintained by the CVE™ Program to update the community on CVE-related announcements. https://t.co/2P9qfFrKeu
CVE Announcements
 @CVEannounce
23 sept

Azure Access is now a CVE Numbering Authority (CNA) assigning CVE IDs for Azure Access branded products and technologies only cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew

CVEannounce's tweet image. Azure Access is now a CVE Numbering Authority (CNA) assigning CVE IDs for Azure Access branded products and technologies only cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew
1
0
0
0
540
CVEannounce's profile picture. Account maintained by the CVE™ Program to update the community on CVE-related announcements. https://t.co/2P9qfFrKeu
CVE Announcements
 @CVEannounce
23 sept

Uniview is now a CVE Numbering Authority (CNA) assigning CVE IDs for Uniview products only cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew

CVEannounce's tweet image. Uniview is now a CVE Numbering Authority (CNA) assigning CVE IDs for Uniview products only cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew
1
0
2
1
493
CVEShield's profile picture.
CVETrends
 @CVEShield
4 h

Top 5 Trending CVEs: 1 - CVE-2012-0157 2 - CVE-2025-33073 3 - CVE-2025-3600 4 - CVE-2023-50428 5 - CVE-2025-25257 #cve #cvetrends #cveshield #cybersecurity cveshield.com/dashboard

CVEShield's tweet card. View trending CVEs on social media
CVE Trends Dashboard
Fuente: cveshield.com
0
0
0
0
75
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-3719 (CVSS:7.2, HIGH) is Analyzed. An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being p..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
52
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-3718 (CVSS:5.8, HIGH) is Analyzed. A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing valid..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
52
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11396 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was identified in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the ..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
48
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11389 (CVSS:7.4, HIGH) is Undergoing Analysis. A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveA..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
64
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-0603 (CVSS:9.8, CRITICAL) is Awaiting Analysis. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Callvision Healthc..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
23
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11388 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpg..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
20
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11387 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fast_sett..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
18
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11386 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/Set..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
17
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11385 (CVSS:7.4, HIGH) is Analyzed. A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file ..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
17
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11356 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /go..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
24
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11355 (CVSS:7.4, HIGH) is Awaiting Analysis. A vulnerability has been found in UTT 1250GW up to v2v3.2.2-200710. Affected by this vulnerability is the function strcp..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
17
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-10162 (CVSS:7.5, HIGH) is Awaiting Analysis. The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin before 14 does not validate the..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
18
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11362 (CVSS:8.7, HIGH) is Awaiting Analysis. Versions of the package pdfmake before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttl..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
17
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11350 (CVSS:6.9, HIGH) is Analyzed. A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. The affected element is..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
17
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11349 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was identified in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown funct..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
18
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11348 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unkn..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
17
cracbot's profile picture. CRAC Learning is an initiative to help you get exposed to latest security trends, through research, learning, networking and spreading security awareness.
CRAC Learning - Tech
 @cracbot
37 min

CVE-2025-11347 (CVSS:6.9, HIGH) is Undergoing Analysis. A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function mov..nvd.nist.gov/vuln/detail/CV… #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

0
0
0
0
17
pdnuclei_bot's profile picture. Tweeting fresh CVE templates from @pdnuclei's Nuclei Templates repository. Stay updated with the latest security vulnerabilities and CVEs 🤖
pdnuclei-bot
 @pdnuclei_bot
37 min

🚨 CVE-2020-4427 - critical 🚨 IBM Data Risk Manager - Authentication Bypass via SAML > IBM Data Risk Manager versions 2.0.1 through 2.0.6 are vulnerable to authentication b... 👾 cloud.projectdiscovery.io/library/CVE-20… @pdnuclei #NucleiTemplates #cve

pdnuclei_bot's tweet card. IBM Data Risk Manager versions 2.0.1 through 2.0.6 are vulnerable to authentication bypass when configured with SAML authentication. A remote attacker can bypass security restrictions by sending a...
IBM Data Risk Manager - Authentication Bypass via SAML
Fuente: cloud.projectdiscovery.io
0
0
1
0
29
pdnuclei_bot's profile picture. Tweeting fresh CVE templates from @pdnuclei's Nuclei Templates repository. Stay updated with the latest security vulnerabilities and CVEs 🤖
pdnuclei-bot
 @pdnuclei_bot
2 h

🚨 CVE-2021-33766 - high 🚨 Microsoft Exchange - Authentication Bypass > Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability en... 👾 cloud.projectdiscovery.io/library/CVE-20… @pdnuclei #NucleiTemplates #cve

pdnuclei_bot's tweet card. Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal.
Microsoft Exchange - Authentication Bypass
Fuente: cloud.projectdiscovery.io
0
0
2
0
60
helpnetsecurity's profile picture. Independent cybersecurity news since 1998. Discover what matters in the world of information security today.
Help Net Security
 @helpnetsecurity
2 h

Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884) - helpnetsecurity.com/2025/10/12/ano… - @Oracle #vulnerability #CVE @OracleSecurity #CyberSecurityNews #CyberSecurity

helpnetsecurity's tweet image. Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884) - helpnetsecurity.com/2025/10/12/ano… - @Oracle #vulnerability #CVE @OracleSecurity #CyberSecurityNews #CyberSecurity
0
0
0
0
230
prakhar0x01's profile picture. ᴀɴ ᴏʀᴅɪɴᴀʀʏ ɢᴜʏ ɪɴ ᴛʜᴇ ᴡᴀʏ ᴛᴏ ʙᴇᴄᴏᴍᴇ ᴇxᴛʀᴀᴏʀᴅɪɴᴀʀʏ
𝙶𝚑𝚘𝚜𝚝 🇮🇳
 @prakhar0x01
23 sept

Just got 3 CVEs assigned for 0-days i discovered in a major LMS (30 Million+ users): 1. CVE-2025-59541 : CSRF (High 🟠) 2. CVE-2025-59542 : Account Takeover (Critical🔴) 3. CVE-2025-59543 : Account Takeover (Critical🔴) Can’t disclose much, public release is pending. #CVE

prakhar0x01's tweet image. Just got 3 CVEs assigned for 0-days i discovered in a major LMS (30 Million+ users): 1. CVE-2025-59541 : CSRF (High 🟠) 2. CVE-2025-59542 : Account Takeover (Critical🔴) 3. CVE-2025-59543 : Account Takeover (Critical🔴) Can’t disclose much, public release is pending. #CVE
prakhar0x01's tweet image. Just got 3 CVEs assigned for 0-days i discovered in a major LMS (30 Million+ users): 1. CVE-2025-59541 : CSRF (High 🟠) 2. CVE-2025-59542 : Account Takeover (Critical🔴) 3. CVE-2025-59543 : Account Takeover (Critical🔴) Can’t disclose much, public release is pending. #CVE
prakhar0x01's tweet image. Just got 3 CVEs assigned for 0-days i discovered in a major LMS (30 Million+ users): 1. CVE-2025-59541 : CSRF (High 🟠) 2. CVE-2025-59542 : Account Takeover (Critical🔴) 3. CVE-2025-59543 : Account Takeover (Critical🔴) Can’t disclose much, public release is pending. #CVE
8
9
167
30
9K
decoder_it's profile picture. Security Consultant @semperistech . Independent Security Researcher. Cyclist & Scubadiver. MSRC MVR 2022. "So di non sapere"
Andrea P
 @decoder_it
16 jun

Looks like the patch for #CVE-2025-33073 might not fully resolve the issue... curious to see where this leads

decoder_it's tweet image. Looks like the patch for #CVE-2025-33073 might not fully resolve the issue... curious to see where this leads
2
13
83
20
7K
johnk3r's profile picture. Threat Hunter
Johnk3r
 @johnk3r
29 sept

Observed threat actor abusing a vulnerable driver (wsftprm.sys, Topaz OFD – Brazilian antifraud vendor, #CVE-2023-52271) for defense evasion. Attack chain: cartel.exe → vulnerable driver → Lazarus.exe (final payload, extension ".cry"). First seen in Colombia. 1/3

johnk3r's tweet image. Observed threat actor abusing a vulnerable driver (wsftprm.sys, Topaz OFD – Brazilian antifraud vendor, #CVE-2023-52271) for defense evasion. Attack chain: cartel.exe → vulnerable driver → Lazarus.exe (final payload, extension ".cry"). First seen in Colombia. 1/3
johnk3r's tweet image. Observed threat actor abusing a vulnerable driver (wsftprm.sys, Topaz OFD – Brazilian antifraud vendor, #CVE-2023-52271) for defense evasion. Attack chain: cartel.exe → vulnerable driver → Lazarus.exe (final payload, extension ".cry"). First seen in Colombia. 1/3
johnk3r's tweet image. Observed threat actor abusing a vulnerable driver (wsftprm.sys, Topaz OFD – Brazilian antifraud vendor, #CVE-2023-52271) for defense evasion. Attack chain: cartel.exe → vulnerable driver → Lazarus.exe (final payload, extension ".cry"). First seen in Colombia. 1/3
5
36
114
40
11K
Cyb3rMonk's profile picture. https://t.co/uAlYlXIpyV Learn #KQL for #ThreatHunting, #DetectionEngineering, and #DFIR @BluRavenSec | Microsoft Security MVP | #DataScience
Mehmet Ergene
@Cyb3rMonk
19 sept

🚨Detect Actor Token Abuse (#CVE-2025-55241) After verifying the details with @_dirkjan, I created a query to detect Actor Token abuse, regardless of the activity involved. The idea is simple: If these activities are S2S, they should originate from Microsoft service IPs. 🧐…

Cyb3rMonk's tweet image. 🚨Detect Actor Token Abuse (#CVE-2025-55241) After verifying the details with @_dirkjan, I created a query to detect Actor Token abuse, regardless of the activity involved. The idea is simple: If these activities are S2S, they should originate from Microsoft service IPs. 🧐…
4
65
287
173
22K
RedDrip7's profile picture. Technical Twitter of QiAnXin Technology, leading Chinese security vendor. It is operated by RedDrip Team which focuses on malware, APT and threat intelligence.
RedDrip Team
 @RedDrip7
9 sept

Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…

RedDrip7's tweet image. Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…
RedDrip7's tweet image. Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…
RedDrip7's tweet image. Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…
6
47
154
78
13K
cybor_j's profile picture. Application Security | CVE-2025-31192, 30466, 43228, 43356 | eWPT | CEH | GOOGLE HOF | APPLE (x6) | ASUS HOF | P1 Warrior L1 | views are my own!
Jaydev Ahire
 @cybor_j
16 sept

Excited 🎉 to share that I have been credited with my 4th CVE from Apple: CVE-2025-43356. This issue was addressed in Apple’s new security releases of iOS 26, iPadOS 26, and Safari 26. #Apple #CVE #BugBounty #iOS #ApplicationSecurity #iOS26

cybor_j's tweet image. Excited 🎉 to share that I have been credited with my 4th CVE from Apple: CVE-2025-43356. This issue was addressed in Apple’s new security releases of iOS 26, iPadOS 26, and Safari 26. #Apple #CVE #BugBounty #iOS #ApplicationSecurity #iOS26
cybor_j's tweet image. Excited 🎉 to share that I have been credited with my 4th CVE from Apple: CVE-2025-43356. This issue was addressed in Apple’s new security releases of iOS 26, iPadOS 26, and Safari 26. #Apple #CVE #BugBounty #iOS #ApplicationSecurity #iOS26
cybor_j's tweet image. Excited 🎉 to share that I have been credited with my 4th CVE from Apple: CVE-2025-43356. This issue was addressed in Apple’s new security releases of iOS 26, iPadOS 26, and Safari 26. #Apple #CVE #BugBounty #iOS #ApplicationSecurity #iOS26
8
18
163
32
13K
AabyssZG's profile picture. 渊龙Sec安全团队（AabyssTeam）创始人 国际云安全联盟（CSA）渗透测试工作组成员 渗透测试 | 造轮达人 | 追洞达人｜RedTeam | IOT安全｜业余无线电｜ SecTools | Misc业余选手 | Exploits
曾哥
@AabyssZG
30 abr

【情报】SAP NetWeaver存在RCE漏洞🚨🚨🚨 SAP NetWeaver Visual Compose的指定路径下可以未授权利用该漏洞上传恶意文件，导致服务器失陷，漏洞编号为CVE-2025-31324🥲 资产分布中国和美国使用量都比较大，目前漏洞细节已经公开，存在大范围在野利用🧐 #CVE #redteam #CyberSec #hacker

AabyssZG's tweet image. 【情报】SAP NetWeaver存在RCE漏洞🚨🚨🚨 SAP NetWeaver Visual Compose的指定路径下可以未授权利用该漏洞上传恶意文件，导致服务器失陷，漏洞编号为CVE-2025-31324🥲 资产分布中国和美国使用量都比较大，目前漏洞细节已经公开，存在大范围在野利用🧐 #CVE #redteam #CyberSec #hacker
AabyssZG's tweet image. 【情报】SAP NetWeaver存在RCE漏洞🚨🚨🚨 SAP NetWeaver Visual Compose的指定路径下可以未授权利用该漏洞上传恶意文件，导致服务器失陷，漏洞编号为CVE-2025-31324🥲 资产分布中国和美国使用量都比较大，目前漏洞细节已经公开，存在大范围在野利用🧐 #CVE #redteam #CyberSec #hacker
5
13
59
25
8K
mindpatchsec's profile picture. Offensive security enthusiast // code craftsman // Rust evangelist All opinions are mine, for better or worse.
Khaled 🦩
 @mindpatchsec
19 may

New #CVE getting cooked fr 🔥 Dev Team on it, Writeup dropping soon.

mindpatchsec's tweet image. New #CVE getting cooked fr 🔥 Dev Team on it, Writeup dropping soon.
mindpatchsec's tweet image. New #CVE getting cooked fr 🔥 Dev Team on it, Writeup dropping soon.
3
2
55
6
4K
k_firsov's profile picture. Co-founder and CTO of @FearsOff | Protecting the World’s Top Crypto Exchanges & Financial Institutions | Cybersecurity Enthusiast
Kirill Firsov
@k_firsov
5 jun

My research on CVE-2025-49113 is out. fearsoff.org/research/round…. Happy reading! #CVE #roundcube #poc @FearsOff

k_firsov's tweet image. My research on CVE-2025-49113 is out. fearsoff.org/research/round…. Happy reading! #CVE #roundcube #poc @FearsOff
7
98
335
135
30K
k_firsov's profile picture. Co-founder and CTO of @FearsOff | Protecting the World’s Top Crypto Exchanges & Financial Institutions | Cybersecurity Enthusiast
Kirill Firsov
@k_firsov
4 jun

The exploit for CVE-2025-49113 is already available for sale on the dark web. I feel sorry for anyone who hasn’t upgraded to the newest version yet. Doomsday is coming, believe me. #roundcube #CVE @FearsOff

k_firsov's tweet image. The exploit for CVE-2025-49113 is already available for sale on the dark web. I feel sorry for anyone who hasn’t upgraded to the newest version yet. Doomsday is coming, believe me. #roundcube #CVE @FearsOff
3
11
53
9
8K
gothburz's profile picture. Sr. Threat Researcher @theZDI 🥷🏻🛡️👨🏼‍💻Threat hunter 🎯 Creator of @cybercronai 🤖📊 opinions my own 💭
Petrus Germanicus
@gothburz
16 abr

📊 #VulnReport Security Summary - April 16, 2025. Today's vulnerability report shows over 200 new #CVE's across various platforms 🧵👇 ⚠️ Oracle Critical Patch Update released today with 50+ security fixes. Most critical: CVE-2025-30727 (CRITICAL 9.8) in Oracle Scripting.…

gothburz's tweet image. 📊 #VulnReport Security Summary - April 16, 2025. Today's vulnerability report shows over 200 new #CVE's across various platforms 🧵👇 ⚠️ Oracle Critical Patch Update released today with 50+ security fixes. Most critical: CVE-2025-30727 (CRITICAL 9.8) in Oracle Scripting.…
0
0
33
0
501
tuo4n8's profile picture. 🧑‍💻 Computer User - @vngsecresponse
tuo4n8
 @tuo4n8
6 oct

#CVE-2025-61882 PoC leak is real. The exploit requires outbound connections to a malicious server. 🤔🤔🤔 nuclei detect for ssrf: gist.github.com/tuo4n8/0e16056…

tuo4n8's tweet image. #CVE-2025-61882 PoC leak is real. The exploit requires outbound connections to a malicious server. 🤔🤔🤔 nuclei detect for ssrf: gist.github.com/tuo4n8/0e16056…
1
1
10
2
4K
hackthebox_eu's profile picture. Cyber Mastery: Community Inspired. Enterprise Trusted.
Hack The Box
@hackthebox_eu
21 sept

Don't whisper your secrets just yet 🤫 What happens when a doc silently instructs Copilot and hides prompts with zero clicks? We break down the attack flow, real-world demo, and practical mitigations of a Copilot #CVE on our #blog. Read more: okt.to/c7zLPG #HackTheBox…

hackthebox_eu's tweet image. Don't whisper your secrets just yet 🤫 What happens when a doc silently instructs Copilot and hides prompts with zero clicks? We break down the attack flow, real-world demo, and practical mitigations of a Copilot #CVE on our #blog. Read more: okt.to/c7zLPG #HackTheBox…
3
17
131
46
8K
CISACyber's profile picture. Part of @CISAgov, we respond to major incidents, analyze threats, and exchange critical cybersecurity information with partners around the world.
CISA Cyber
 @CISACyber
25 sept

🎉 We are excited to welcome Azure Access Technology as a #CVE Partner to help disseminate vulnerability information! For more info on efforts to protect #ICS or how your org can become a CVE Numbering Authority, visit 👉 cve.org/PartnerInforma…

CISACyber's tweet image. 🎉 We are excited to welcome Azure Access Technology as a #CVE Partner to help disseminate vulnerability information! For more info on efforts to protect #ICS or how your org can become a CVE Numbering Authority, visit 👉 cve.org/PartnerInforma…
3
6
22
1
8K
cybor_j's profile picture. Application Security | CVE-2025-31192, 30466, 43228, 43356 | eWPT | CEH | GOOGLE HOF | APPLE (x6) | ASUS HOF | P1 Warrior L1 | views are my own!
Jaydev Ahire
 @cybor_j
30 jul

I’m excited to announce that I've been credited with my third CVE from @Apple CVE-2025-43228 Funny thing is, I reported this vulnerability back in August 2024 It has been addressed in the new iOS 18.6 and Safari 18.6 security update support.apple.com/en-us/124147 #CVE #BugBounty

cybor_j's tweet image. I’m excited to announce that I've been credited with my third CVE from @Apple CVE-2025-43228 Funny thing is, I reported this vulnerability back in August 2024 It has been addressed in the new iOS 18.6 and Safari 18.6 security update support.apple.com/en-us/124147 #CVE #BugBounty
cybor_j's tweet image. I’m excited to announce that I've been credited with my third CVE from @Apple CVE-2025-43228 Funny thing is, I reported this vulnerability back in August 2024 It has been addressed in the new iOS 18.6 and Safari 18.6 security update support.apple.com/en-us/124147 #CVE #BugBounty
4
2
59
7
6K
_r00tuser's profile picture. security researcher
kking
 @_r00tuser
16 jul

#CVE-2025-53833 挺直给的一个漏洞，直接官方demo即可快速复现，步骤见图1，和grok协同搞了个漏洞分析报告，见图2. 题外话，没看懂360这个复现。 github.com/saleem-hadad/l…

_r00tuser's tweet image. #CVE-2025-53833 挺直给的一个漏洞，直接官方demo即可快速复现，步骤见图1，和grok协同搞了个漏洞分析报告，见图2. 题外话，没看懂360这个复现。 github.com/saleem-hadad/l…
_r00tuser's tweet image. #CVE-2025-53833 挺直给的一个漏洞，直接官方demo即可快速复现，步骤见图1，和grok协同搞了个漏洞分析报告，见图2. 题外话，没看懂360这个复现。 github.com/saleem-hadad/l…
_r00tuser's tweet image. #CVE-2025-53833 挺直给的一个漏洞，直接官方demo即可快速复现，步骤见图1，和grok协同搞了个漏洞分析报告，见图2. 题外话，没看懂360这个复现。 github.com/saleem-hadad/l…
2
10
37
16
4K
UjlakiMarci's profile picture. M. Sc. | Former Military Officer | Threat Hunter | AI & Detection Engineer | Security Architect | PGP: 2D9C 18DE 5B30 A269
Marci Ujlaki
@UjlakiMarci
26 ago

🟥 CVE-2025-7775, CVSS: 9.2 (#Critical) NetScaler ADC and NetScaler Gateway, and NDcPP, Citrix. A memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service. #CyberSecurity #CVE #Vulnerability #Citrix #RemoteCodeExecution #DenialOfService…

UjlakiMarci's tweet image. 🟥 CVE-2025-7775, CVSS: 9.2 (#Critical) NetScaler ADC and NetScaler Gateway, and NDcPP, Citrix. A memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service. #CyberSecurity #CVE #Vulnerability #Citrix #RemoteCodeExecution #DenialOfService…
1
9
19
4
4K

Something went wrong.


Something went wrong.


United States Trends