Threat database

CVE-2023-2533 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability in PaperCut NG/MF version 22.0.10. It allows an attacker to trick an authenticated administrator into executing unauthorized actions by clicking a malicious link, potentially leading to changes in security settings or arbitrary code execution. Exploitation requires the admin to be logged in and interact with the malicious content. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS score of 8.4. No known exploits are currently in the wild. European organizations using PaperCut NG/MF, especially in sectors with high administrative privileges, should prioritize patching and implement strict access controls to mitigate risk. Countries with significant PaperCut deployments and critical infrastructure are at higher risk.

New Critical CrushFTP CVE-2025-54309 RCE Explained + PoC Source: https://pwn.guide/free/web/crushftp

CVE-2025-2776 is a critical vulnerability in SysAid On-Prem involving improper restriction of XML external entity (XXE) references in the Server URL processing functionality. This flaw allows unauthenticated attackers to perform administrator account takeover and read arbitrary files on the affected system. The vulnerability has a high CVSS score of 9.3 and is known to be exploited in the wild. No specific affected versions or patch information is provided in the available data.

SysAid On-Prem has a critical XML External Entity (XXE) vulnerability in its Checkin processing functionality. This flaw allows an attacker to perform administrator account takeover and read arbitrary files. The vulnerability is actively exploited in the wild. No specific affected versions or patch information is provided.

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Fortinet FortiWeb contains a critical SQL injection vulnerability (CVE-2025-25257) that allows unauthenticated attackers to execute arbitrary SQL commands via crafted HTTP or HTTPS requests. This vulnerability has a high CVSS score of 9.6 and is known to be exploited in the wild. No specific affected versions or patch information is provided.

CVE-2025-47812 is a critical vulnerability in Wing FTP Server involving improper neutralization of null byte or NUL characters. This flaw allows injection of arbitrary Lua code into user session files, enabling execution of system commands with the FTP service's privileges, which are typically root or SYSTEM. The vulnerability has a CVSS score of 10, indicating maximum severity, and is known to be exploited in the wild.

PHPMailer contains a command injection vulnerability in its mail() function due to improper sanitization of user input. This flaw allows attackers to execute arbitrary code within the application context. Unsuccessful exploitation attempts can cause denial-of-service conditions. The vulnerability has been exploited in the wild.

CVE-2019-5418 is a path traversal vulnerability in Ruby on Rails' Action View component. It allows specially crafted Accept headers combined with calls to `render file:` to cause arbitrary files on the server to be rendered, potentially disclosing their contents. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2019-9621 is a server-side request forgery (SSRF) vulnerability in the ProxyServlet component of Synacor Zimbra Collaboration Suite (ZCS). This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the available data.

Multi-Router Looking Glass (MRLG) has a buffer overflow vulnerability (CVE-2014-3931) that allows remote attackers to perform arbitrary memory writes and cause memory corruption. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-49704 is a high severity code injection vulnerability in Microsoft SharePoint Enterprise Server 2016 version 16.0.0. It allows an authorized attacker to execute arbitrary code remotely over the network without user interaction. This vulnerability has known exploits in the wild and has been used in ransomware campaigns.

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.