Exploit threats

454 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	–		Chained Quiz 1.3.5 · Unauthenticated Insecure Direct Object Reference via Cookie Medium2025-12-25Exploit-DB RSS Feed Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-25
Medium	–		WordPress Quiz Maker 6.7.0.56 · SQL Injection Medium2025-12-25Exploit-DB RSS Feed WordPress Quiz Maker 6.7.0.56 - SQL Injection Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2025-12-25
Critical	–		WatchGuard Patches Firebox Zero-Day Exploited in the Wild Critical2025-12-22SecurityWeek The critical-severity bug in the Fireware OS’s iked process leads to unauthenticated remote code execution. The post WatchGuard Patches Firebox Zero-Day Exploited in the Wild appeared first on SecurityWeek . Exploit #remote	SecurityWeek	2025-12-22
Critical	–		In-the-Wild Exploitation of Fresh Fortinet Flaws Begins Critical2025-12-16SecurityWeek Threat actors are exploiting the two critical authentication bypass vulnerabilities against FortiGate appliances. The post In-the-Wild Exploitation of Fresh Fortinet Flaws Begins appeared first on SecurityWeek . Exploit	SecurityWeek	2025-12-16
Medium	–		esm-dev 136 - Path Traversal Medium2025-12-16Exploit-DB RSS Feed esm-dev 136 - Path Traversal Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-16
Medium	–		Summar Employee Portal 3.98.0 · Authenticated SQL Injection Medium2025-12-16Exploit-DB RSS Feed Summar Employee Portal 3.98.0 - Authenticated SQL Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-16
Medium	–		Gladinet CentreStack Flaw Exploited to Hack Organizations Medium2025-12-12SecurityWeek Threat actors have hacked at least nine organizations by exploiting the recently patched Gladinet CentreStack flaw. The post Gladinet CentreStack Flaw Exploited to Hack Organizations appeared first on SecurityWeek . Exploit	SecurityWeek	2025-12-12
Medium	–		Recent GeoServer Vulnerability Exploited in Attacks Medium2025-12-12SecurityWeek Because user input is not sufficiently sanitized, attackers could exploit the flaw to define external entities within an XML request. The post Recent GeoServer Vulnerability Exploited in Attacks appeared first on SecurityWeek . Exploit	SecurityWeek	2025-12-12
High	–		Google Patches Mysterious Chrome Zero-Day Exploited in the Wild High2025-12-11SecurityWeek The Chrome zero-day does not have a CVE and it's unclear who reported it and which browser component it affects. The post Google Patches Mysterious Chrome Zero-Day Exploited in the Wild appeared first on SecurityWeek . Exploit	SecurityWeek	2025-12-11
Medium	–		Pluck 4.7.7-dev2 - PHP Code Execution Medium2025-12-08Exploit-DB RSS Feed Pluck 4.7.7-dev2 - PHP Code Execution Exploit #web #php #exploit	Exploit-DB RSS Feed	2025-12-08
Critical	–		Cloudflare Outage Caused by React2Shell Mitigations Critical2025-12-05SecurityWeek The critical React vulnerability has been exploited in the wild by Chinese and other threat actors. The post Cloudflare Outage Caused by React2Shell Mitigations appeared first on SecurityWeek . Exploit	SecurityWeek	2025-12-05
Critical	10.0	KEV	React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability Critical10.0KEV2025-12-04SecurityWeek A researcher has pointed out that only instances using a newer feature are impacted by CVE-2025-55182. The post React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability appeared first on SecurityWeek . KEVExploit	SecurityWeek	2025-12-04
Critical	–		Critical King Addons Vulnerability Exploited to Hack WordPress Sites Critical2025-12-03SecurityWeek A critical-severity vulnerability in the King Addons for Elementor plugin for WordPress has been exploited to take over websites. The post Critical King Addons Vulnerability Exploited to Hack WordPress Sites appeared first on SecurityWeek . Exploit #web	SecurityWeek	2025-12-03
Medium	–		Django 5.1.13 · SQL Injection Medium2025-12-03Exploit-DB RSS Feed Django 5.1.13 - SQL Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–		MaNGOSWebV4 4.0.6 · Reflected XSS Medium2025-12-03Exploit-DB RSS Feed MaNGOSWebV4 4.0.6 - Reflected XSS Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–		phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF) Medium2025-12-03Exploit-DB RSS Feed phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF) Exploit #web #csrf #php	Exploit-DB RSS Feed	2025-12-03
Medium	–		phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF) Medium2025-12-03Exploit-DB RSS Feed phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF) Exploit #web #csrf #php	Exploit-DB RSS Feed	2025-12-03
Medium	–		phpMyFaq 2.9.8 · Cross Site Request Forgery (CSRF) Medium2025-12-03Exploit-DB RSS Feed phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF) Exploit #web #csrf #php	Exploit-DB RSS Feed	2025-12-03
Medium	–		openSIS Community Edition 8.0 · SQL Injection Medium2025-12-03Exploit-DB RSS Feed openSIS Community Edition 8.0 - SQL Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–		PluckCMS 4.7.10 · Unrestricted File Upload Medium2025-12-03Exploit-DB RSS Feed PluckCMS 4.7.10 - Unrestricted File Upload Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-03

Page 14 of 23