Exploit threats

454 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	–		RosarioSIS 6.7.2 - Cross-Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed RosarioSIS 6.7.2 - Cross-Site Scripting (XSS) Exploit #ios #web #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–		RosarioSIS 6.7.2 · Cross Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed RosarioSIS 6.7.2 - Cross Site Scripting (XSS) Exploit #ios #web #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–		phpMyAdmin 5.0.0 · SQL Injection Medium2025-12-03Exploit-DB RSS Feed phpMyAdmin 5.0.0 - SQL Injection Exploit #web #php #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–		OpenRepeater 2.1 · OS Command Injection Medium2025-12-03Exploit-DB RSS Feed OpenRepeater 2.1 - OS Command Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–		phpIPAM 1.4 - SQL-Injection Medium2025-12-03Exploit-DB RSS Feed phpIPAM 1.4 - SQL-Injection Exploit #web #php #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–		MobileDetect 2.8.31 - Cross-Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed MobileDetect 2.8.31 - Cross-Site Scripting (XSS) Exploit #web #mobile #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–		phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
Medium	–		phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
Medium	–		Piwigo 13.6.0 · SQL Injection Medium2025-12-02Exploit-DB RSS Feed Piwigo 13.6.0 - SQL Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-02
Medium	–		phpIPAM 1.5.1 · SQL Injection Medium2025-12-02Exploit-DB RSS Feed phpIPAM 1.5.1 - SQL Injection Exploit #web #php #exploit	Exploit-DB RSS Feed	2025-12-02
Medium	–		phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
Medium	–		YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF) Medium2025-12-02Exploit-DB RSS Feed YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF) Exploit #web #csrf #exploit	Exploit-DB RSS Feed	2025-12-02
High	–		Recent 7-Zip Vulnerability Exploited in Attacks High2025-11-20SecurityWeek A proof-of-concept (PoC) exploit targeting the high-severity remote code execution (RCE) bug exists. The post Recent 7-Zip Vulnerability Exploited in Attacks appeared first on SecurityWeek . Exploit #remote #rce	SecurityWeek	2025-11-20
Medium	–		Two-Year-Old Ray AI Framework Flaw Exploited in Ongoing Campaign Medium2025-11-19SecurityWeek Threat actors are abusing Ray’s lack of authentication to compromise exposed clusters and deploy LLM-generated payloads and cryptocurrency miners. The post Two-Year-Old Ray AI Framework Flaw Exploited in Ongoing Campaign appeared first on SecurityWeek . Exploit	SecurityWeek	2025-11-19
High	–		Microsoft Patches Actively Exploited Windows Kernel Zero-Day High2025-11-11SecurityWeek Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products. The post Microsoft Patches Actively Exploited Windows Kernel Zero-Day appeared first on SecurityWeek . Exploit #windows	SecurityWeek	2025-11-11
Critical	–		Critical Triofox Vulnerability Exploited in the Wild Critical2025-11-11SecurityWeek A threat actor has exploited the issue to create a new administrator account and then used the account to execute remote access tools. The post Critical Triofox Vulnerability Exploited in the Wild appeared first on SecurityWeek . Exploit #remote	SecurityWeek	2025-11-11
Critical	9.0	KEV	CISA Warns of CWP Vulnerability Exploited in the Wild Critical9.0KEV2025-11-05SecurityWeek A critical vulnerability in Control Web Panel (CWP), tracked as CVE-2025-48703, allows remote, unauthenticated command execution. The post CISA Warns of CWP Vulnerability Exploited in the Wild appeared first on SecurityWeek . KEVExploit #remote #web	SecurityWeek	2025-11-05
Critical	–		Flowise 3.0.4 · Remote Code Execution (RCE) Critical2025-10-31Exploit-DB RSS Feed Flowise 3.0.4 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-10-31
Medium	–		XWiki Vulnerability Exploited in Cryptocurrency Mining Operation Medium2025-10-29SecurityWeek Exploits have been available publicly for over half a year, but the bug was previously targeted only for reconnaissance. The post XWiki Vulnerability Exploited in Cryptocurrency Mining Operation appeared first on SecurityWeek . Exploit	SecurityWeek	2025-10-29
Critical	–		Year-Old WordPress Plugin Flaws Exploited to Hack Websites Critical2025-10-27SecurityWeek Roughly 9 million exploit attempts were observed this month as mass exploitation of the critical vulnerabilities recommenced. The post Year-Old WordPress Plugin Flaws Exploited to Hack Websites appeared first on SecurityWeek . Exploit #web	SecurityWeek	2025-10-27

Page 15 of 23