| –Not rated | – | Reddit InfoSec News Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations | Reddit InfoSec News | | |
| Medium | – | MediumExploit-DB RSS Feed WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing | Exploit-DB RSS Feed | | |
| Medium | – | MediumExploit-DB RSS Feed Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass | Exploit-DB RSS Feed | | |
| High | – | HighExploit-DB RSS Feed Automic Agent 24.3.0 HF4 - Privilege Escalation | Exploit-DB RSS Feed | | |
| Medium | – | MediumExploit-DB RSS Feed Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure | Exploit-DB RSS Feed | | |
| Medium | – | MediumExploit-DB RSS Feed SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal | Exploit-DB RSS Feed | | |
| Medium | – | MediumExploit-DB RSS Feed Campcodes Online Hospital Management System 1.0 - SQL Injection | Exploit-DB RSS Feed | | |
| –Not rated | – | Reddit NetSec GitHub MCP Exploited: Accessing private repositories via MCP | Reddit NetSec | | |
| Medium | – | MediumReddit InfoSec News Chinese Hackers Exploit Cityworks 0-Day to Hit US Local Govt Agencies | Reddit InfoSec News | | |
| Medium | – | MediumExploit-DB RSS Feed Windows 2024.15 - Unauthenticated Desktop Screenshot Capture | Exploit-DB RSS Feed | | |
| High | – | HighExploit-DB RSS Feed Microsoft Windows Server 2016 - Win32k Elevation of Privilege | Exploit-DB RSS Feed | | |
| Medium | – | MediumExploit-DB RSS Feed WordPress User Registration & Membership Plugin 4.1.2 - Authentication Bypass | Exploit-DB RSS Feed | | |
| Medium | – | MediumExploit-DB RSS Feed Grandstream GSD3710 1.0.11.13 - Stack Buffer Overflow | Exploit-DB RSS Feed | | |
| Medium | – | MediumExploit-DB RSS Feed Java-springboot-codebase 1.1 - Arbitrary File Read | Exploit-DB RSS Feed | | |
| High | – | HighExploit-DB RSS Feed ABB Cylon Aspect 3.08.03 - Guest2Root Privilege Escalation | Exploit-DB RSS Feed | | |
| Medium | – | MediumExploit-DB RSS Feed ABB Cylon Aspect Studio 3.08.03 - Binary Planting | Exploit-DB RSS Feed | | |
| –Not rated | – | Reddit InfoSec News XSS Flaw Actively Exploited in Zimbra Collaboration Suite, Over 129,000 Servers at Risk | Reddit InfoSec News | | |
| –Not rated | – | Reddit InfoSec News New BadSuccessor Attack Exploits Windows Server 2025 Flaw for Full Active Directory Takeover | Reddit InfoSec News | | |
| Medium | – | MediumReddit NetSec How to Enumerate and Exploit CefSharp Thick Clients Using CefEnum | Reddit NetSec | | |
| Critical | – | CriticalExploit-DB RSS Feed Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE) | Exploit-DB RSS Feed | | |
