Threat database

305 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Not rated	–		osint · ThreatFox IOCs for 2025-09-21 2025-09-21ThreatFox MISP Feed ThreatFox IOCs for 2025-09-21 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2025-09-21
Not rated	–		osint · ThreatFox IOCs for 2025-09-20 2025-09-20ThreatFox MISP Feed ThreatFox IOCs for 2025-09-20 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2025-09-20
Not rated	–		osint · ThreatFox IOCs for 2025-09-19 2025-09-19ThreatFox MISP Feed ThreatFox IOCs for 2025-09-19 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2025-09-19
Not rated	–		osint · ThreatFox IOCs for 2025-09-18 2025-09-18ThreatFox MISP Feed ThreatFox IOCs for 2025-09-18 Indicator type #type:osint #tlp:white Germany+4	ThreatFox MISP Feed	2025-09-18
Not rated	–		osint · ThreatFox IOCs for 2025-09-17 2025-09-17ThreatFox MISP Feed ThreatFox IOCs for 2025-09-17 Indicator type #type:osint #tlp:white Germany+5	ThreatFox MISP Feed	2025-09-17
Not rated	–		osint · ThreatFox IOCs for 2025-09-15 2025-09-15ThreatFox MISP Feed ThreatFox IOCs for 2025-09-15 Indicator type #type:osint #tlp:white Germany+5	ThreatFox MISP Feed	2025-09-15
Not rated	–		osint · ThreatFox IOCs for 2025-09-14 2025-09-14ThreatFox MISP Feed ThreatFox IOCs for 2025-09-14 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2025-09-14
Not rated	–		osint · ThreatFox IOCs for 2025-09-13 2025-09-13ThreatFox MISP Feed ThreatFox IOCs for 2025-09-13 Indicator type #type:osint #tlp:white Germany+5	ThreatFox MISP Feed	2025-09-13
Medium	6.9	EPSS 0.4%	CVE-2025-10267NUP Portal · Missing Authentication for Critical Function Medium6.9EPSS 0.4%2025-09-12CVE Database V5CVE-2025-10267 NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side. EPSS 0.4%Vulnerability NewType Infortech #cwe-306 Germany+7	CVE Database V5	2025-09-12
Critical	9.3	EPSS 0.6%	CVE-2025-10266NUP Portal · SQL Injection Critical9.3EPSS 0.6%2025-09-12CVE Database V5CVE-2025-10266 NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. EPSS 0.6%Vulnerability NewType Infortech #cwe-89 Germany+9	CVE Database V5	2025-09-12
Not rated	–		osint · ThreatFox IOCs for 2025-09-12 2025-09-12ThreatFox MISP Feed ThreatFox IOCs for 2025-09-12 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2025-09-12
Not rated	–		osint · ThreatFox IOCs for 2025-09-11 2025-09-11ThreatFox MISP Feed ThreatFox IOCs for 2025-09-11 Indicator type #type:osint #tlp:white Germany+4	ThreatFox MISP Feed	2025-09-11
Not rated	–		osint · ThreatFox IOCs for 2025-09-10 2025-09-10ThreatFox MISP Feed ThreatFox IOCs for 2025-09-10 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2025-09-10
Not rated	–		osint · ThreatFox IOCs for 2025-09-09 2025-09-09ThreatFox MISP Feed ThreatFox IOCs for 2025-09-09 Indicator type #type:osint #tlp:white Germany+4	ThreatFox MISP Feed	2025-09-09
Not rated	–		osint · ThreatFox IOCs for 2025-09-08 2025-09-08ThreatFox MISP Feed ThreatFox IOCs for 2025-09-08 Indicator type #type:osint #tlp:white Germany+5	ThreatFox MISP Feed	2025-09-08
Not rated	–		osint · ThreatFox IOCs for 2025-09-07 2025-09-07ThreatFox MISP Feed ThreatFox IOCs for 2025-09-07 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2025-09-07
Not rated	–		osint · ThreatFox IOCs for 2025-09-06 2025-09-06ThreatFox MISP Feed ThreatFox IOCs for 2025-09-06 Indicator type #type:osint #tlp:white Germany+4	ThreatFox MISP Feed	2025-09-06
Medium	5.3	EPSS 0.4%	CVE-2025-58369fs2 · Uncontrolled Resource Consumption Medium5.3EPSS 0.4%2025-09-05CVE Database V5CVE-2025-58369 fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS session, if one side of the connection shuts down `write` while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. The CPU is consumed until the overall connection is closed, potentially shutting down a fs2-io powered server. This issue is fixed in versions 2.5.13, 3.12.1, and 3.13.0-M7. EPSS 0.4%Vulnerability typelevel #cwe-400 Germany+6	CVE Database V5	2025-09-05
Not rated	–		osint · ThreatFox IOCs for 2025-09-05 2025-09-05ThreatFox MISP Feed ThreatFox IOCs for 2025-09-05 Indicator type #type:osint #tlp:white Germany+6	ThreatFox MISP Feed	2025-09-05
Not rated	–		osint · OSINT - Widespread Data Theft Targets Salesforce Instances via Salesloft Drift 2025-09-05CIRCL OSINT Feed OSINT - Widespread Data Theft Targets Salesforce Instances via Salesloft Drift Unknown type #misp-galaxy:producer="google cloud blog"#misp-galaxy:mitre-attack-pattern="cloud instance metadata api - t1552.005"United Kingdom+5	CIRCL OSINT Feed	2025-09-05

Showing 101–120 of 305 results