PoC

7-Zip vulnerability is being actively exploited, NHS England warns (CVE-2025-11001)

November 19, 2025

NHS England Digital, the technology arm of the publicly-funded health service for England, has issued a warning about a 7-Zip vulnerability (CVE-2025-11001) being exploited by …

A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warn

November 14, 2025

A suspected (but currently unidentified) zero-day vulnerability in Fortinet FortiWeb is being exploited by unauthenticated attackers to create new admin accounts on …

PoC code drops for remotely exploitable BIND 9 DNS flaw (CVE-2025-40778)

October 28, 2025

A high-severity vulnerability (CVE-2025-40778) affecting BIND 9 DNS resolvers could be leveraged by remote, unauthenticated attackers to manipulate DNS entries via cache …

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073)

October 21, 2025

CVE-2025-33073, a Windows SMB Client vulnerability that Microsoft fixed in June 2025, is being exploited by attackers. The confirmation comes from the Cybersecurity and …

Attackers are exploiting Gladinet CentreStack, Triofox vulnerability with no patch (CVE-2025-11371)

October 10, 2025

CVE-2025-11371, an unauthenticated Local File Inclusion vulnerability in Gladinet CentreStack and Triofox file-sharing and remote access platforms, is being exploited by …

Git vulnerability leading to RCE is being exploited by attackers (CVE-2025-48384)

August 26, 2025

CVE-2025-48384, a recently patched vulnerability in the popular distributed revision control system Git, is being exploited by attackers. Details about the attacks are not …

Adobe patches critical Adobe Experience Manager Forms vulnerabilities with public PoC

August 6, 2025

Adobe has released an emergency security update for Adobe Experience Manager Forms on Java Enterprise Edition (JEE), which fix two critical vulnerabilities (CVE-2025-54253, …

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257)

July 14, 2025

With two proof-of-concept (PoC) exploits made public late last week, CVE-2025-25257 – a critical SQL command injection vulnerability in Fortinet’s FortiWeb web …

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812)

July 11, 2025

Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server, security researchers have warned. Wing FTP …

Check for CitrixBleed 2 exploitation even if you patched quickly! (CVE-2025-5777)

July 8, 2025

With PoC exploits for CVE-2025-5777 (aka CitrixBleed 2) now public and reports of active exploitation of the flaw since mid-June, you should check whether your Citrix …

Flaw in Notepad++ installer could grant attackers SYSTEM access (CVE-2025-49144)

June 25, 2025

A high-severity vulnerability (CVE-2025-49144) in the Notepad++ installer could be exploited by unprivileged users to gain SYSTEM-level privileges through insecure executable …

Unpatched Wazuh servers targeted by Mirai botnets (CVE-2025-24016)

June 10, 2025

Two Mirai botnets are exploiting a critical remote code execution vulnerability (CVE-2025-24016) in the open-source Wazuh XDR/SIEM platform, Akamai researchers have warned. …

PoC