Citrix Bleed NetScaler Session Token Leak (CVE-2023-4966)
CVE-2023-4966 (nicknamed Citrix Bleed ) is a buffer overread in Citrix NetScaler ADC and Gateway. Attackers leak session…
Security
![[HIGH PRIORITY] Cisco IOS XE Web UI Privilege Escalation Implant (CVE-2023-20198)](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uv9VOSia86xzV7nWKdP8mzrjg1sCyO855aKbBe3RWC7Qd7cHXlg4HnioFfpzM5h52IZICNQV3mJGdluIQ3aHBLFRi--B7UNk0YRp7MvYCBeU6mSqd5_cWFM3fm2tpysAw-DBwgak1WaArJeYZq5MmkwPGMh3nNg9Cs_NnvKpWJ)
[HIGH PRIORITY] Cisco IOS XE Web UI Privilege Escalation Implant (CVE-2023-20198)
⚠ HIGH PRIORITY — CISA KEV. CVE-2023-20198 is an unauthenticated privilege escalation in Cisco IOS XE Web UI. Attackers …
![[HIGH PRIORITY] VMware ESXi Active Directory Authentication Bypass (CVE-2024-37085)](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_teS_B45Eht4sn5zgj1OPDBkAXNbztjugIpwnbHSu3Iu9m8laxXEBC9vO4A8M5wzXrP-3NJW1M6h59KEq5M5f0RExLb0w9pxbjzU-nVh9NIkeSPbFJUjAi6yL_hlNonFkWXhyLHxqcEZLcDAUubg_FZDBa0ngCQYVaI_Y0)
[HIGH PRIORITY] VMware ESXi Active Directory Authentication Bypass (CVE-2024-37085)
⚠ HIGH PRIORITY — CISA KEV. CVE-2024-37085 lets attackers with AD access bypass ESXi authentication when AD integration …
![[HIGH PRIORITY] Ivanti Connect Secure Command Injection (CVE-2024-21887)](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_u3FNM7r17VzF48dubAGt7ckS696D8nMT25hSPXT4NRcI4UF0hzD6NvakmftfuYVBDv18UgJHoZ5hONzPTl-zn-XW21O6XEAkebS68r4cob7A8v4z2sN3Kawe3GbQYHykFcNhyRSG2ENBmCvjOQdLIYzTgmY5VZUiarUNkymrkgrA)
[HIGH PRIORITY] Ivanti Connect Secure Command Injection (CVE-2024-21887)
⚠ HIGH PRIORITY — CISA KEV. CVE-2024-21887 is an authenticated command injection in Ivanti Connect Secure. Chained with …
![[HIGH PRIORITY] Palo Alto PAN-OS Privilege Escalation (CVE-2024-0012)](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_t73EfIV6d6fsj4rf7lD_USVzRLrGqT5ZwjGM8JOUIogniVVrY_M9BtJiwKWPxT_AKY6eDKFXKqNpbCbeIQn-VQe5QLRvu9WCuWjYAiqUDn8mY9dW8X5oj4rTcMiioStT7oOTFHy3nR_MX5fyWSEp-ZWfvSa5QZJdEZJmd-aYQ)
[HIGH PRIORITY] Palo Alto PAN-OS Privilege Escalation (CVE-2024-0012)
⚠ HIGH PRIORITY — CISA KEV. CVE-2024-0012 is a privilege escalation in Palo Alto PAN-OS management plane. Chained with C…
![[HIGH PRIORITY] ConnectWise ScreenConnect Authentication Bypass (CVE-2024-1709)](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_s42Yn_JRKjSL6XL-cS7gHmSNWUzy2-wEyBWwMM1jbDDwlHeDUiKYeKLHLXdVP0piRis_aGBheKW8aWU_XgAtA9mPikqHbbAEunVao3ZV2ZPSI-UHJ5cN-EZr35x6qSL4F5VTxbWRF89WUoBwBlaHF7BrvHuWTwaSNLSgwxcakdjJM)
[HIGH PRIORITY] ConnectWise ScreenConnect Authentication Bypass (CVE-2024-1709)
⚠ HIGH PRIORITY — CISA KEV. CVE-2024-1709 is an authentication bypass in ConnectWise ScreenConnect remote access softwar…
![[HIGH PRIORITY] Ivanti Connect Secure Stack Overflow RCE (CVE-2025-22457)](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uMJxTQIOi2TDQ6SOZ5x5xq3oYpfYJiP1Loc0TZTzzb4rbJiCSlo81rPt5_LyNc2H_qzBBvEj_d0UEeTvcR73B2lcxLSKSnFD6m2mbnAqz9pu9ZuSaQrQiBMO5bQc6jqFxgC760QuECIgN7QKGVohDJjEA7nteqfD9av2sDaLGoTQ)
[HIGH PRIORITY] Ivanti Connect Secure Stack Overflow RCE (CVE-2025-22457)
⚠ HIGH PRIORITY — CISA KEV. CVE-2025-22457 is a stack-based buffer overflow in Ivanti Connect Secure, Policy Secure, and…
Joomla ACL Bypass Leading to Full Site Takeover (CVE-2024-40748)
CVE-2024-40748 is an improper ACL check in Joomla CMS. Low-privilege users can escalate to super-user and upload PHP sh…
BeyondTrust Remote Support Unauthenticated RCE (CVE-2024-12356)
CVE-2024-12356 is an unauthenticated remote code execution flaw in BeyondTrust Remote Support (formerly Bomgar). Attack…
Ivanti Cloud Services Appliance Command Injection (CVE-2024-8190)
CVE-2024-8190 is an authenticated (and in some chains unauthenticated) command injection in Ivanti Cloud Services Appli…
VMware ESXi Authentication Bypass (CVE-2025-22226)
CVE-2025-22226 is an authentication bypass in VMware ESXi Host Client and API paths. Attackers with network access to E…
Cleo File Transfer Unauthenticated RCE (CVE-2024-29014)
CVE-2024-29014 is an unauthenticated remote code execution flaw in Cleo Harmony / LexiCom / VLTrader file-transfer appl…
Palo Alto PAN-OS Management Authentication Bypass (CVE-2024-9474)
CVE-2024-9474 is an authentication bypass in the Palo Alto Networks PAN-OS management web interface. When combined with…
Cisco ASA and FTD VPN Persistent RCE (CVE-2024-20359)
CVE-2024-20359 is a persistent remote code execution vulnerability in Cisco Adaptive Security Appliance (ASA) and Firep…
JetBrains TeamCity Authentication Bypass Remote Code Execution (CVE-2024-50603)
CVE-2024-50603 allows unauthenticated attackers to bypass authentication on JetBrains TeamCity CI/CD servers and create…
PostgreSQL libpq SQL Injection in Client Applications (CVE-2025-1094)
CVE-2025-1094 is a SQL injection flaw in PostgreSQL's libpq when applications build dynamic SQL from untrusted inpu…
Roundcube Webmail XSS Leading to Account Takeover (CVE-2024-37383)
CVE-2024-37383 is a stored cross-site scripting flaw in Roundcube webmail via crafted SVG attachments. When an admin or…
Exim libspf2 Stack Buffer Overflow on Linux Mail Servers (CVE-2025-24016)
CVE-2025-24016 is a stack buffer overflow in Exim's libspf2 integration when parsing SPF macros. Linux mail servers…
Ivanti Connect Secure Stack Buffer Overflow (CVE-2025-0282)
CVE-2025-0282 is a stack-based buffer overflow in Ivanti Connect Secure and Policy Secure gateways. Unauthenticated rem…
Fortinet FortiOS SSL VPN Out-of-Bounds Write (CVE-2024-21762)
CVE-2024-21762 is an out-of-bounds write in FortiOS SSL VPN. Remote attackers can execute code on the firewall without …