Updated 8 minutes ago
FeedsCVEs trending on social media within the last 24 hours
Current score
Tepid
1
CVE-2025-6965 Published Jul 15, 2025Hype score
58
high 7.2
CVE-2025-6965 is a vulnerability that exists in SQLite versions prior to 3.50.2. The vulnerability occurs because the number of aggregate terms in a query can exceed the available number of columns. This can lead to memory corruption. To resolve this vulnerability, it is recommended to upgrade to SQLite version 3.50.2 or later. This update mitigates the risk of memory corruption and potential instability within applications using the affected SQLite versions.
2
CVE-2025-49706 Published Jul 8, 2025Hype score
47
medium 6.3
CVE-2025-49706 is a vulnerability affecting Microsoft Office SharePoint. It stems from improper authentication within the software. This vulnerability could allow an authorized attacker to perform spoofing attacks over a network, potentially compromising the integrity of SharePoint services. Microsoft has released a security update (KB5002751) to address this vulnerability.
3
CVE-2025-3248 Published Apr 7, 2025Hype score
42
critical 9.8
Exploit known
CVE-2025-3248 is a code injection vulnerability that affects Langflow versions prior to 1.3.0. It exists in the `/api/v1/validate/code` endpoint, where a remote, unauthenticated attacker can send crafted HTTP requests to execute arbitrary code on the server. This vulnerability allows attackers to gain control of vulnerable Langflow servers without needing authentication. To remediate this vulnerability, users are advised to upgrade to Langflow version 1.3.0 or restrict network access to the application.
Sourced from CISA's Known Exploited Vulnerability (KEV) catalog.
Hype score
27
critical 9.3
Exploit known
CVE-2025-5777 is a vulnerability affecting NetScaler ADC and NetScaler Gateway. It is caused by insufficient input validation, which leads to a memory overread. The vulnerability can be exploited on devices configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or an AAA virtual server. An unauthorized attacker could potentially grab valid session tokens from the memory of internet-facing NetScaler devices by sending a malformed request. Successful exploitation could allow the attacker to gain access to the appliances.
critical 10.0
Exploit known
CVE-2025-47812 is a remote code execution vulnerability in Wing FTP Server. The vulnerability arises because the application doesn't properly handle NULL bytes in usernames. By appending a NULL byte to the username, an attacker can bypass authentication and inject Lua code into session files. Specifically, when a user authenticates with a NULL-byte injected username, the server creates a new session ID and stores the NULL byte in the session variable. This allows an attacker to inject arbitrary Lua code, leading to remote code execution with root privileges on Linux systems and SYSTEM rights on Windows systems because the wftpserver runs with elevated privileges by default.
Hype score
26
critical 9.8
Exploit known
CVE-2025-25257 is a critical SQL injection vulnerability found in Fortinet's FortiWeb web application firewall. This vulnerability, classified as CWE-89, stems from improper neutralization of special elements used in SQL commands. The vulnerability allows unauthenticated attackers to execute unauthorized SQL code or commands by sending crafted HTTP or HTTPS requests to the FortiWeb management interface. Successful exploitation could lead to attackers accessing sensitive data, altering database contents, or compromising backend systems.
Our Security Team's most recent CVE analysis
critical 9.3
Updated Jul 2, 2025
This is a serious local privilege escalation vulnerability in the sudo tool, which is present on most Unix systems. You should update this as soon as possible if your version is less than 1.9.14.
Exploiting this vulnerability requires an attacker to have access to the machine already - so it's most serious in environments where lower-privileged users routinely have access to systems. However, all vulnerable systems should be patched.
high 7.2
Exploit known
Updated May 19, 2025
This CVE references a Java Expression Language injection vulnerability in Ivanti EPMM, which allows a user with access to a particular API to execute arbitrary code.
In conjunction with CVE-2025-4427 - an auth bypass vulnerability which gives access to the API in question - this can be used by an unauthenticated attacker.
More information on exact vulnerable versions can be found here - you should patch immediately if vulnerable. Note that in the recommended deployment of EPMM, where the API is not accessible to the internet, the impact is reduced.
high 8.2
Updated Apr 28, 2025
If caching is in use on this application, it is likely this can be used to poison the cache, causing the modified data to be shown to other users.
There is also potential to then use this for cross-site scripting, although, this would depend on how the data is processed by the client, and will not be the case for all applications.
In order for this application to be vulnerable, React Router must be used in Framework mode.
