Vulnerabilities
A public PoC existed when Adobe patched the Experience Manager Forms (AEM Forms) bug in early August.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Malware & Threats
Threat actors are exploiting CVE-2025-20352, a recent Cisco zero-day, to deploy a rootkit on older networking devices.
Vulnerabilities
Hundreds of internet-exposed Oracle E-Business Suite instances may still be vulnerable to attacks.
Vulnerabilities
The Medusa ransomware operators exploited the GoAnywhere MFT vulnerability one week before patches were released.
Data Breaches
Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882.
Vulnerabilities
Patched in mid-May, the security defect allows remote unauthenticated attackers to execute arbitrary commands with root privileges.
Vulnerabilities
Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM.
Vulnerabilities
The vulnerability could allow local, low-privileged attackers to execute commands with root privileges, leading to full system compromise.
Vulnerabilities
Eight days before patches, a threat actor exploited CVE-2025-10035 as a zero-day to create a backdoor admin account.
Vulnerabilities
Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot.
Network Security
The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user.
Vulnerabilities
The hackers remained undetected for three weeks, deploying China Chopper, remote access scripts, and reconnaissance tools.
Email Security
Tracked as CVE-2025-59689, the command injection bug could be triggered via malicious emails containing crafted compressed attachments.
Vulnerabilities
CVE-2025-26399 is a patch bypass of CVE-2024-28988, which is a patch bypass of the exploited CVE-2024-28986.
Malware & Threats
Hackers chained two Ivanti EPMM vulnerabilities to collect system information, dump credentials, and execute malware.
Vulnerabilities
An exploited type confusion in the V8 JavaScript engine tracked as CVE-2025-10585 was found by Google Threat Analysis Group this week.
Mobile & Wireless
Reported by Meta and WhatsApp, the vulnerability leads to remote code execution and was likely exploited by a spyware vendor.
ICS/OT
A deserialization of untrusted data in the MOM software allows attackers to achieve remote code execution.
Ransomware
The Akira ransomware group is likely exploiting a combination of three attack vectors to gain unauthorized access to vulnerable appliances.
Vulnerabilities
A critical SAP S/4HANA code injection flaw tracked as CVE-2025-42957 and allowing full system takeover has been exploited in the wild.
Vulnerabilities
The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware.
Vulnerabilities
Artificial Intelligence
Malware & Threats
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.
Cloud Security
