Exploit / PoCcritical
⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists
- CVEs
- CVE-2024-53104CVE-2024-53197CVE-2024-50302CVE-2025-27364CVE-2025-24752CVE-2025-27090CVE-2024-34331CVE-2025-0690CVE-2024-12084CVE-2024-12085CVE-2024-12086CVE-2024-12087CVE-2024-12088CVE-2025-0475CVE-2025-0555CVE-2025-20111CVE-2025-23363CVE-2025-0514CVE-2025-1564CVE-2025-1671CVE-2025-1638CVE-2024-12824CVE-2024-9193CVE-2024-8420CVE-2024-8425CVE-2025-25570CVE-2025-26943CVE-2025-1128
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-12084 | Heap-Based Buffer Overflow in rsync Daemon Enables Potential Remote Code Execution | 9.8 | 73% | PoC | |
CVE-2024-12085+3 related CVEs | rsync which could be triggered when rsync compares file checksums: This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and… | 7.5 group max | 9% | PoC | |
| CVE-2024-12824 | The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2 | 9.8 | 2% | ||
| CVE-2024-34331 | A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer… | 9.8 | <1% | ||
| CVE-2024-50302 | Kernel Memory Leak via Uninitialized HID Report Buffer in Linux Kernel | 5.5 | <1% | KEV | KEV |
| CVE-2024-53104 | Out-of-Bounds Write in Linux Kernel UVC Video Driver (CVE-2024-53104) | 7.8 | 3% | KEV | KEV |
| CVE-2024-53197 | Out-of-Bounds Write in Linux Kernel ALSA USB Audio Driver (CVE-2024-53197) | 7.8 | 4% | KEV | KEV |
| CVE-2024-8420 | The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7 | 9.8 | <1% | ||
| CVE-2024-8425 | The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the… | 9.8 | 4% | ||
| CVE-2024-9193 | The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including… | 9.8 | 3% | ||
CVE-2025-0555+1 related CVE | A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows… | 6.1 | <1% | ||
| CVE-2025-0514 | Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on… | 7.2 | <1% | ||
| CVE-2025-0690 | The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to… | 6.1 | <1% | ||
| CVE-2025-1128 | Unauthenticated Arbitrary File Upload in Everest Forms WordPress Plugin | 9.8 | 29% | ||
| CVE-2025-1564 | The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3 | 9.8 | <1% | ||
| CVE-2025-1638 | The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2 | 9.8 | <1% | ||
| CVE-2025-1671 | The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6 | 9.8 | <1% | ||
| CVE-2025-20111 | A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could… | 7.4 | <1% | ||
| CVE-2025-23363 | A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.3 (All versions < V14.3.0.14)… | 6.1 | <1% | ||
| CVE-2025-24752 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… | 6.1 | 1% | ||
| CVE-2025-25570 | Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials | 9.8 | 2% | ||
| CVE-2025-26943 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Blind SQL… | 9.3 | <1% | ||
| CVE-2025-27090 | Sliver: The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without… | 6.9 | <1% | PoC | |
| CVE-2025-27364 | Unauthenticated RCE in MITRE Caldera agent compilation service | 10.0 | 26% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | bybit-assessment.com | found that the threat actors registered a fake domain named bybit-assessment[.]com a few hours before the theft took place. Silent Push, whi |
From the original article
13 min read at thehackernews.com
This week, a 23-year-old Serbian activist found themselves at the crossroads of digital danger when a sneaky zero-day exploit turned their Android device into a target. Meanwhile, Microsoft pulled back the curtain on a scheme where cybercriminals used AI tools for harmful pranks, and a massive trove of live secrets was discovered, reminding us that even the tools we rely on can hide risky surprises.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.