Craft CMS

The Weekly Breach: 7 Maximum CVSS Flaws and the DarkSword Exploit Unveiled

• Weekly Recap

The Weekly Breach: 7 Maximum CVSS Flaws and the DarkSword Exploit Unveiled

Do Son March 23, 2026 0

The past seven days have been an exceptionally busy period for cybersecurity defenders. Between March 16 and...

Read More Read more about The Weekly Breach: 7 Maximum CVSS Flaws and the DarkSword Exploit Unveiled

Active Exploits: CISA Adds Critical Craft CMS and Apple ‘DarkSword’ Flaws to KEV

• Vulnerability Report

Active Exploits: CISA Adds Critical Craft CMS and Apple ‘DarkSword’ Flaws to KEV

Do Son March 21, 2026 0

The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) Catalog, adding five...

Read More Read more about Active Exploits: CISA Adds Critical Craft CMS and Apple ‘DarkSword’ Flaws to KEV

Critical Craft CMS Flaw Grants Instant Admin Access

• Vulnerability

Critical Craft CMS Flaw Grants Instant Admin Access

Do Son March 18, 2026 0

In the world of web development, the “Live Preview” button is a staple for content editors—a harmless...

Read More Read more about Critical Craft CMS Flaw Grants Instant Admin Access

CISA Adds 5 Actively Exploited Vulnerabilities to KEV Catalog: ASUS Routers, Craft CMS, and ConnectWise Targeted

• Vulnerability Report

CISA Adds 5 Actively Exploited Vulnerabilities to KEV Catalog: ASUS Routers, Craft CMS, and ConnectWise Targeted

Do Son June 3, 2025 0

The Cybersecurity and Infrastructure Security Agency (CISA) has added five new vulnerabilities to its Known Exploited Vulnerabilities...

Read More Read more about CISA Adds 5 Actively Exploited Vulnerabilities to KEV Catalog: ASUS Routers, Craft CMS, and ConnectWise Targeted

Mimo Returns: CVE-2025-32432 Exploited in Cryptomining and Proxyware Campaigns

• Cybercriminals
• Malware

Mimo Returns: CVE-2025-32432 Exploited in Cryptomining and Proxyware Campaigns

Do Son May 28, 2025 0

Sekoia’s latest threat intelligence report reveals a targeted exploitation campaign of CVE-2025-32432, a critical unauthenticated remote code...

Read More Read more about Mimo Returns: CVE-2025-32432 Exploited in Cryptomining and Proxyware Campaigns

Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

• Vulnerability

Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

Do Son April 28, 2025 0

Security researcher Chocapikk has published a Metasploit module for a critical zero-day vulnerability impacting Craft CMS, tracked...

Read More Read more about Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

CVE-2025-32432 (CVSS 10): Craft CMS Hit by Critical RCE Flaw Exploited in the Wild

• Vulnerability

CVE-2025-32432 (CVSS 10): Craft CMS Hit by Critical RCE Flaw Exploited in the Wild

Do Son April 25, 2025 0

Craft CMS, a widely used content management system for developers and agencies, has disclosed a critical vulnerability...

Read More Read more about CVE-2025-32432 (CVSS 10): Craft CMS Hit by Critical RCE Flaw Exploited in the Wild

CVE-2024-56145 (CVSS 9.3): Remote Code Execution Vulnerability in Craft CMS, PoC Published

• Vulnerability

CVE-2024-56145 (CVSS 9.3): Remote Code Execution Vulnerability in Craft CMS, PoC Published

Do Son December 22, 2024 0

Security researchers at Assetnote have disclosed a critical vulnerability (CVE-2024-56145) in Craft CMS, a widely-used PHP-based content...

Read More Read more about CVE-2024-56145 (CVSS 9.3): Remote Code Execution Vulnerability in Craft CMS, PoC Published

Craft CMS Fixes RCE (CVE-2023-41892) Flaw Rated 10 Out of 10 on Severity Scale

• Vulnerability

Craft CMS Fixes RCE (CVE-2023-41892) Flaw Rated 10 Out of 10 on Severity Scale

Do Son September 13, 2023 0

Craft CMS has rapidly become the tool of choice for many developers and businesses, known for its...

Read More Read more about Craft CMS Fixes RCE (CVE-2023-41892) Flaw Rated 10 Out of 10 on Severity Scale