CVE-2024-9379

Chinese Hackers Suspected in Ivanti CSA Attacks: Webshells and Lateral Movement Detected Sources and related content

Quest KACE Vulnerability CVE-2025-32975 FortiGate SSO Bypass, Active Exploitation GoAnywhere RCE, Storm-1175 Cisco VPN RCE, ASA Zero-Day TinyColor Supply Chain Attack SK Telecom, data breach Erlang/OTP RCE, OT Network Security Ivanti CSA Attacks WordPress RCE, Theme Vulnerability

Chinese Hackers Suspected in Ivanti CSA Attacks: Webshells and Lateral Movement Detected Sources and related content

Do Son February 12, 2025

Discover the security concerns surrounding Ivanti CSA 4.6. Find out how to safeguard your business from unauthenticated remote code execution and SQL injection attacks.

CISA and FBI Warn of Exploited Ivanti CSA Vulnerabilities in Joint Security Advisory OCRFix Botnet EtherHiding CrowdStrike supply chain attack Ivanti CSA Vulnerabilities

OCRFix Botnet EtherHiding CrowdStrike supply chain attack Ivanti CSA Vulnerabilities

CISA and FBI Warn of Exploited Ivanti CSA Vulnerabilities in Joint Security Advisory

Do Son January 22, 2025

Stay protected from Ivanti CSA vulnerabilities. Learn about the risks and exploits associated with CVE-2024-8963, CVE-2024-9379, CVE-2024-8190, and CVE-2024-9380.

CISA Adds Three Actively Exploited Security Vulnerabilities to KEV Catalog, Urges Urgent Patching State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities

State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities

CISA Adds Three Actively Exploited Security Vulnerabilities to KEV Catalog, Urges Urgent Patching

Do Son October 9, 2024

Get the latest updates on exploited security vulnerabilities. Find out how to protect your systems from the newly added threats.

Ivanti Patches CSA Appliance Against Vulnerabilities, Including Actively Exploited Flaws Ivanti EPMM Zero-Day CVE-2026-6973 Exploitation CVE-2024-9379, CVE-2024-9380, CVE-2024-9381

Ivanti EPMM Zero-Day CVE-2026-6973 Exploitation CVE-2024-9379, CVE-2024-9380, CVE-2024-9381

Ivanti Patches CSA Appliance Against Vulnerabilities, Including Actively Exploited Flaws

Do Son October 8, 2024

This exploitation involves chaining CVE-2024-9379, CVE-2024-9380, or CVE-2024-9381 with a previously addressed vulnerability

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-120422CVSS 8.9
Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
Admin intel📅 Updated: Nov 5, 2026
CVE-2026-102895CVSS 9.8
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
Watchtower Verified📅 Updated: Nov 5, 2026
CVE-2026-115732CVSS 9.0
Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
Admin intel📅 Updated: Nov 4, 2026
CVE-2026-98432CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
Admin intel📅 Updated: Nov 4, 2026
CVE-2026-107441CVSS 8.8
An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
Admin intel📅 Updated: Nov 4, 2026
CVE-2019-25779CVSS 7.5
The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2023-54413CVSS 6.1
The WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the wp_lang parameter in versions up...
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2024-27834CVSS 5.5
The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS...
CISA KEV📅 Added to KEV: Nov 4, 2026

CVE-2026-83542CVSS 9.8
Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows...
📅 Updated: Nov 6, 2026
CVE-2026-82907CVSS 9.8
Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote...
📅 Updated: Nov 6, 2026
CVE-2026-102895CVSS 9.8
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
📅 Updated: Nov 6, 2026
CVE-2026-102894CVSS 9.1
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until...
📅 Updated: Nov 6, 2026
CVE-2026-86345CVSS 9.0
A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client...
📅 Updated: Nov 6, 2026
CVE-2026-48752CVSS 9.9
Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or...
📅 Updated: Nov 6, 2026
CVE-2026-48751CVSS 9.9
Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block`...
📅 Updated: Nov 6, 2026
CVE-2026-48750CVSS 9.9
Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the...
📅 Updated: Nov 6, 2026