Aggregator

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

Currently trending CVE - Hype Score: 9 - Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with ...

Currently trending CVE - Hype Score: 7 - Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Currently trending CVE - Hype Score: 15 - SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware

Currently trending CVE - Hype Score: 15 - When the device is shared, the homepage module are before 2.19.0  in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive information.

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can exploit them. Now Google warns the breach goes far beyond access to Salesforce data, noting the hackers responsible also stole valid authentication tokens for hundreds of online services that customers can integrate with Salesloft, including Slack, Google Workspace, Amazon S3, Microsoft Azure, and OpenAI.

A vulnerability labeled as critical has been found in IBM Sterling Connect:Direct Web Services 6.1.0/6.2.0/6.3.0. This impacts an unknown function. Executing manipulation can lead to incorrect authorization. The identification of this vulnerability is CVE-2024-49808. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability classified as problematic has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. This vulnerability is referenced as CVE-2025-9755. Remote exploitation of the attack is possible. Furthermore, an exploit is available. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.

A vulnerability classified as problematic was found in Synology RADIUS Server. This vulnerability affects unknown code. Executing manipulation can lead to cross site scripting. The identification of this vulnerability is CVE-2024-13987. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Sunnet eHRD CTMS. It has been classified as problematic. The affected element is an unknown function. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2025-9567. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in Sunnet eHRD CTMS. It has been declared as problematic. The impacted element is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2025-9568. The attack can be executed remotely. There is not any exploit available.

A vulnerability categorized as problematic has been discovered in Sunnet eHRD CTMS. This impacts an unknown function. Executing manipulation can lead to cross site scripting. This vulnerability appears as CVE-2025-9569. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as problematic was found in Mitsubishi Electric MELSEC iQ-F FX5U-32MT-ES, MELSEC iQ-F FX5U-32MT-DS, MELSEC iQ-F FX5U-32MT-ESS, MELSEC iQ-F FX5U-32MT-DSS, MELSEC iQ-F FX5U-64MT-ES, MELSEC iQ-F FX5U-64MT-DS, MELSEC iQ-F FX5U-64MT-ESS, MELSEC iQ-F FX5U-64MT-DSS, MELSEC iQ-F FX5U-80MT-ES, MELSEC iQ-F FX5U-80MT-DS, MELSEC iQ-F FX5U-80MT-ESS, MELSEC iQ-F FX5U-80MT-DSS, MELSEC iQ-F FX5U-32MR-ES, MELSEC iQ-F FX5U-32MR-DS, MELSEC iQ-F FX5U-64MR-ES, MELSEC iQ-F FX5U-64MR-DS, MELSEC iQ-F FX5U-80MR-ES, MELSEC iQ-F FX5U-80MR-DS, MELSEC iQ-F FX5UC-32MT-D, MELSEC iQ-F FX5UC-32MT-DSS, MELSEC iQ-F FX5UC-64MT-D, MELSEC iQ-F FX5UC-64MT-DSS, MELSEC iQ-F FX5UC-96MT-D, MELSEC iQ-F FX5UC-96MT-DSS, MELSEC iQ-F FX5UC-32MT-DS-TS, MELSEC iQ-F FX5UC-32MT-DSS-TS, MELSEC iQ-F FX5UC-32MR-DS-TS, MELSEC iQ-F FX5UJ-24MT-ES, MELSEC iQ-F FX5UJ-24MT-DS, MELSEC iQ-F FX5UJ-24MT-ESS, MELSEC iQ-F FX5UJ-24MT-DSS, MELSEC iQ-F FX5UJ-40MT-ES, MELSEC iQ-F FX5UJ-40MT-DS, MELSEC iQ-F FX5UJ-40MT-ESS, MELSEC iQ-F FX5UJ-40MT-DSS, MELSEC iQ-F FX5UJ-60MT-ES, MELSEC iQ-F FX5UJ-60MT-DS, MELSEC iQ-F FX5UJ-60MT-ESS, MELSEC iQ-F FX5UJ-60MT-DSS, MELSEC iQ-F FX5UJ-24MR-ES, MELSEC iQ-F FX5UJ-24MR-DS, MELSEC iQ-F FX5UJ-40MR-ES, MELSEC iQ-F FX5UJ-40MR-DS, MELSEC iQ-F FX5UJ-60MR-ES, MELSEC iQ-F FX5UJ-60MR-DS, MELSEC iQ-F FX5UJ-24MT-ES-A, MELSEC iQ-F FX5UJ-24MR-ES-A, MELSEC iQ-F FX5UJ-40MT-ES-A, MELSEC iQ-F FX5UJ-40MR-ES-A, MELSEC iQ-F FX5UJ-60MT-ES-A, MELSEC iQ-F FX5UJ-60MR-ES-A, MELSEC iQ-F FX5S-30MT-ES, MELSEC iQ-F FX5S-30MT-DS, MELSEC iQ-F FX5S-30MT-ESS, MELSEC iQ-F FX5S-30MT-DSS, MELSEC iQ-F FX5S-40MT-ES, MELSEC iQ-F FX5S-40MT-DS, MELSEC iQ-F FX5S-40MT-ESS, MELSEC iQ-F FX5S-40MT-DSS, MELSEC iQ-F FX5S-60MT-ES, MELSEC iQ-F FX5S-60MT-DS, MELSEC iQ-F FX5S-60MT-ESS, MELSEC iQ-F FX5S-60MT-DSS, MELSEC iQ-F FX5S-80MT-ES, MELSEC iQ-F FX5S-80MT-DS, MELSEC iQ-F FX5S-80MT-ESS, MELSEC iQ-F FX5S-80MT-DSS, MELSEC iQ-F FX5S-30MR-ES, MELSEC iQ-F FX5S-30MR-DS, MELSEC iQ-F FX5S-40MR-ES, MELSEC iQ-F FX5S-40MR-DS, MELSEC iQ-F FX5S-60MR-ES, MELSEC iQ-F FX5S-60MR-DS, MELSEC iQ-F FX5S-80MR-ES and MELSEC iQ-F FX5S-80MR-DS 3.1/7.5. This affects an unknown function of the component SLMP Messages Handler. The manipulation results in cleartext transmission of sensitive information. This vulnerability is identified as CVE-2025-7731. The attack can be executed remotely. There is not any exploit available. Applying restrictive firewalling is recommended.

A vulnerability, which was classified as critical, has been found in Mitsubishi Electric MELSEC iQ-F FX5U-32MT-ES, MELSEC iQ-F FX5U-32MT-DS, MELSEC iQ-F FX5U-32MT-ESS, MELSEC iQ-F FX5U-32MT-DSS, MELSEC iQ-F FX5U-64MT-ES, MELSEC iQ-F FX5U-64MT-DS, MELSEC iQ-F FX5U-64MT-ESS, MELSEC iQ-F FX5U-64MT-DSS, MELSEC iQ-F FX5U-80MT-ES, MELSEC iQ-F FX5U-80MT-DS, MELSEC iQ-F FX5U-80MT-ESS, MELSEC iQ-F FX5U-80MT-DSS, MELSEC iQ-F FX5U-32MR-ES, MELSEC iQ-F FX5U-32MR-DS, MELSEC iQ-F FX5U-64MR-ES, MELSEC iQ-F FX5U-64MR-DS, MELSEC iQ-F FX5U-80MR-ES, MELSEC iQ-F FX5U-80MR-DS, MELSEC iQ-F FX5UC-32MT-D, MELSEC iQ-F FX5UC-32MT-DSS, MELSEC iQ-F FX5UC-64MT-D, MELSEC iQ-F FX5UC-64MT-DSS, MELSEC iQ-F FX5UC-96MT-D, MELSEC iQ-F FX5UC-96MT-DSS, MELSEC iQ-F FX5UC-32MT-DS-TS, MELSEC iQ-F FX5UC-32MT-DSS-TS, MELSEC iQ-F FX5UC-32MR-DS-TS, MELSEC iQ-F FX5UJ-24MT-ES, MELSEC iQ-F FX5UJ-24MT-DS, MELSEC iQ-F FX5UJ-24MT-ESS, MELSEC iQ-F FX5UJ-24MT-DSS, MELSEC iQ-F FX5UJ-40MT-ES, MELSEC iQ-F FX5UJ-40MT-DS, MELSEC iQ-F FX5UJ-40MT-ESS, MELSEC iQ-F FX5UJ-40MT-DSS, MELSEC iQ-F FX5UJ-60MT-ES, MELSEC iQ-F FX5UJ-60MT-DS, MELSEC iQ-F FX5UJ-60MT-ESS, MELSEC iQ-F FX5UJ-60MT-DSS, MELSEC iQ-F FX5UJ-24MR-ES, MELSEC iQ-F FX5UJ-24MR-DS, MELSEC iQ-F FX5UJ-40MR-ES, MELSEC iQ-F 'FX5UJ-40MR-DS, MELSEC iQ-F FX5UJ-60MR-ES, MELSEC iQ-F FX5UJ-60MR-DS, MELSEC iQ-F FX5UJ-24MT-ES-A, MELSEC iQ-F FX5UJ-24MR-ES-A, MELSEC iQ-F FX5UJ-40MT-ES-A, MELSEC iQ-F FX5UJ-40MR-ES-A, MELSEC iQ-F FX5UJ-60MT-ES-A, MELSEC iQ-F FX5UJ-60MR-ES-A, MELSEC iQ-F FX5S-30MT-ES, MELSEC iQ-F FX5S-30MT-DS, MELSEC iQ-F FX5S-30MT-ESS, MELSEC iQ-F FX5S-30MT-DSS, MELSEC iQ-F FX5S-40MT-ES, MELSEC iQ-F FX5S-40MT-DS, MELSEC iQ-F FX5S-40MT-ESS, MELSEC iQ-F FX5S-40MT-DSS, MELSEC iQ-F FX5S-60MT-ES, MELSEC iQ-F FX5S-60MT-DS, MELSEC iQ-F FX5S-60MT-ESS, MELSEC iQ-F FX5S-60MT-DSS, MELSEC iQ-F FX5S-80MT-ES, MELSEC iQ-F FX5S-80MT-DS, MELSEC iQ-F FX5S-80MT-ESS, MELSEC iQ-F FX5S-80MT-DSS, MELSEC iQ-F FX5S-30MR-ES, MELSEC iQ-F FX5S-30MR-DS, MELSEC iQ-F FX5S-40MR-ES, MELSEC iQ-F FX5S-40MR-DS, MELSEC iQ-F FX5S-60MR-ES, MELSEC iQ-F FX5S-60MR-DS, MELSEC iQ-F FX5S-80MR-ES and MELSEC iQ-F FX5S-80MR-DS. This impacts an unknown function of the component Modbus TCP. This manipulation causes missing authentication. This vulnerability is tracked as CVE-2025-7405. The attack is possible to be carried out remotely. No exploit exists. It is advisable to implement restrictive firewalling.

Threat Attack Daily - 1st of September 2025

A vulnerability identified as critical has been detected in libretro libretro-common. Affected by this vulnerability is the function cdfs_open_cue_track. This manipulation causes out-of-bounds write. This vulnerability is registered as CVE-2025-9809. The attack needs to be launched locally. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Tenda AC20 16.03.08.05. It has been rated as critical. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. This vulnerability is registered as CVE-2025-9791. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Ransomware Attack Update for the 1st of September 2025