44% of the zero-days exploited in 2024 were in enterprise solutions

In 2024, threat actors exploited 75 zero-days – i.e., vulnerabilities previously unknown to vendors, thus without a readily available patch – in a wide variety of attacks.
Of these, 33 vulnerabilities …
Read more

Published Date:
Apr 29, 2025 (5 hours, 43 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-3928

CVE-2025-1976

CVE-2024-55591

CVE-2025-0282

CVE-2024-53104

CVE-2024-9381

CVE-2024-9380

CVE-2024-9379

CVE-2024-32896

CVE-2024-29748

CVE-2024-29745

Many Fuel Tank Monitoring Systems Vulnerable to Disruption

Source: jittawit21 via ShutterstockInternet-connected automatic tank gauges (ATGs) pose a serious but often overlooked cyber-risk to the thousands of gas stations, fuel depots, and facilities that rel …
Read more

Published Date:
Apr 29, 2025 (4 hours, 29 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-31324

CVE-2024-45066

CVE-2024-43693

CVE ID : CVE-2025-4079

Published : April 29, 2025, 7:15 p.m. | 3 hours, 52 minutes ago

Description : A vulnerability, which was classified as critical, was found in PCMan FTP Server up to 2.0.7. Affected is an unknown function of the component RENAME Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-0520

Published : April 29, 2025, 8:15 p.m. | 2 hours, 53 minutes ago

Description : An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2024-57698

Published : April 29, 2025, 8:15 p.m. | 2 hours, 53 minutes ago

Description : An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive exposure of information and the lack of adequate access control on the /user/list?culture=en-us endpoint.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…