Known exploited vulnerabilities

Attackers can break into or crash vulnerable Citrix remote-access systems from the internet, potentially disrupting access and exposing a path into the…

A malicious software repository can make Git run hidden code during checkout, potentially compromising developer machines or build systems

A flaw in Citrix Session Recording lets someone with ordinary domain access gain higher access on the recording server, which could let them disrupt monitoring…

A flaw in Citrix’s session recording system can let a logged-in attacker on the internal network run commands on the recording server, putting monitoring data…

A malicious picture sent to an unpatched iPhone, iPad, or Mac can take over the entire device, and this has already been used in real, highly targeted attacks

Attackers can break into an unpatched Trend Micro Apex One management server without a password and use it to run their own commands

An unpatched N-central management server could let an attacker who already has some access run their own commands and potentially control or disrupt systems…

A flaw in N-able N-central can let attackers run commands on the management server, potentially giving them control over systems managed through it

A malicious compressed file can abuse vulnerable WinRAR installations to place malware where Windows will run it, potentially leading to data theft or…

A flaw in an old web browser lets attackers take over a user's computer simply by getting them to visit a malicious website, potentially stealing data or…

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to…

A vulnerable video recorder can let someone with a login run commands on the device, potentially exposing footage, disrupting recording, or using it to attack…

Certain D-Link security cameras contain a flaw that lets someone who already has a password run dangerous commands on the camera, which could let them watch…

Some older D-Link security cameras can be tricked into handing over their administrator password to anyone who asks, letting attackers watch the video feeds…

Attackers can take complete control of vulnerable Cisco network access systems without needing a password, potentially disrupting or bypassing how users and…

A flaw in Cisco’s network access control platform can let an unauthenticated attacker take full control of the system, so affected appliances should be…

A malicious website or link can trick a logged-in PaperCut administrator’s browser into making dangerous changes to the print-management system

Attackers can remotely take over vulnerable CrushFTP file-transfer servers and access or change sensitive files and settings

A malicious website could use this flaw to break out of browser protections and take control of a user's computer if the browser is not updated

Attackers can abuse a SharePoint login weakness to break into document-sharing servers, steal information, and potentially help launch ransomware if systems…

A flaw in SharePoint can let a logged-in attacker take control of the server, steal business data, and potentially support ransomware attacks if the system is…

Attackers can break into vulnerable SysAid servers without a password and potentially take over the help desk system

An attacker can break into vulnerable SysAid service desk servers without a password and potentially take control of administrator access

Attackers can break into vulnerable on-premises SharePoint servers remotely and use them as a foothold to steal data or deploy ransomware

Attackers can remotely take advantage of vulnerable FortiWeb appliances to access or change sensitive security system data, so affected systems should be…

Attackers can take full control of vulnerable Wing FTP servers remotely, especially if the server is exposed to the internet or allows anonymous access

A flaw in Citrix remote access appliances can let attackers steal login session data and use it to break into networks, including in ransomware attacks

A bug in an older network diagnostic tool lets outsiders remotely damage its memory and take control without needing any password

A flaw in an older email-sending library lets attackers run any commands they want on the server just by sending a specially formatted email request…

A malicious webpage can exploit outdated Chrome browsers to secretly run attacker-controlled code, so affected browsers should be updated immediately

Attackers can crash exposed NetScaler remote-access services, potentially disrupting employee access to business applications

Attackers can take control of affected server management controllers remotely without a password, potentially disrupting or tampering with servers even below…

Some older D-Link routers can be remotely tricked into revealing sensitive internal settings, and because they are no longer supported they should be replaced

Someone who steals a Fortinet device backup file can read the passwords stored inside it because the file uses a secret code that never changes

A person or program with limited access to a vulnerable Linux machine may be able to turn that access into full administrator control

Apple devices should be updated because a malicious shared photo or video link could be used in targeted attacks against selected people

Some TP-Link routers can be taken over through their management page, allowing attackers to disrupt service, change settings, or add the device to a botnet

A malicious shortcut file can make Windows run an attacker’s program from the network, so unpatched computers can be taken over if a user opens the file

Wazuh server vulnerable to remote code execution

Attackers can take control of vulnerable Wazuh security monitoring servers and use them to hide activity or move deeper into the network

An exposed Erlang-based SSH service can let an attacker take control of a server without needing a password. CVE-2025-32433 affects erlang on Debian:11 and is…

A malicious web page could take advantage of an outdated browser to run attacker-controlled code on a user’s computer

A flaw in Craft CMS can let outsiders plant malicious content in server files, which could become dangerous if combined with another weakness

A stolen server secret can let attackers take over older remote support servers, so they should be upgraded and checked for abuse immediately

Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled

A website setting can let outsiders take control of an affected Craft CMS site unless the software is updated and the setting is disabled

A flaw in certain ASUS routers can let someone with router login access take control of the device and tamper with network traffic or connectivity

A vulnerable ASUS router can let an outsider take over its management settings without knowing the password. CVE-2021-32030 is rated critical (CVSS 9.8), is…

Attackers can abuse vulnerable Samsung signage management servers to place malicious files on the system and potentially take control of it

Attackers can abuse a flaw in Ivanti’s mobile management server to take control of it and potentially access or change sensitive device-management information

Attackers can access sensitive mobile device management functions without logging in, so affected systems should be updated and checked for signs of misuse…

Attackers can abuse vulnerable messaging servers to read files they should not be able to access, potentially exposing sensitive business information and…