Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A public exploit for CVE-2025-40778, a critical vulnerability in BIND 9, has been released, enabling DNS cache poisoning and traffic redirection. This flaw affects the widely used Domain Name System software, posing risks to global internet infrastructure. Cybersecurity professionals are urged to ta...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to the XWiki Platform and Broadcom's VMware Aria Operations and VMware Tools to its Known Exploited Vulnerabilities (KEV) catalog. The advisory for CVE-2025-41244 has been updated to indicate that this...
CISA has confirmed the active exploitation of a critical vulnerability in VMware ESXi, tracked as CVE-2025-22225. This zero-day flaw allows attackers to escape security sandboxes and is currently being used in ransomware operations. The vulnerability, classified as an arbitrary write memory issue, w...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to the XWiki Platform and Broadcom's VMware Aria Operations and VMware Tools to its Known Exploited Vulnerabilities (KEV) catalog. The advisory from Broadcom on CVE-2025-41244 indicates that this vulne...
