Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be ex...
A new zero-day vulnerability in Windows' Remote Access Connection Manager (RasMan) has been identified, allowing attackers to crash the service. Unofficial patches have been released by ACROS Security to mitigate this denial-of-service (DoS) flaw. The vulnerability is linked to CVE-2025-59230, which...
On October 2025 Patch Tuesday, Microsoft released patches for 167 CVEs, marking its largest update to date. Among these, three zero-day vulnerabilities were identified, with two actively exploited in the wild. The vulnerabilities span various Microsoft products, including Windows, Office, and Azure...
Three critical vulnerabilities in Windows systems have been reported, including CVE-2025-59230, which allows attackers to gain admin rights, and CVE-2025-54100, a PowerShell vulnerability requiring urgent patches. Additionally, CVE-2025-9491 has been exploited by advanced persistent threat (APT) gro...
