Indicators of Compromise

CISA Advisories 📡 RSS Apr 23

Yadea T5 Electric Bicycle

CVEs: CVE-2025-70994

CISA Advisories →

CISA Advisories 📡 RSS Apr 23

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-39987

CISA Advisories →

CISA Advisories 📡 RSS Apr 23

Intrado 911 Emergency Gateway (EGW)

CVEs: CVE-2026-6074

CISA Advisories →

CISA Advisories 📡 RSS Apr 23

Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera

CVEs: CVE-2025-65856

CISA Advisories →

CISA Advisories 📡 RSS Apr 23

Carlson Software VASCO-B GNSS Receiver

CVEs: CVE-2026-3893

CISA Advisories →

Zero Day Initiative 📡 RSS Apr 23

ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

CVEs: CVE-2026-6406

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 23

ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability

CVEs: CVE-2026-24032

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 23

ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability

CVEs: CVE-2026-25654

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 23

ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-5726

Zero Day Initiative →

CISA Advisories 📡 RSS Apr 22

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-33825

CISA Advisories →

CISA Advisories 📡 RSS Apr 21

Hardy Barth Salia EV Charge Controller

CVEs: CVE-2025-5873 CVE-2025-10371

CISA Advisories →

Zero Day Initiative 📡 RSS Apr 21

ZDI-26-245: (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-5059

Zero Day Initiative →

Check Point Research 📡 RSS Apr 20

20th April – Threat Intelligence Report

Domains: booking.com

Check Point Research →

Infosecurity Magazine 📡 RSS Apr 20

Attackers Exploit DVR Command Injection Flaw to Deploy Mirai-Based Botnet

CVEs: CVE-2024-3721

Infosecurity Magazine →

Fortinet Blog 📡 RSS Apr 17

Tracking Mirai Variant Nexcorium: A Vulnerability-Driven IoT Botnet Campaign

CVEs: CVE-2024-3721 CVE-2017-17215

Fortinet Blog →

Unit 42 📡 RSS Apr 16

A Deep Dive Into Attempted Exploitation of CVE-2023-33538

CVEs: CVE-2023-33538

Unit 42 →

Rapid7 Blog 📡 RSS Apr 16

CVE-2026-33032: Nginx UI Missing MCP Authentication

CVEs: CVE-2026-33032

Rapid7 Blog →

Cisco Advisories 📡 RSS Apr 15

Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities

Domains: sec.cloudapps.cisco.com

Cisco Advisories →

Infosecurity Magazine 📡 RSS Apr 15

Critical Nginx-ui MCP Flaw Actively Exploited in the Wild

CVEs: CVE-2026-33032

Infosecurity Magazine →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-292: QNAP TS-453E QVRPro excpostgres Exposed Dangerous Method Remote Code Execution Vulnerability

CVEs: CVE-2026-22898

Zero Day Initiative →