Vulnerability (CVE)
F5 disclosed that unidentified threat actors broke into its systems and stole files containing some of BIG-IP's source code and information on undisclosed vulnerabilities, learning of the incident on August 9, 2025, though attackers are believed to have...
Researchers disclosed active exploitation of CVE-2025-2611, a CVSS 9.3 improper input validation flaw in ICT Innovations' ICTBroadcast autodialer software that lets unauthenticated attackers inject shell commands through the BROADCAST session cookie and...
Wordfence reports active exploitation of CVE-2025-6389, a 9.8-severity remote code execution flaw in the Sneeit Framework WordPress plugin affecting all versions through 8.3 and patched in 8.4 on August 5, 2025, with exploitation beginning November 24,...