Vulnerability (CVE)
Threat actors tied to the Cl0p ransomware group exploited a zero-day in Oracle E-Business Suite, tracked as CVE-2025-61882 with a CVSS score of 9.8, allowing an unauthenticated attacker with HTTP network access to compromise the Oracle Concurrent...
Redis disclosed CVE-2025-49844, a CVSS 10.0 use-after-free flaw in its Lua scripting that lets an authenticated user run a crafted script to escape the Lua sandbox and execute code on the host, affecting all versions of Redis. Wiz, which reported the bug...
Google Threat Intelligence Group and Mandiant report that dozens of organizations may have been impacted by zero-day exploitation of a flaw in Oracle E-Business Suite since August 9, 2025, with activity bearing hallmarks of the Cl0p ransomware crew. The...