NVD disclosure day
CVE-2025-11005
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
TOTOLINK X6000R devices contain an OS Command Injection vulnerability, allowing attackers to execute arbitrary commands. Since these devices are network-facing, this could lead to misuse or unauthorized access. Confirm if this device is in use and assess its criticality.
CVE-2025-59841
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The Flag Forge web application has a critical vulnerability where sessions are not properly invalidated after logout, allowing authenticated users to access protected areas and perform unauthorized actions. This could lead to exposure of sensitive information and compromise of system integrity if exploited.The Flag For
CVE-2025-20363
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in Cisco network devices that could allow an attacker to execute arbitrary code, leading to a full device compromise. This is due to improper handling of user-supplied input in HTTP requests. The potential for compromise of critical network infrastructure warrants attention to confirm re
CVE-2025-20362
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Cisco Secure Firewall VPN web servers allows unauthenticated attackers to access restricted URLs. This could lead to unauthorized access, impacting system availability and data confidentiality for affected organizations. Organizations should address this risk promptly.
CVE-2025-20333
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Cisco Secure Firewall VPN web servers could allow an authenticated attacker to execute arbitrary code. This could lead to complete compromise of affected devices. The U.S. CISA has identified this as a known exploited vulnerability.
CVE-2025-59832
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stored cross-site scripting vulnerability in Horilla, a Human Resource Management System, allows a low-privilege user to execute arbitrary JavaScript in an administrator's browser, potentially leading to session hijacking and the exfiltration of sensitive data. This issue is present in versions prior to 1.4.0, which
CVE-2025-10542
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
iMonitor EAM contains a critical vulnerability where default administrative credentials, visible in the management client, allow remote, unauthenticated attackers to gain full control over monitored agents and data. This enables access to sensitive information, like keylogger output, and the ability to issue commands t
CVE-2020-36851
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Misconfigured cors-anywhere proxies can let attackers steal cloud credentials or access internal systems by tricking the proxy into making requests to any target.
CVE-2025-59834
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
ADB MCP Server contains a command injection vulnerability that could allow an attacker to execute arbitrary commands. This tool is typically used by developers for local integration and is not designed for public internet exposure. It's important to confirm if this server is in use within the environment to assess rele