CVE-2021-44228: Apache Log4j Vulnerability
The Log4Shell vulnerability in Apache Log4j exploited by QTFY.
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2023-22515: Atlassian Confluence Vulnerability
An N-day vulnerability in Atlassian Confluence used by QTFY.
CVE-2024-24919: Check Point Quantum Gateway Vulnerability
An N-day vulnerability in Check Point Quantum Gateway exploited by QTFY.
CVE-2025-31161: CrushFTP Vulnerability
An N-day vulnerability in CrushFTP used by QTFY.
CVE-2024-8190: Ivanti CSA Vulnerability
A zero-day vulnerability in Ivanti CSA appliances exploited by QTFY for initial access.
CVE-2024-8963: Ivanti CSA Vulnerability
A zero-day vulnerability in Ivanti CSA appliances used by QTFY in attacks.
CVE-2024-9380: Ivanti CSA Vulnerability
A zero-day vulnerability in Ivanti CSA appliances exploited by QTFY.
CVE-2018-13379: Fortinet SSL-VPN Vulnerability
An N-day vulnerability in Fortinet SSL-VPN used by QTFY for initial access.
CVE-2026-80428 — Critical vulnerability brief
CVSS 9.3ILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint at components/ILIAS/AuthShibboleth/resources/shib_logout.php runs in a context that ilInitialisation exempts…
Unpatched Kaltura mwEmbed Flaws Allow Remote File Read and Code Execution
CERT/CC has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library, mwEmbed (also distributed as html5lib), that allow remote, unauthenticated attackers…