Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 04:10Z
2024-05-02
2024-05-02 17:15Z
CRIT

CVE-2024-2876 — Email: The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress &

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2876

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IG_ES_Subscribers_Query' class in all versions up to, and including, 5.7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-2831 — Calendar: The Calendar plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcodes

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2831

The Calendar plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcodes in all versions up to, and including, 1.3.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access or higher, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. CVSSv3.1 8.8 (HIGH) · EPSS 67th percentile

CWECWE 89VNDCalendarTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-02
2024-05-02 17:15Z
CRIT

CVE-2024-2667 — Instawp Instawp_connect: The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2667

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. This makes it possible for unauthenticated attackers to upload arbitrary files. CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 434VNDInstawpTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-2661 — Barcode: plugin for WordPress is vulnerable to blind SQL Injection via the ‘currentIds’ parameter in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2661

The Barcode Scanner and Inventory manager. POS (Point of Sale) – scan barcodes & create orders with barcode reader. plugin for WordPress is vulnerable to blind SQL Injection via the ‘currentIds’ parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber access or higher, to append additional S CVSSv3.1 8.8 (HIGH) · EPSS 71th percentile

CWECWE 89VNDBarcodeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-2417 — User: The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2417

The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the form_save_action() function in all versions up to, and including, 3.1.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the registration form and make the default registration role administrator. This subsequently allows the atta CVSSv3.1 8.8 (HIGH) · EPSS 61th percentile

CWECWE 862TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-1797 — Wpulike Wp_ulike: The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1797

The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to SQL Injection via the 'status' and 'id' attributes of the 'wp_ulike_counter' and 'wp_ulike' shortcodes in all versions up to, and including, 4.6.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional S CVSSv3.1 8.8 (HIGH) · EPSS 66th percentile

CWECWE 89VNDWpulikeVNDUlikeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-1567 — Royal-elementor-addons Royal_elementor_addons: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1567

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to missing file type validation in the 'file_validity' function in all versions up to, and including, 1.3.94. This makes it possible for unauthenticated attackers to upload dangerous file types such as .svgz on the affected site's server which may make cross-site scripting or remote code execution possible. CVSSv3.1 8.2 (HIGH) · EPSS 88th percentile

CWECWE 434VNDRoyal Elementor AddonsVNDRoyalTYPVulnerability
8.2
CVSS v3.1
92
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-05-01
2024-05-01 15:15Z
CRIT

CVE-2024-26305 — There: Successful exploitation of this vulnerability results in the ability to execute arbitrary code as

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26305

There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

CWECWE 121VNDThereTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-05-01
2024-05-01 13:15Z
HIGH

CVE-2024-33775 — Nagios Nagios_xi: An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-33775

An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet. CVSSv3.1 8.8 (HIGH) · EPSS 74th percentile

CWECWE 269VNDNagiosVNDAutodiscoverTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-01
2024-05-01 13:15Z
CRIT

CVE-2024-27388 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-27388

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths. CVSSv3.1 9.8 (CRITICAL)

CWECWE 401TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-01
2024-05-01 13:15Z
CRIT

CVE-2024-27053 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RCU

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-27053

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RCU usage in connect path With lockdep enabled, calls to the connect function from cfg802.11 layer lead to the following warning: ============================= WARNING: suspicious RCU usage 6.7.0-rc1-wt+ #333 Not tainted ----------------------------- drivers/net/wireless/microchip/wilc1000/hif.c:386 suspicious rcu_dereference_check() usage! [...] stack backtrace: CPU: 0 PID: 100 Comm: w CVSSv3.1 9.1 (CRITICAL) · EPSS 31th percentile

CWECWE 476TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-05-01
2024-05-01 06:15Z
HIGH

CVE-2024-27018 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: skip conntrack

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-27018

In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: skip conntrack input hook for promisc packets For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This patch adds a workaround to reset conntrack for these packets. Jianbo Liu reports warning splats in their test infrastructure where cloned packets reach the br_netfilter input hook to confirm the conntr CVSSv3.1 8.2 (HIGH)

TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2024-05-01
2024-05-01 06:15Z
HIGH

CVE-2024-26990 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protect L2

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26990

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status Check kvm_mmu_page_ad_need_write_protect() when deciding whether to write-protect or clear D-bits on TDP MMU SPTEs, so that the TDP MMU accounts for any role-specific reasons for disabling D-bit dirty logging. Specifically, TDP MMU SPTEs must be write-protected when the TDP MMU is being used to run an L2 (i.e. L1 has disabled EPT) a CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-01
2024-05-01 06:15Z
HIGH

CVE-2024-26980 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26980

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf If ->ProtocolId is SMB2_TRANSFORM_PROTO_NUM, smb2 request size validation could be skipped. if request size is smaller than sizeof(struct smb2_query_info_req), slab-out-of-bounds read can happen in smb2_allocate_rsp_buf(). This patch allocate response buffer after decrypting transform request. smb3_decrypt_req() will validate transform request size and CVSSv3.1 8.2 (HIGH)

CWECWE 125TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2024-05-01
2024-05-01 06:15Z
HIGH

CVE-2024-26954 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26954

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffset of smb2_create_req is smaller than Buffer offset of smb2_create_req, slab-out-of-bounds read can happen from smb2_open. This patch set the minimum value of the name offset to the buffer offset to validate name length of smb2_create_req(). CVSSv3.1 8.1 (HIGH) · EPSS 17th percentile

CWECWE 125TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-05-01
2024-05-01 06:15Z
CRIT

CVE-2024-26953 — Linux Linux_kernel: But if the skb fragment pages are originating from a page_pool, calling put_page on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26953

In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reorganized during esp_output (!esp->inline), the pages coming from the original skb fragments are supposed to be released back to the system through put_page. But if the skb fragment pages are originating from a page_pool, calling put_page on them will trigger a page_pool leak which will eventually result in a crash. This leak can be easil CVSSv3.1 9.8 (CRITICAL) · EPSS 14th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-01
2024-05-01 06:15Z
HIGH

CVE-2024-26952 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26952

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This patch set the minimum value of buffer offset field to ->Buffer offset to validate buffer length. CVSSv3.1 8.3 (HIGH) · EPSS 53th percentile

CWECWE 125CWECWE 120TYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2024-05-01
2024-05-01 06:15Z
HIGH

CVE-2024-26936 — Linux Linux_kernel: This patch add simple buffer size validation to avoid potencial out-of-bounds in request buffer.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26936

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate request buffer size in smb2_allocate_rsp_buf() The response buffer should be allocated in smb2_allocate_rsp_buf before validating request. But the fields in payload as well as smb2 header is used in smb2_allocate_rsp_buf(). This patch add simple buffer size validation to avoid potencial out-of-bounds in request buffer. CVSSv3.1 8.2 (HIGH) · EPSS 14th percentile

CWECWE 120TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2024-05-01
2024-05-01 06:15Z
HIGH

CVE-2024-26931 — Linux Linux_kernel: BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 0 P4D 0

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26931

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back to SCSI layer. BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 0 P4D 0 Oops: 0000 [#1] SMP NOPTI CPU: 27 PID: 793455 Comm: kworker/u130:6 Kdump: loaded Tainted: G OE --------- - - 4.18.0-372.9.1.el8.x86_64 #1 Hardware name: HPE ProLiant DL360 Gen10/ProLiant DL360 CVSSv3.1 8.8 (HIGH) · EPSS 17th percentile

CWECWE 476TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-30
2024-04-30 09:15Z
HIGH

CVE-2024-4185 — Customer: The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4185

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification, and if both the "Login the user automatically after the account is verified" and "Verify account for current users" options are checked, then it potentially makes i CVSSv3.1 8.1 (HIGH) · EPSS 48th percentile

CWECWE 330VNDCustomerTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-04-30
2024-04-30 09:15Z
HIGH

CVE-2024-2663 — YouTube: The ZD YouTube FLV Player plugin for WordPress is vulnerable to Server-Side Request Forgery

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2663

The ZD YouTube FLV Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.6 via the $_GET['image'] parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. CVSSv3.1 8.3 (HIGH) · EPSS 52th percentile

CWECWE 918VNDYoutubeTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2024-04-30
2024-04-30 00:00Z
HIGH

Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Two

Elastic Security Labs·elastic.co

Elastic Security Labs publishes part two of a deep-dive technical analysis of REMCOS RAT, detailing its watchdog persistence mechanism, keylogging capabilities (with RC4 encryption and window-specific targeting), screen recording with mouse cursor rendering, audio recording via Wave API, and C2 communication protocol structure. The analysis includes reverse-engineered configuration field indices, registry manipulation techniques, and proof-of-concept C2 command injection code.

SRFOsTACTA0005TACTA0002TACTA0007TACTA0003TACTA0009OSWindowsSWRemcos
72
Edit Score
2024-04-29
2024-04-29 18:15Z
CRIT

CVE-2024-31823 — Ecommerce-codeigniter-bootstrap_project Ecommerce-codeigniter-bootstrap: d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSeco

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-31823

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component. CVSSv3.1 9.8 (CRITICAL) · EPSS 75th percentile

CWECWE 94VNDEcommerceVNDEcommerce Codeigniter Bootstrap ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-29
2024-04-29 16:15Z
HIGH

CVE-2024-34010 — Local privilege escalation due to unquoted search path vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-34010

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before build 42575. CVSSv3.1 8.2 (HIGH) · EPSS 28th percentile

CWECWE 428TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2024-04-29
2024-04-29 09:15Z
CRIT

CVE-2024-3375 — Incorrect: Permission Assignment for Critical Resource vulnerability in Havelsan Inc.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3375

Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc. Dialogue allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Dialogue: from v1.83 before v1.83.1 or v1.84. CVSSv3.1 9.4 (CRITICAL) · EPSS 38th percentile

CWECWE 732TYPVulnerability
9.4
CVSS v3.1
97
Edit Score