Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 04:57Z
2024-04-28
2024-04-28 13:15Z
CRIT

CVE-2022-48666 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-48666

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations. Both implementations use resources associated with the SCSI host. Make sure that these resources are still available when .exit_cmd_priv is called by waiting inside scsi_remove_host() until the tag set has been freed. This commit fixes the following use-after-free: =============================================================== CVSSv3.1 9.8 (CRITICAL) · EPSS 16th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-28
2024-04-28 13:15Z
HIGH

CVE-2022-48652 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ice: Fix crash by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-48652

In the Linux kernel, the following vulnerability has been resolved: ice: Fix crash by keep old cfg when update TCs more than queues There are problems if allocated queues less than Traffic Classes. Commit a632b2a4c920 ("ice: ethtool: Prohibit improper channel config for DCB") already disallow setting less queues than TCs. Another case is if we first set less queues, and later update more TCs config due to LLDP, ice_vsi_cfg_tc() will failed but left dirty num_txq/rxq and t CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

CWECWE 476TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-27
2024-04-27 09:15Z
CRIT

CVE-2024-3342 — Timetable: The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3342

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attribute of the 'mp-timetable' shortcode in all versions up to, and including, 2.4.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries CVSSv3.1 9.9 (CRITICAL) · EPSS 54th percentile

CWECWE 89VNDTimetableTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2024-04-26
2024-04-26 20:15Z
CRIT

CVE-2024-25343 — Tenda N300_firmware: N300 F3 router vulnerability allows users to bypass intended security policy and create

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-25343

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords. CVSSv3.1 9.1 (CRITICAL) · EPSS 40th percentile

CWECWE 269VNDTendaTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-04-26
2024-04-26 19:15Z
HIGH

CVE-2024-28327 — Asus: RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-28327

Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings. CVSSv3.1 8.4 (HIGH) · EPSS 4th percentile

CWECWE 312VNDAsusTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2024-04-26
2024-04-26 09:15Z
CRIT

CVE-2024-3962 — Themeisle Product_addons_\&_fields_for_woocommerce: The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3962

The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppom_upload_file function in all versions up to, and including, 32.0.18. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Successful exploitation requires the PPOM Pro plugin to be installed along with a WooCommerce product t CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

CWECWE 434VNDThemeisleTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-04-26
2024-04-26 01:15Z
CRIT

CVE-2024-33668 — Zammad Zammad: An issue was discovered in Zammad before 6.3.0.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-33668

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to. CVSSv3.1 9.1 (CRITICAL) · EPSS 37th percentile

CWECWE 639VNDZammadTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-04-25
2024-04-25 15:16Z
HIGH

CVE-2024-22373 — Malaterre Grassroots_dicom: An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-22373

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. CVSSv3.1 8.1 (HIGH) · EPSS 72th percentile

CWECWE 787CWECWE 119VNDFedoraprojectVNDMalaterreTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-04-25
2024-04-25 09:15Z
CRIT

CVE-2023-51484 — Incorrect: Privilege Assignment vulnerability in wp-buy Login as User or Customer (User Switching) login-as-customer-or-user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-51484

Incorrect Privilege Assignment vulnerability in wp-buy Login as User or Customer (User Switching) login-as-customer-or-user allows Privilege Escalation.This issue affects Login as User or Customer (User Switching): from n/a through <= 3.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-25
2024-04-25 00:00Z
MED

Embedding Security in LLM Workflows: Elastic's Proactive Approach

Elastic Security Labs·elastic.co

Elastic Security Labs published a technical guide on embedding security controls within LLM workflows, focusing on detection and mitigation of OWASP Top 10 LLM vulnerabilities (prompt injection, insecure output handling, model DoS, sensitive data disclosure). The article demonstrates a Flask-based proxy approach to intercept and analyze LLM requests/responses, enrich them with security metadata, and write ES|QL detection rules to identify malicious LLM activity.

SRFApplicationTACTA0001TACTA0006SRFAiSWElasticsearchSWKibanaVNDElasticVNDOpenai
68
Edit Score
2024-04-24
2024-04-24 19:15Z
MED

CVE-2024-20359 — Cisco Adaptive_security_appliance_software: A vulnerability in a legacy capability that allowed for the preloading of VPN clients

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-20359in the wild

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability. This vulnerability is due to improper validation of a file when it is read CVSSv3.1 6.0 (MEDIUM) · EPSS 97th percentile

CWECWE 94VNDCiscoTYPVulnerabilitySTAitw exploited
6.0
CVSS v3.1
86
Edit Score
2024-04-24
2024-04-24 19:15Z
HIGH

CVE-2024-20353 — Cisco Adaptive_security_appliance_software: A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-20353in the wild

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted w CVSSv3.1 8.6 (HIGH) · EPSS 99th percentile

CWECWE 835VNDCiscoTYPVulnerabilitySTAitw exploited
8.6
CVSS v3.1
100
Edit Score
2024-04-24
2024-04-24 09:15Z
HIGH

CVE-2024-32706 — Reputeinfosystems Arforms: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-32706

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4. CVSSv3.1 8.5 (HIGH)

CWECWE 89VNDReputeinfosystemsTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2024-04-24
2024-04-24 08:15Z
CRIT

CVE-2024-32836 — Upload: Unrestricted Upload of File with Dangerous Type vulnerability in WP Lab WP-Lister Lite for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-32836

Unrestricted Upload of File with Dangerous Type vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.5.11. CVSSv3.1 9.1 (CRITICAL)

CWECWE 434TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-04-24
2024-04-24 00:00Z
HIGH

Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part One

Elastic Security Labs·elastic.co

Elastic Security Labs published a deep technical analysis of REMCOS RAT v4.9.3 Pro, a widespread C++ red-teaming tool turned commodity malware. The writeup covers configuration decryption (RC4), UAC bypass via COM elevation, persistence mechanisms, process injection using ZwMapViewOfSection + SetThreadContext, and browser credential cleaning. This is part one of a multi-part series examining the malware's execution flow, detection strategies, and C2 communication.

SRFOsTACTA0004TACTA0005TACTA0003OSWindowsSWRemcosVNDBreaking SecurityTYPResearch
72
Edit Score
2024-04-23
2024-04-23 02:15Z
HIGH

CVE-2024-3293 — WordPress: The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3293

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtmedia_gallery shortcode in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be us CVSSv3.1 8.8 (HIGH) · EPSS 96th percentile

CWECWE 89VNDWordpressTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2024-04-18
2024-04-18 09:15Z
CRIT

CVE-2024-32599 — Control: Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand WP Dummy

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-32599

Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator.This issue affects WP Dummy Content Generator: from n/a through <= 3.2.1. CVSSv3.1 10.0 (CRITICAL)

CWECWE 94TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2024-04-17
2024-04-17 18:15Z
CRIT

CVE-2024-32161 — Jizhicms Jizhicms: 2.5 suffers from a File upload vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-32161

jizhiCMS 2.5 suffers from a File upload vulnerability. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 434VNDJizhicmsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-17
2024-04-17 18:15Z
HIGH

CVE-2024-2961 — Gnu Glibc: The iconv() function in the GNU C Library versions 2.39 and older may overflow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2961

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. CVSSv3.1 7.3 (HIGH) · EPSS 100th percentile

CWECWE 787VNDGnuVNDNetappTYPVulnerability
7.3
CVSS v3.1
100
Edit Score
2024-04-17
2024-04-17 14:15Z
HIGH

CVE-2024-1132 — Redhat Build_of_keycloak: This issue could allow an attacker to construct a malicious request to bypass validation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1132

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL. CVSSv3.1 8.1 (HIGH) · EPSS 73th percentile

CWECWE 22VNDKeycloakTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-04-17
2024-04-17 11:15Z
CRIT

CVE-2024-26877 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26877

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling crypto_finalize_request, BH should be disabled to avoid triggering the following calltrace: ------------[ cut here ]------------ WARNING: CPU: 2 PID: 74 at crypto/crypto_engine.c:58 crypto_finalize_request+0xa0/0x118 Modules linked in: cryptodev(O) CPU: 2 PID: 74 Comm: firmware:zynqmp Tainted: G O 6.8.0-rc1-yocto-s CVSSv3.1 9.8 (CRITICAL) · EPSS 14th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-17
2024-04-17 11:15Z
HIGH

CVE-2024-26856 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net: sparx5: Fix use

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26856

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: Fix use after free inside sparx5_del_mact_entry Based on the static analyzis of the code it looks like when an entry from the MAC table was removed, the entry was still used after being freed. More precise the vid of the mac_entry was used after calling devm_kfree on the mac_entry. The fix consists in first using the vid of the mac_entry to delete the entry from the HW and after that to free it CVSSv3.1 8.8 (HIGH) · EPSS 14th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-17
2024-04-17 11:15Z
CRIT

CVE-2024-26853 — Linux Linux_kernel: However, this is the responsibility of the caller of the ndo_xdp_xmit (see for example

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26853

In the Linux kernel, the following vulnerability has been resolved: igc: avoid returning frame twice in XDP_REDIRECT When a frame can not be transmitted in XDP_REDIRECT (e.g. due to a full queue), it is necessary to free it by calling xdp_return_frame_rx_napi. However, this is the responsibility of the caller of the ndo_xdp_xmit (see for example bq_xmit_all in kernel/bpf/devmap.c) and thus calling it inside igc_xdp_xmit (which is the ndo_xdp_xmit of the igc driver) as well CVSSv3.1 9.8 (CRITICAL) · EPSS 13th percentile

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-17
2024-04-17 10:15Z
HIGH

CVE-2024-26830 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26830

In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down (VF tries to delete all MACs) then the MAC is removed from MAC filters and primary VF MAC is zeroed. Do not allow untrusted VF to remove primary MAC when it was set administratively by PF. Reproducer: 1) Create VF 2) Set VF interface up 3) Administratively set CVSSv3.1 8.4 (HIGH) · EPSS 14th percentile

TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2024-04-17
2024-04-17 10:15Z
CRIT

CVE-2024-26828 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26828

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instea CVSSv3.1 9.4 (CRITICAL) · EPSS 34th percentile

CWECWE 191TYPVulnerability
9.4
CVSS v3.1
97
Edit Score