Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 06:27Z
2024-04-09
2024-04-09 19:15Z
HIGH

CVE-2024-1893 — Realestateconnected Easy_property_listings: The Easy Property Listings plugin for WordPress is vulnerable to time-based SQL Injection via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1893

The Easy Property Listings plugin for WordPress is vulnerable to time-based SQL Injection via the ‘property_status’ shortcode attribute in all versions up to, and including, 3.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access and above, to append additional SQL queries into already existing queries that can be used to extract CVSSv3.1 8.8 (HIGH) · EPSS 62th percentile

CWECWE 89VNDRealestateconnectedVNDEasyTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-09
2024-04-09 19:15Z
CRIT

CVE-2024-1813 — Presstigers Simple_job_board: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1813

The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute CVSSv3.1 9.8 (CRITICAL) · EPSS 92th percentile

CWECWE 502VNDPresstigersVNDSimpleTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-04-09
2024-04-09 19:15Z
HIGH

CVE-2024-1315 — Radiustheme Classified_listing: The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1315

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4. This is due to missing or incorrect nonce validation on the 'rtcl_update_user_account' function. This makes it possible for unauthenticated attackers to change the administrator user's password and email address via a forged request granted they can trick a site administrator into performing an action CVSSv3.1 8.8 (HIGH) · EPSS 69th percentile

CWECWE 352VNDRadiusthemeVNDClassifiedTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-09
2024-04-09 19:15Z
HIGH

CVE-2023-6999 — Podsfoundation Pods: The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-6999

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2). This makes it possible for authenticated attackers, with contributor level access or higher, to execute code on the server. CVSSv3.1 8.8 (HIGH) · EPSS 79th percentile

CWECWE 77VNDPodsfoundationVNDPodsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-09
2024-04-09 19:15Z
HIGH

CVE-2023-6967 — Podsfoundation Pods: The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-6967

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to SQL Injection via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor level access or higher, to append additional SQL queries into already existing qu CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile

CWECWE 89VNDPodsfoundationVNDPodsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-09
2024-04-09 19:15Z
HIGH

CVE-2023-6964 — Kadencewp Gutenberg_blocks_with_ai: The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-6964

The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.26 via the 'kadence_import_get_new_connection_data' AJAX action. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services CVSSv3.1 8.5 (HIGH) · EPSS 57th percentile

CWECWE 918VNDKadencewpVNDGutenbergTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2024-04-09
2024-04-09 09:15Z
HIGH

CVE-2024-31370 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-31370

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodeIsAwesome AIKit aikit-wordpress-ai-writing-assistant-using-gpt3.This issue affects AIKit: from n/a through <= 4.14.1. CVSSv3.1 8.5 (HIGH) · EPSS 30th percentile

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-04-09
2024-04-09 00:00Z
INFO

Linux detection engineering with Auditd

Elastic Security Labs·elastic.co

Elastic Security Labs publishes a comprehensive guide to Linux detection engineering using Auditd and Auditd Manager. The article covers Auditd setup, rule configuration (control, file system, and syscall rules), centralized management via Auditd Manager, event analysis techniques, and practical detection rule examples including reverse shell detection via UDP.

SRFOsTACTA0007TACTA0009OSLinuxSWAuditdVNDElasticTYPResearchSTGCollection
62
Edit Score
2024-04-08
2024-04-08 23:15Z
CRIT

CVE-2024-22949 — Jfree Jfreechart: v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-22949

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification. CVSSv3.1 9.1 (CRITICAL) · EPSS 51th percentile

CWECWE 125VNDJfreeVNDJfreechartTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-04-08
2024-04-08 20:15Z
CRIT

CVE-2024-23086 — Mikkotommila Apfloat: v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-23086

Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification. CVSSv3.1 9.8 (CRITICAL)

CWECWE 125VNDMikkotommilaVNDApfloatTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-08
2024-04-08 20:15Z
CRIT

CVE-2024-23078 — JGraphT: Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double).

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-23078

JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification. CVSSv3.1 9.1 (CRITICAL) · EPSS 51th percentile

CWECWE 476VNDJgraphtTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-04-08
2024-04-08 14:15Z
MED

CVE-2024-2511 — Issue: summary: Some non-default TLS server configurations can cause unbounded memory growth when processing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2511

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, und CVSSv3.1 5.9 (MEDIUM) · EPSS 99th percentile

CWECWE 1325TYPVulnerability
5.9
CVSS v3.1
95
Edit Score
2024-04-08
2024-04-08 10:15Z
CRIT

CVE-2024-26811 — Linux Linux_kernel: ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26811

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid memory overrun or slab-out-of-bounds. This patch validate 3 ipc response that has payload. CVSSv3.1 9.8 (CRITICAL)

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-07
2024-04-07 18:15Z
CRIT

CVE-2024-31280 — Church_admin_project Church_admin: Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-31280

Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5. CVSSv3.1 9.9 (CRITICAL) · EPSS 63th percentile

CWECWE 434VNDChurch Admin ProjectTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2024-04-05
2024-04-05 12:15Z
HIGH

CVE-2023-6523 — Authorization: Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-6523

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914. CVSSv3.1 8.8 (HIGH) · EPSS 9th percentile

CWECWE 639TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-05
2024-04-05 08:15Z
HIGH

CVE-2024-3217 — Wpdirectorykit Wp_directory_kit: The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3217

The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up to, and including, 1.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract s CVSSv3.1 8.8 (HIGH) · EPSS 98th percentile

CWECWE 89VNDWpdirectorykitTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2024-04-05
2024-04-05 08:15Z
HIGH

CVE-2024-2115 — Thimpress Learnpress: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2115

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.0. This is due to missing or incorrect nonce validation on the filter_users functions. This makes it possible for unauthenticated attackers to elevate their privileges to that of a teacher via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVSSv3.1 8.8 (HIGH) · EPSS 51th percentile

CWECWE 352VNDThimpressVNDLearnpressTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-05
2024-04-05 00:00Z
CRIT

500ms to midnight: XZ A.K.A. liblzma backdoor

Elastic Security Labs·elastic.coCVE-2024-30940day

On March 29, 2024, a critical backdoor was discovered in XZ Utils (liblzma) versions 5.6.0 and 5.6.1 affecting Linux distributions and macOS via Homebrew. The malicious code, injected by compromised maintainer JiaT75, was designed to bypass SSH authentication and execute arbitrary code in pre-authentication context via a sophisticated three-stage build-process obfuscation chain. Elastic Security Labs released YARA signatures, osquery queries, and EQL detection rules to identify and block potential compromises.

SRFOsTACTA0004TACTA0001TACTA0003SRFSupply ChainOSLinuxOSMacosSWLiblzma
98
Edit Score
2024-04-04
2024-04-04 15:15Z
MED

CVE-2024-28182 — Nghttp2 Nghttp2: is an implementation of the Hypertext Transfer Protocol version 2 in C.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-28182

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability. CVSSv3.1 5.3 (MEDIUM) · EPSS 100th percentile

CWECWE 770VNDFedoraprojectVNDNghttp2TYPVulnerability
5.3
CVSS v3.1
100
Edit Score
2024-04-04
2024-04-04 09:15Z
HIGH

CVE-2024-26801 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26801

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not responding, the GPIO reset mechanism would free the hci_dev and lead to a use-after-free in hci_error_reset. Here's the call trace observed on a ChromeOS device with Intel AX201: queue_work_on+0x3e/0x6c __hci_cmd_sync_sk+0x2ee/0x4c0 [bluetooth <HASH:3b4a6 CVSSv3.1 8.8 (HIGH) · EPSS 20th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-04
2024-04-04 09:15Z
CRIT

CVE-2024-26800 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26800

In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryption When the decrypt request goes to the backlog and crypto_aead_decrypt returns -EBUSY, tls_do_decryption will wait until all async decryptions have completed. If one of them fails, tls_do_decryption will return -EBADMSG and tls_decrypt_sg jumps to the error path, releasing all the pages. But the pages have been passed to the async callback, and have already CVSSv3.1 9.8 (CRITICAL) · EPSS 20th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-04
2024-04-04 09:15Z
CRIT

CVE-2024-26782 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26782

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inet_opt' for the new socket has the same value as the original one: as a consequence, on program exit it's possible to observe the following splat: BUG: KASAN: double-free in inet_sock_destruct+0x54f/0x8b0 Free of addr ffff888485950880 by task swapper/25/ CVSSv3.1 9.8 (CRITICAL) · EPSS 15th percentile

CWECWE 415TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-04-04
2024-04-04 03:15Z
HIGH

CVE-2024-2008 — Modal: The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2008

The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.2 via deserialization of untrusted input in the awl_modal_popup_box_shortcode function. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow CVSSv3.1 8.8 (HIGH) · EPSS 71th percentile

CWECWE 502VNDModalTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-03
2024-04-03 17:15Z
HIGH

CVE-2024-26779 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26779

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race condition on enabling fast-xmit fast-xmit must only be enabled after the sta has been uploaded to the driver, otherwise it could end up passing the not-yet-uploaded sta via drv_tx calls to the driver, leading to potential crashes because of uninitialized drv_priv data. Add a missing sta->uploaded check and re-check fast xmit after inserting a sta. CVSSv3.1 8.8 (HIGH) · EPSS 9th percentile

CWECWE 362TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-04-03
2024-04-03 17:15Z
CRIT

CVE-2024-26760 — Linux Linux_kernel: That is not done properly for the error case, hitting WARN and NULL pointer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26760

In the Linux kernel, the following vulnerability has been resolved: scsi: target: pscsi: Fix bio_put() for error case As of commit 066ff571011d ("block: turn bio_kmalloc into a simple kmalloc wrapper"), a bio allocated by bio_kmalloc() must be freed by bio_uninit() and kfree(). That is not done properly for the error case, hitting WARN and NULL pointer dereference in bio_free(). CVSSv3.1 9.8 (CRITICAL) · EPSS 15th percentile

CWECWE 476TYPVulnerability
9.8
CVSS v3.1
99
Edit Score