Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 07:38Z
2024-03-28
2024-03-28 14:15Z
CRIT

CVE-2023-6437 — Neutralization: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-6437

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u allows authenticated OS Command Injection. This issue affects TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3 : through 20240328. Also  the vulnerability continues in the TP-Link VX220-G2u and TP-Link CVSSv3.1 9.8 (CRITICAL)

CWECWE 78TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-28
2024-03-28 05:15Z
HIGH

CVE-2024-30244 — Church_admin_project Church_admin: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-30244

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27. CVSSv3.1 8.5 (HIGH)

CWECWE 89VNDChurch Admin ProjectTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2024-03-28
2024-03-28 05:15Z
HIGH

CVE-2024-30236 — Contest-gallery Contest_gallery: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-30236

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4. CVSSv3.1 8.5 (HIGH)

CWECWE 89VNDContest GalleryTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2024-03-28
2024-03-28 05:15Z
HIGH

CVE-2024-30229 — Givewp Givewp: Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-30229

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.4.2. CVSSv3.1 8.0 (HIGH)

CWECWE 502VNDGivewpTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2024-03-28
2024-03-28 02:15Z
HIGH

CVE-2024-1770 — Meta: The Meta Tag Manager plugin for WordPress is vulnerable to PHP Object Injection in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1770

The Meta Tag Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.2 via deserialization of untrusted input in the get_post_data function. This makes it possible for authenticated attackers, with contributor access or higher, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to de CVSSv3.1 8.8 (HIGH) · EPSS 75th percentile

CWECWE 502VNDMetaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-03-27
2024-03-27 15:47Z
HIGH

Mind the Patch Gap: Exploiting an io_uring Vulnerability in Ubuntu

Exodus Intel·blog.exodusintel.comCVE-2024-0582

CVE-2024-0582 is a use-after-free vulnerability in Linux kernel io_uring's provided buffer ring functionality that allows unprivileged users to gain root access via a data-only exploit. The vulnerability existed in kernels 6.4–6.6.4 and was patched in stable 6.6.5 (December 2023), but Ubuntu didn't backport the fix until February 2024, creating a two-month 0day window. The exploit leverages freed page access to modify kernel data structures without code execution, bypassing CFI mitigations.

SRFOsTACTA0004TACTA0005OSLinuxTYPWriteupTYPExploitTYPVulnerabilitySTGPrivesc
78
Edit Score
2024-03-27
2024-03-27 14:15Z
HIGH

CVE-2024-30238 — Contest-gallery Contest_gallery: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-30238

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.2. CVSSv3.1 8.5 (HIGH)

CWECWE 89VNDContest GalleryTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-03-27
2024-03-27 13:15Z
CRIT

CVE-2023-6153 — Authentication: Bypass by Primary Weakness vulnerability in TeoSOFT Software TeoBASE allows Authentication Bypass.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-6153

Authentication Bypass by Primary Weakness vulnerability in TeoSOFT Software TeoBASE allows Authentication Bypass. This issue affects TeoBASE: through 20240327. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL)

CWECWE 305TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-27
2024-03-27 12:15Z
CRIT

CVE-2023-6173 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-6173

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeoSOFT Software TeoBASE allows SQL Injection. This issue affects TeoBASE: through 27032024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 36th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-27
2024-03-27 08:15Z
HIGH

CVE-2024-2398 — Haxx Curl: When an application tells libcurl it wants to allow HTTP/2 server push, and the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2398

When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application. CVSSv3.1 8.6 (HIGH) · EPSS 98th percentile

CWECWE 772VNDAppleVNDFedoraprojectVNDHaxxTYPVulnerability
8.6
CVSS v3.1
100
Edit Score
2024-03-27
2024-03-27 00:00Z
HIGH

Unlocking Power Safely: Privilege Escalation via Linux Process Capabilities

Elastic Security Labs·elastic.co

Elastic Security Labs published a comprehensive technical analysis of privilege escalation via Linux process capabilities, covering misconfiguration vectors including incorrectly set capabilities, capability leaking from parent processes, vulnerable setuid/setgid binaries, kernel vulnerabilities, and abused file attributes. The article details detection strategies using Elastic 8.11+ prebuilt rules and mitigation best practices including least privilege, capability bounding set configuration, and filesystem integrity monitoring.

SRFOsTACTA0004OSLinuxTYPResearchSTGPrivescTECT1548TECT1548.001EXPPrivilege Escalation
68
Edit Score
2024-03-26
2024-03-26 21:15Z
HIGH

CVE-2023-51148 — Trendnet Tew-821dap_firmware: An issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-51148

An issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP v.3.00b06 allows an attacker to execute arbitrary code via the 'mycli' command-line interface component. CVSSv3.1 8.0 (HIGH) · EPSS 41th percentile

CWECWE 121VNDTrendnetTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2024-03-26
2024-03-26 03:15Z
HIGH

CVE-2024-0866 — Check: The Check & Log Email plugin for WordPress is vulnerable to Unauthenticated Hook Injection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-0866

The Check & Log Email plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 1.0.9 via the check_nonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under certain circumstances. The action the attacker wishes to execute needs to have a nonce check, and the nonce needs to be known to the attacker. Furthermore, the absence of a capability check is a requirement. CVSSv3.1 8.1 (HIGH) · EPSS 81th percentile

CWECWE 94VNDCheckTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-03-25
2024-03-25 14:15Z
CRIT

CVE-2024-2865 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2865

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection. This issue affects Quality Management System: through 25032024. CVSSv3.1 9.8 (CRITICAL) · EPSS 22th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-25
2024-03-25 14:15Z
CRIT

CVE-2024-28386 — Home-made Fastmag_sync: An issue in Home-Made.io fastmagsync v.1.7.51 and before allows a remote attacker to execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-28386

An issue in Home-Made.io fastmagsync v.1.7.51 and before allows a remote attacker to execute arbitrary code via the getPhpBin() component. CVSSv3.1 9.8 (CRITICAL) · EPSS 70th percentile

CWECWE 94VNDHomeVNDHome MadeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-25
2024-03-25 10:15Z
CRIT

CVE-2021-47168 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47168

In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer. I reversed the size of the arguments to put the variable on the left. CVSSv3.1 9.8 (CRITICAL) · EPSS 15th percentile

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-25
2024-03-25 10:15Z
CRIT

CVE-2021-47162 — Linux Linux_kernel: Otherwise, it will cause use after free crashes as this appended frag skb are

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47162

In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs It's not a good idea to append the frag skb to a skb's frag_list if the frag_list already has skbs from elsewhere, such as this skb was created by pskb_copy() where the frag_list was cloned (all the skbs in it were skb_get'ed) and shared by multiple skbs. However, the new appended frag skb should have been only seen by the current skb. Otherwise, it w CVSSv3.1 9.8 (CRITICAL) · EPSS 14th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-25
2024-03-25 10:15Z
HIGH

CVE-2021-47160 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47160

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix VLAN traffic leaks PCR_MATRIX field was set to all 1's when VLAN filtering is enabled, but was not reset when it is disabled, which may cause traffic leaks: ip link add br0 type bridge vlan_filtering 1 ip link add br1 type bridge vlan_filtering 1 ip link set swp0 master br0 ip link set swp1 master br1 ip link set br0 type bridge vlan_filtering 0 ip link set br1 type bridge vlan_ CVSSv3.1 8.1 (HIGH) · EPSS 14th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-03-25
2024-03-25 09:15Z
CRIT

CVE-2021-47137 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47137

In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails, DMA should reuse the previous skb and mapping and drop the packet. This patch also increments rx drop counter. CVSSv3.1 9.8 (CRITICAL) · EPSS 14th percentile

CWECWE 770TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-25
2024-03-25 09:15Z
HIGH

CVE-2021-47136 — Linux Linux_kernel: This assumption changed when TC_SKB_EXT extension was extended with additional fields but not all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47136

In the Linux kernel, the following vulnerability has been resolved: net: zero-initialize tc skb extension on allocation Function skb_ext_add() doesn't initialize created skb extension with any value and leaves it up to the user. However, since extension of type TC_SKB_EXT originally contained only single value tc_skb_ext->chain its users used to just assign the chain value without setting whole extension memory to zero first. This assumption changed when TC_SKB_EXT extensio CVSSv3.1 8.6 (HIGH) · EPSS 14th percentile

CWECWE 908TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2024-03-23
2024-03-23 02:15Z
HIGH

CVE-2024-2025 — WooCommerce: Create WooCommerce Member Pages" plugin for WordPress is vulnerable to PHP Object Injection in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2025

The "BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages" plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.20 via deserialization of untrusted input in the get_simple_request function. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could CVSSv3.1 8.8 (HIGH) · EPSS 75th percentile

CWECWE 502VNDWoocommerceTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-03-21
2024-03-21 04:15Z
CRIT

CVE-2024-29859 — Misp-project Misp: In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-29859

In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid file upload. CVSSv3.1 9.8 (CRITICAL) · EPSS 52th percentile

CWECWE 434VNDMispVNDMisp ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-21
2024-03-21 04:15Z
CRIT

CVE-2024-29858 — Misp-project Misp: In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-29858

In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload. CVSSv3.1 9.8 (CRITICAL) · EPSS 30th percentile

CWECWE 616VNDMispVNDMisp ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-21
2024-03-21 04:15Z
HIGH

CVE-2024-1538 — Filemanagerpro File_manager: The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1538

The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.2.4. This is due to missing or incorrect nonce validation on the wp_file_manager page that includes files through the 'lang' parameter. This makes it possible for unauthenticated attackers to include local JavaScript files that can be leveraged to achieve RCE via a forged request granted they can trick a site administrator into performing an action such as CVSSv3.1 8.8 (HIGH) · EPSS 91th percentile

CWECWE 352VNDFilemanagerproTYPVulnerability
8.8
CVSS v3.1
96
Edit Score
2024-03-21
2024-03-21 02:51Z
CRIT

CVE-2024-1202 — Authentication: Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1202

Authentication Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass. This issue affects Octopod: before v1.  NOTE: The vendor was contacted and it was learned that the product is not supported. CVSSv3.1 9.8 (CRITICAL) · EPSS 21th percentile

CWECWE 305TYPVulnerability
9.8
CVSS v3.1
99
Edit Score