Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 10:23Z
2024-02-28
2024-02-28 09:15Z
CRIT

CVE-2021-46999 — Linux Linux_kernel: 0x29acd70f1000a: 0000 [#1] SMP PTI [] RIP: 0010:sctp_ulpevent_notify_peer_addr_change+0x4b/0x1fa [sctp] [] sctp_assoc_control_transport+0x1b9/0x210 [sctp] [] sctp_

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-46999

In the Linux kernel, the following vulnerability has been resolved: sctp: do asoc update earlier in sctp_sf_do_dupcook_a There's a panic that occurs in a few of envs, the call trace is as below: [] general protection fault, ... 0x29acd70f1000a: 0000 [#1] SMP PTI [] RIP: 0010:sctp_ulpevent_notify_peer_addr_change+0x4b/0x1fa [sctp] [] sctp_assoc_control_transport+0x1b9/0x210 [sctp] [] sctp_do_8_2_transport_strike.isra.16+0x15c/0x220 [sctp] [] sctp_cmd_interprete CVSSv3.1 9.8 (CRITICAL) · EPSS 16th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-27
2024-02-27 19:04Z
HIGH

CVE-2021-46955 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds in ip_do_fragment+0x1b03/0x1f60 Read of size 1 at addr ffff888112fc713c by task handler2/1367 CPU: 0 PID: 1367 Comm: handler2 Not tainted 5.12.0-rc6+ #418 Hardware name: Red CVSSv3.1 8.2 (HIGH) · EPSS 17th percentile

CWECWE 125TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2024-02-27
2024-02-27 07:15Z
CRIT

CVE-2021-46911 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-46911

In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel panic sometimes. It's better to take tx_ctx lock for the complete skb transmit, to avoid page cleanup if ACK received in middle. CVSSv3.1 9.8 (CRITICAL) · EPSS 13th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-27
2024-02-27 06:15Z
CRIT

CVE-2024-1698 — Wpdeveloper Notificationx: The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1698

The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can b CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 89VNDWpdeveloperVNDNotificationxTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-02-26
2024-02-26 18:15Z
CRIT

CVE-2019-25160 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-25160

In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both errors are embarassingly simple, and the fixes are straightforward. As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlbl_bitmap_walk() patch to cipso_v4_bitmap_walk() as netlbl_bitmap_walk() d CVSSv3.1 9.1 (CRITICAL) · EPSS 17th percentile

CWECWE 125TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-02-26
2024-02-26 16:27Z
HIGH

CVE-2024-23605 — Ggml Llama.cpp: A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-23605

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. CVSSv3.1 8.8 (HIGH) · EPSS 35th percentile

CWECWE 787CWECWE 190VNDGgmlTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-26
2024-02-26 16:27Z
HIGH

CVE-2024-23496 — Ggml Llama.cpp: A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-23496

A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. CVSSv3.1 8.8 (HIGH) · EPSS 35th percentile

CWECWE 787CWECWE 190VNDGgmlTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-02-26
2024-02-26 16:27Z
HIGH

CVE-2024-22873 — Tencent Blueking_configuration_management_database: Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-22873

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/subscription.go). This vulnerability allows attackers to access internal requests via a crafted POST request. CVSSv3.1 8.1 (HIGH) · EPSS 47th percentile

CWECWE 918VNDTencentTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-02-26
2024-02-26 16:27Z
HIGH

CVE-2024-21836 — Ggml Llama.cpp: A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-21836

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. CVSSv3.1 8.8 (HIGH) · EPSS 35th percentile

CWECWE 787CWECWE 190VNDGgmlTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-26
2024-02-26 16:27Z
HIGH

CVE-2024-21825 — Ggml Llama.cpp: A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-21825

A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. CVSSv3.1 8.8 (HIGH) · EPSS 41th percentile

CWECWE 787CWECWE 190VNDGgmlTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-26
2024-02-26 16:27Z
HIGH

CVE-2024-21802 — Ggml Llama.cpp: A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-21802

A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787CWECWE 122VNDGgmlTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-26
2024-02-26 16:27Z
HIGH

CVE-2024-1710 — Unlimited-elements Addon_library: The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1710

The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the onAjaxAction function action in all versions up to, and including, 1.3.76. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform several unauthorized actions including uploading arbitrary files. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 862VNDUnlimited ElementsVNDAddonTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-24
2024-02-24 00:00Z
HIGH

PIKABOT, I choose you!

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs documented a new PIKABOT loader campaign (February 2024) featuring significant updates to the malware's unpacking, obfuscation, and network communication mechanisms. The updated variant uses scattered base64-encoded chunks from the .data section for payload delivery, employs syscall-based process injection to bypass EDR hooks, and removes AES encryption in favor of RC4 with byte-swapping for C2 traffic. The core module now stores configuration in plaintext at runtime and exhibits signs of active development, suggesting further iterations are imminent.

SRFOsTACTA0005TACTA0001TACTA0002SRFNetworkTACTA0007TACTA0011TACTA0010
78
Edit Score
2024-02-23
2024-02-23 23:15Z
HIGH

CVE-2024-26192 — Microsoft Edge_chromium: Edge (Chromium-based) Information Disclosure Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26192

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability CVSSv3.1 8.2 (HIGH) · EPSS 72th percentile

CWECWE 359VNDMicrosoftTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2024-02-23
2024-02-23 15:15Z
HIGH

CVE-2024-26598 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26598

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the cache, such as a DISCARD ITS command. The root of the problem is that vgic_its_check_cache() does not elevate the refcount on the vgic_irq before dropping the lock that serializes refcount changes. Have vgic_its_check_ CVSSv3.1 8.8 (HIGH) · EPSS 15th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-23
2024-02-23 14:15Z
CRIT

CVE-2024-26594 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26594

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid. CVSSv3.1 9.1 (CRITICAL) · EPSS 100th percentile

CWECWE 125TYPVulnerability
9.1
CVSS v3.1
100
Edit Score
2024-02-23
2024-02-23 00:00Z
HIGH

Ransomware in the honeypot: how we capture keys with sticky canary files

Elastic Security Labs·elastic.co

Elastic Security Labs published research on extracting encryption keys from ransomware processes using memory snapshots triggered by canary file detection. The technique leverages Elastic Defend's ransomware protection (available since 8.11) to suspend processes attempting to write to honeypot files, then dumps process memory to recover cryptographic material. Demonstrated against NOTPETYA (direct key extraction) and WannaCry (PRNG state prediction), with proof-of-concept code released on GitHub.

SRFOsTACTA0007OSWindowsSWElastic DefendVNDElasticTYPResearchTYPToolSTGImpact
72
Edit Score
2024-02-22
2024-02-22 17:15Z
CRIT

CVE-2024-26592 — Linux Linux_kernel: It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_connection() function.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26592

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_connection() function. CVSSv3.1 9.8 (CRITICAL) · EPSS 54th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-22
2024-02-22 10:15Z
HIGH

CVE-2023-29181 — Fortinet Fortiproxy: A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-29181

A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all versions, FortiOS 5.4 all versions, FortiOS 5.2 all versions, FortiOS 5.0 all versions, FortiOS 4.3 all versions, FortiOS 4.2 all versions, FortiOS 4.1 all versions, FortiOS 4.0 all versions, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through CVSSv3.1 8.8 (HIGH) · EPSS 53th percentile

CWECWE 134VNDFortinetTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-21
2024-02-21 18:15Z
CRIT

CVE-2024-1212 — Progress Loadmaster: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1212in the wild

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. CVSSv3.1 10.0 (CRITICAL) · EPSS 100th percentile

CWECWE 78VNDProgressTYPVulnerabilitySTAitw exploited
10.0
CVSS v3.1
100
Edit Score
2024-02-21
2024-02-21 16:15Z
HIGH

CVE-2024-1708 — Connectwise Screenconnect: 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1708

ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems. CVSSv3.1 8.4 (HIGH) · EPSS 98th percentile

CWECWE 22VNDConnectwiseTYPVulnerability
8.4
CVSS v3.1
100
Edit Score
2024-02-21
2024-02-21 15:15Z
CRIT

CVE-2024-26585 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tls: fix race between

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26585

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(). Reorder scheduling the work before calling complete(). This seems more logical in the first place, as it's the inverse order of what the submitting thread will do. CVSSv3.1 9.8 (CRITICAL) · EPSS 9th percentile

CWECWE 362TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-21
2024-02-21 15:15Z
CRIT

CVE-2024-26584 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26584

In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY instead of -EINPROGRESS in valid situations. For example, when the cryptd queue for AESNI is full (easy to trigger with an artificially low cryptd.cryptd_max_cpu_qlen), requests will be enqueued to the backlog but still pr CVSSv3.1 9.8 (CRITICAL) · EPSS 16th percentile

CWECWE 755TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-21
2024-02-21 15:15Z
CRIT

CVE-2024-26583 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tls: fix race between

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26583

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete() so any code past that point risks touching already freed data. Try to avoid the locking and extra flags altogether. Have the main thread hold an extra reference, this way we can depend solely on the atomic ref counter for synchronization. CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

CWECWE 362TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-21
2024-02-21 15:15Z
CRIT

CVE-2024-26582 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26582

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb. CVSSv3.1 9.8 (CRITICAL) · EPSS 18th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score