Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 19:24Z
2023-10-19
2023-10-19 02:15Z
HIGH

CVE-2023-5336 — Ipanorama_360_wordpress_virtual_tour_builder_project Ipanorama_360_wordpress_virtual_tour_builder: The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-5336

The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level and above permissions to append additional SQL queries into already existing queries that can be used to extract s CVSSv3.1 8.8 (HIGH) · EPSS 36th percentile

CWECWE 89VNDWordpressVNDIpanorama 360 Wordpress Virtual Tour Builder ProjectTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-10-19
2023-10-19 00:00Z
HIGH

Fall 2023 Global Threat Report Outro

Elastic Security Labs·elastic.co

Elastic Security Labs published its 2023 Global Threat Report analyzing over one billion security events, identifying three dominant threat landscape phenomena: heavy adversary investment in defense evasion (43% of observed techniques), endpoint tampering via vulnerable drivers (BYOVD), and credential theft as a low-risk attack vector (80% using OS-native features). The report highlights System Binary Proxy Execution as the most prevalent evasion technique and notes the shift toward cloud and credential-based attacks where endpoint visibility is limited.

SRFOsTACTA0005TACTA0006SRFCloudVNDElasticTYPResearchTYPThreat IntelSTGDefense Evasion
72
Edit Score
2023-10-18
2023-10-18 04:15Z
CRIT

CVE-2023-38545 — Haxx Libcurl: When curl is asked to pass along the host name to the SOCKS5 proxy

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means "let the host reso CVSSv3.1 9.8 (CRITICAL) · EPSS 96th percentile

CWECWE 787VNDFedoraprojectVNDNetappVNDHaxxTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-10-14
2023-10-14 02:15Z
CRIT

CVE-2023-45853 — Zlib Zlib: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-45853

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API. CVSSv3.1 9.8 (CRITICAL) · EPSS 85th percentile

CWECWE 190VNDZlibVNDSmihicaTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-10-13
2023-10-13 00:00Z
HIGH

Disclosing the BLOODALCHEMY backdoor

Elastic Security Labs·elastic.co

Elastic Security Labs disclosed BLOODALCHEMY, a new x86 backdoor shellcode injected into signed benign processes via DLL sideloading (BrDifxapi.exe/BrLogAPI.dll). The malware supports multiple persistence mechanisms (service, registry, scheduled task, COM), execution modes (in-process, separate thread, process injection), and C2 channels (HTTP, named pipes, TCP/UDP sockets) with string obfuscation and modular configuration. The backdoor appears to be part of the REF5961 intrusion set and is still in active development based on debug logging and limited command functionality.

SRFOsTACTA0005TACTA0003TACTA0011TACTA0043OSWindowsTYPResearchTYPThreat Intel
78
Edit Score
2023-10-12
2023-10-12 12:15Z
CRIT

CVE-2023-5046 — Biltay Procost: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390. CVSSv3.1 9.8 (CRITICAL) · EPSS 21th percentile

CWECWE 89VNDBiltayTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-10-12
2023-10-12 12:15Z
CRIT

CVE-2023-5045 — Biltay Kayisi: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-5045

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286. CVSSv3.1 9.8 (CRITICAL) · EPSS 21th percentile

CWECWE 89VNDBiltayTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2023-10-11
2023-10-11 20:15Z
HIGH

CVE-2023-43661 — All-three Cachet: Prior to the 2.4 branch, a template functionality which allows users to create templates

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-43661

Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch contains a patch for this issue. CVSSv3.1 8.8 (HIGH) · EPSS 99th percentile

CWECWE 94CWECWE 74VNDCachetVNDAll ThreeTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2023-10-10
2023-10-10 15:15Z
MED

CVE-2023-30804 — Sangfor Next-gen_application_firewall: The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-30804

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpn_html/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated attacker when paired with CVE-2023-30803. CVSSv3.1 4.9 (MEDIUM) · EPSS 96th percentile

CWECWE 22VNDSangforTYPVulnerability
4.9
CVSS v3.1
78
Edit Score
2023-10-10
2023-10-10 14:15Z
CRIT

CVE-2023-4966 — Citrix Netscaler_application_delivery_controller: Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-4966in the wild

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server. CVSSv3.1 9.4 (CRITICAL) · EPSS 100th percentile

CWECWE 119VNDCitrixTYPVulnerabilitySTAitw exploited
9.4
CVSS v3.1
100
Edit Score
2023-10-10
2023-10-10 14:15Z
HIGH

CVE-2023-44487 — Ietf Http: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-44487in the wild

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CVSSv3.1 7.5 (HIGH) · EPSS 100th percentile

CWECWE 400VNDIetfVNDNghttp2VNDNettyVNDEnvoyproxyTYPVulnerabilitySTAitw exploited
7.5
CVSS v3.1
100
Edit Score
2023-10-07
2023-10-07 01:15Z
CRIT

CVE-2023-45199 — Trustedfirmware Mbed_tls: Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-45199

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

CWECWE 120VNDMbedVNDTrustedfirmwareTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-10-06
2023-10-06 10:15Z
CRIT

CVE-2023-4530 — Turnatasarim Advertising_administration_panel: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-4530

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Turna Advertising Administration Panel allows SQL Injection. This issue affects Advertising Administration Panel: before 1.1. CVSSv3.1 9.8 (CRITICAL) · EPSS 20th percentile

CWECWE 89VNDTurnatasarimTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-10-05
2023-10-05 00:00Z
HIGH

Dancing the night away with named pipes - PIPEDANCE client release

Elastic Security Labs·elastic.co

Elastic Security Labs released a client application for PIPEDANCE, a state-sponsored malware family used for post-compromise lateral movement and reconnaissance. The tool enables researchers to emulate PIPEDANCE's command-and-control communication via named pipes, process injection techniques, and network discovery functions. The release includes detection rules (YARA, behavioral, hunting) and a GitHub repository for community extension.

SRFOsSRFNetworkTACTA0006TACTA0007TACTA0008SWPipedanceVNDElasticTYPResearch
72
Edit Score
2023-10-04
2023-10-04 12:15Z
CRIT

CVE-2023-44208 — Acronis Cyber_protect_home_office: Sensitive information disclosure and manipulation due to missing authorization.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-44208

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575. CVSSv3.1 9.1 (CRITICAL) · EPSS 37th percentile

CWECWE 862VNDAcronisTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2023-10-04
2023-10-04 12:15Z
HIGH

CVE-2023-43261 — Milesight Ur5x_firmware: An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-43261

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components. CVSSv3.1 7.5 (HIGH) · EPSS 99th percentile

CWECWE 532VNDMilesightTYPVulnerability
7.5
CVSS v3.1
100
Edit Score
2023-10-04
2023-10-04 00:00Z
HIGH

Introducing the REF5961 intrusion set

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs disclosed REF5961, a China-nexus intrusion set targeting ASEAN foreign affairs ministries, introducing three new malware families: EAGERBEE (a basic backdoor with dynamic IAT and C2 capabilities), RUDEBIRD (a lightweight HTTPS backdoor with process injection and lateral movement via PsExec), and DOWNTOWN (a modular plugin framework linked to SManager/PhantomNet). The threat actors demonstrate moderate technical maturity with shared infrastructure, code overlap, and targeting of Mongolian government entities via spear-phishing with government lures.

SRFApplicationSRFOsTACTA0004TACTA0005TACTA0001TACTA0002TACTA0007TACTA0003
78
Edit Score
2023-10-03
2023-10-03 21:33Z
CRIT

RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)

Assetnote·blog.assetnote.ioCVE-2023-40044

Progress WS_FTP Ad Hoc contains a remote code execution vulnerability (CVE-2023-40044) exploitable through IIS HTTP modules. The vulnerability allows unauthenticated attackers to achieve RCE on affected systems running the vulnerable WS_FTP Ad Hoc product.

SRFApplicationTACTA0001TACTA0002SRFWebVNDMicrosoftVNDProgressTYPResearchTYPWriteup
78
Edit Score
2023-10-03
2023-10-03 21:15Z
HIGH

CVE-2023-43176 — Afterlogic Aurora_files: A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-43176

A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabredav file. CVSSv3.1 8.8 (HIGH) · EPSS 75th percentile

CWECWE 502VNDAfterlogicTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2023-10-03
2023-10-03 18:15Z
HIGH

CVE-2023-4911 — Netapp Bootstrap_os: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-4911in the wild

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile

CWECWE 787CWECWE 122VNDGnuVNDFedoraprojectVNDNetappTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
100
Edit Score
2023-10-02
2023-10-02 15:15Z
CRIT

CVE-2023-4659 — Free5gc Webconsole: Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-4659

Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an unprivileged remote user is able to create, delete and modify users within theapplication. CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 352VNDFree5gcTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-10-01
2023-10-01 23:43Z
INFO

v1.0.0

NetExec releases·github.com

NetExec v1.0.0 released as a stable baseline version following the project rename. The release includes bug fixes for WMI admin checks, WinRM conditions, WebDAV module exception handling, LDAP logging crashes, and encoding errors. Windows binaries are now provided alongside the traditional Linux installation method.

SRFNetworkVNDNetexecTYPToolSTGDiscoverySTGInitial AccessSTGCred Access
45
Edit Score
2023-09-30
2023-09-30 03:15Z
CRIT

CVE-2023-5201 — Rickbeckman Openhook: The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-5201

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the [php] shortcode setting to be enabled on the vulnerable site. CVSSv3.1 9.9 (CRITICAL) · EPSS 92th percentile

CWECWE 94VNDRickbeckmanVNDOpenhookTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2023-09-28
2023-09-28 03:15Z
HIGH

CVE-2023-41450 — Phpkobo Ajaxnewsticker: An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-41450

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. CVSSv3.1 8.8 (HIGH) · EPSS 68th percentile

CWECWE 94VNDPhpkoboVNDAjaxnewstickerTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-09-27
2023-09-27 23:15Z
HIGH

CVE-2023-41452 — Phpkobo Ajaxnewsticker: Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-41452

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. CVSSv3.1 8.8 (HIGH) · EPSS 44th percentile

CWECWE 352VNDPhpkoboTYPVulnerability
8.8
CVSS v3.1
94
Edit Score