Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-26 07:56Z
2023-05-17
2023-05-17 02:15Z
HIGH

CVE-2023-2706 — Xootix Otp_login_woocommerce_\&_gravity_forms: The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2706

The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass. This is due to the fact that when generating OTP codes for users to use in order to login via phone number, the plugin returns these codes in an AJAX response. This makes it possible for unauthenticated attackers to obtain login codes for administrators. This does require an attacker have access to the phone number configured for an account, which can be obtained via social CVSSv3.1 8.1 (HIGH) · EPSS 82th percentile

CWECWE 287VNDXootixVNDOtpTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2023-05-16
2023-05-16 09:15Z
CRIT

CVE-2023-2499 — Metagauss Registrationmagic: The RegistrationMagic plugin for WordPress is vulnerable to authentication bypass in versions up to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2499

The RegistrationMagic plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.2.1.0. This is due to insufficient verification on the user being supplied during a Google social login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. CVSSv3.1 9.8 (CRITICAL) · EPSS 71th percentile

CWECWE 288CWECWE 287VNDMetagaussVNDRegistrationmagicTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-05-16
2023-05-16 00:00Z
HIGH

Elastic Security Labs discovers the LOBSHOT malware

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs identified LOBSHOT, a new malware family attributed to TA505 with moderate confidence, propagated via malvertising (fake Google Ads impersonating legitimate software like AnyDesk). The malware combines a hidden VNC (hVNC) module for stealthy remote access with banking trojan and info-stealing capabilities targeting cryptocurrency wallet extensions across Chrome, Edge, and Firefox. Over 550 unique samples have been observed since July 2022, with active development ongoing.

SRFOsTACTA0005TACTA0001TACTA0002TACTA0006TACTA0003TACTA0009OSWindows
78
Edit Score
2023-05-15
2023-05-15 00:00Z
HIGH

Exploring Windows UAC Bypasses: Techniques and Detection Strategies

Elastic Security Labs·elastic.co

Elastic Security Labs published a comprehensive technical analysis of Windows UAC bypass techniques, covering registry manipulation, DLL hijacking, elevated COM interfaces, and token security attributes. The research documents detection strategies using EQL queries and discusses evasion techniques employed by malware families like DarkSide, LockBit, and Glupteba to achieve privilege escalation from Medium to High/System integrity.

SRFOsTACTA0004TACTA0005OSWindowsVNDElasticTYPResearchSTGDefense EvasionSTGPrivesc
78
Edit Score
2023-05-12
2023-05-12 14:15Z
CRIT

CVE-2023-27823 — Optoma 1080pstx: An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27823

An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials. CVSSv3.1 9.8 (CRITICAL) · EPSS 99th percentile

CWECWE 287CWECWE 295VNDOptomaTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-05-11
2023-05-11 13:15Z
CRIT

CVE-2023-29863 — Medisys Weblab: Products v19.4.03 was discovered to contain a SQL injection vulnerability via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-29863

Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files. CVSSv3.1 9.8 (CRITICAL) · EPSS 58th percentile

CWECWE 89VNDMedisysVNDMedicalTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-05-09
2023-05-09 13:15Z
CRIT

CVE-2023-30899 — Siemens Siveillance_video: This could allow an authenticated remote attacker to execute code on the affected system.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-30899

A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 HotfixRev5), Siveillance Video 2022 R3 (All versions < V22.3 HotfixRev2), Siveillance CVSSv3.1 9.9 (CRITICAL) · EPSS 65th percentile

CWECWE 502VNDSiemensTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
728 × 90 / responsive · programmatic ad slot
2023-05-09
2023-05-09 13:15Z
CRIT

CVE-2023-30898 — Siemens Siveillance_video: This could allow an authenticated remote attacker to execute code on the affected system.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-30898

A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 HotfixRev5), Siveillance Video 2022 R3 (All versions < V22.3 HotfixRev2), Siveillance CVSSv3.1 9.9 (CRITICAL) · EPSS 65th percentile

CWECWE 502VNDSiemensTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2023-05-09
2023-05-09 13:15Z
CRIT

CVE-2023-27407 — Siemens Scalance_lpe9403_firmware: The web based management of affected device does not properly validate user input, making

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27407

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user. CVSSv3.1 9.9 (CRITICAL) · EPSS 70th percentile

CWECWE 77CWECWE 78VNDSiemensTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2023-05-08
2023-05-08 20:15Z
HIGH

CVE-2023-32233 — Linux Linux_kernel: In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-32233

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled. CVSSv3.1 7.8 (HIGH) · EPSS 96th percentile

CWECWE 416TYPVulnerability
7.8
CVSS v3.1
93
Edit Score
2023-05-08
2023-05-08 09:15Z
CRIT

CVE-2023-31039 — Apache Brpc: Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-31039

Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary code via ServerOptions::pid_file. An attacker that can influence the ServerOptions pid_file parameter with which the bRPC server is started can execute arbitrary code with the permissions of the bRPC process. Solution: 1. upgrade to bRPC >= 1.5.0, download link:  https://dist.apache.org/repos/dist/release/brpc/1.5.0/ https://dist.apache.org/repos/dist/release/brpc/1.5.0/ 2. I CVSSv3.1 9.8 (CRITICAL) · EPSS 74th percentile

CWECWE 20VNDApacheVNDSecurityTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-05-08
2023-05-08 01:15Z
CRIT

CVE-2023-30185 — Crmeb Crmeb: v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-30185

CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php. CVSSv3.1 9.8 (CRITICAL) · EPSS 68th percentile

CWECWE 434VNDCrmebTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-05-05
2023-05-05 12:15Z
CRIT

CVE-2023-30242 — Netentsec Application_security_gateway: NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-30242

NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 89VNDAsgVNDNetentsecTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-05-05
2023-05-05 00:00Z
CRIT

Elastic users protected from SUDDENICON’s supply chain attack

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs released triage analysis and detection logic for SUDDENICON, a supply-chain compromise affecting 3CX VoIP softphone users. The malicious 3CXDesktopApp installer contains backdoored ffmpeg.dll and d3dcompiler_47.dll libraries that implement a 7-day sleep timer before downloading additional payloads from GitHub-hosted C2 infrastructure and executing information-stealing malware. Elastic provides YARA rules, KQL/EQL hunting queries, and file hashes for affected Windows and macOS versions.

SRFApplicationTACTA0001TACTA0002TACTA0011SRFSupply ChainOSWindowsOSMacosSW3cxdesktopapp
82
Edit Score
2023-05-04
2023-05-04 20:15Z
CRIT

CVE-2023-23059 — Geovision Gv-edge_recording_manager: An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-23059

An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default installation and allows attackers to execute arbitrary code and gain escalated privileges. CVSSv3.1 9.8 (CRITICAL) · EPSS 71th percentile

CWECWE 276VNDGeovisionTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-05-04
2023-05-04 00:00Z
HIGH

Unpacking ICEDID

Elastic Security Labs·elastic.co

Elastic Security Labs released a comprehensive toolkit and tutorial for unpacking and analyzing ICEDID malware, including custom Python scripts to decrypt payloads, extract embedded binaries from fake GZip containers, rebuild custom PE formats, and execute the core binary in a controlled environment. The release includes the nightMARE library and six specialized tools that automate the reverse-engineering process for ICEDID's GZip variant, enabling analysts to extract C2 configuration, browser-hooking payloads, and other embedded malware components.

SRFApplicationTACTA0005SWIcedidVNDElasticTYPResearchTYPToolSTGDefense EvasionSTGExecution
78
Edit Score
2023-05-02
2023-05-02 20:15Z
CRIT

CVE-2023-29778 — Gl-inet Gl-mt3000_firmware: GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-29778

GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread. CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

CWECWE 78VNDGl InetVNDMt3000TYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-04-28
2023-04-28 17:15Z
CRIT

CVE-2023-27973 — Hp Laserjet_pro_m304-m305_w1a46a_firmware: Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27973

Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 71th percentile

CWECWE 787VNDHpVNDCertainTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-28
2023-04-28 16:15Z
CRIT

CVE-2023-27972 — Hp Laserjet_pro_m304-m305_w1a46a_firmware: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27972

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 71th percentile

CWECWE 120VNDHpVNDCertainTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-28
2023-04-28 16:15Z
CRIT

CVE-2023-27971 — Hp Laserjet_pro_m304-m305_w1a46a_firmware: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27971

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege. CVSSv3.1 9.8 (CRITICAL) · EPSS 55th percentile

CWECWE 120VNDHpVNDCertainTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-27
2023-04-27 02:15Z
CRIT

CVE-2022-47758 — Nanoleaf Nanoleaf_firmware: firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-47758

Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack. CVSSv3.1 9.8 (CRITICAL) · EPSS 68th percentile

CWECWE 295VNDNanoleafTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-27
2023-04-27 00:15Z
CRIT

CVE-2023-2297 — Cozmoslabs Profile_builder: The Profile Builder – User Profile & User Registration Forms plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2297

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently us CVSSv3.1 9.8 (CRITICAL) · EPSS 47th percentile

CWECWE 287CWECWE 620VNDCozmoslabsVNDProfileTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-26
2023-04-26 00:15Z
CRIT

CVE-2023-30404 — Aigital Wireless-n_repeater_mini_router_firmware: Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-30404

Aigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability via the sysCmd parameter in the formSysCmd function. This vulnerability is exploited via a crafted HTTP request. CVSSv3.1 9.8 (CRITICAL) · EPSS 82th percentile

CWECWE 94VNDAigitalTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-04-20
2023-04-20 16:15Z
HIGH

CVE-2023-27351 — Papercut Papercut_mf: This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27351in the wild

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226. CVSSv3.1 7.5 (HIGH) · EPSS 100th percentile

CWECWE 287VNDPapercutTYPVulnerabilitySTAitw exploited
7.5
CVSS v3.1
100
Edit Score
2023-04-19
2023-04-19 16:15Z
MED

CVE-2023-22894 — Strapi Strapi: through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-22894in the wild

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username CVSSv3.1 4.9 (MEDIUM) · EPSS 76th percentile

CWECWE 312VNDStrapiTYPVulnerabilitySTAitw exploited
4.9
CVSS v3.1
75
Edit Score