Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-26 08:35Z
2023-04-19
2023-04-19 00:15Z
CRIT

CVE-2023-29525 — Xwiki Xwiki: Affected versions of xwiki are subject to code injection in the `since` parameter of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-29525

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injection in the `since` parameter of the `/xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration` endpoint. This provides an XWiki syntax injection attack via the since-parameter, allowing privilege escalation from view to programming rights and subsequent code execution privilege. The vulnerability has bee CVSSv3.1 9.9 (CRITICAL) · EPSS 100th percentile

CWECWE 74VNDXwikiTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2023-04-18
2023-04-18 13:15Z
CRIT

CVE-2022-46640 — Nanoleaf Nanoleaf_desktop: Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-46640

Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request. CVSSv3.1 9.8 (CRITICAL) · EPSS 82th percentile

CWECWE 77VNDNanoleafTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-04-17
2023-04-17 14:15Z
CRIT

CVE-2023-1873 — Faturamatik Bircard: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-1873

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Faturamatik Bircard allows SQL Injection.This issue affects Bircard: before 23.04.05. CVSSv3.1 9.8 (CRITICAL) · EPSS 48th percentile

CWECWE 89VNDFaturamatikTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-17
2023-04-17 12:15Z
CRIT

CVE-2023-1723 — Vegayazilim Mobile_assistant: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-1723

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veragroup Mobile Assistant allows SQL Injection.This issue affects Mobile Assistant: before 21.S.2343. CVSSv3.1 9.8 (CRITICAL) · EPSS 48th percentile

CWECWE 89VNDVegayazilimTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-17
2023-04-17 11:15Z
HIGH

CVE-2023-2017 — Shopware Shopware: Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2017

Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox extension to bypass the validation checks in `Shopware\Core\Framework\Adapter\Twig\SecurityExtension` and call any arbitrary PHP function and thus execute arbitrary code/commands via usage of fully-qualified names, supplied as array CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile

CWECWE 94CWECWE 184CWECWE 1336VNDShopwareTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2023-04-15
2023-04-15 08:15Z
CRIT

CVE-2023-2027 — Zm_ajax_login_\&_register_project Zm_ajax_login_\&_register: The ZM Ajax Login & Register plugin for WordPress is vulnerable to authentication bypass

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2027

The ZM Ajax Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.2. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username. CVSSv3.1 9.8 (CRITICAL) · EPSS 62th percentile

CWECWE 288CWECWE 287VNDZm Ajax Login Register ProjectVNDAjaxTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-14
2023-04-14 21:15Z
HIGH

CVE-2023-2008 — Linux Linux_kernel: This issue occurs due to the lack of proper validation of user-supplied data, which

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2008

A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel. CVSSv3.1 8.2 (HIGH) · EPSS 60th percentile

CWECWE 129TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2023-04-14
2023-04-14 14:15Z
CRIT

CVE-2023-1833 — Redline Router_firmware: Authentication Bypass by Primary Weakness vulnerability in DTS Electronics Redline Router firmware allows Authentication

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-1833

Authentication Bypass by Primary Weakness vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass.This issue affects Redline Router: before 7.17. CVSSv3.1 9.8 (CRITICAL) · EPSS 58th percentile

CWECWE 287CWECWE 305VNDRedlineTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-14
2023-04-14 14:15Z
CRIT

CVE-2023-1803 — Redline Router_firmware: Authentication Bypass by Alternate Name vulnerability in DTS Electronics Redline Router firmware allows Authentication

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-1803

Authentication Bypass by Alternate Name vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass.This issue affects Redline Router: before 7.17. CVSSv3.1 9.8 (CRITICAL) · EPSS 58th percentile

CWECWE 287CWECWE 289VNDRedlineTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-14
2023-04-14 09:15Z
CRIT

CVE-2023-1863 — Eskom El_terminali_\(su_okuma\)_uygulamalarimiz: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-1863

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.This issue affects Water Metering Software: before 23.04.06. CVSSv3.1 9.8 (CRITICAL) · EPSS 70th percentile

CWECWE 89VNDEskomTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-13
2023-04-13 20:15Z
CRIT

CVE-2023-27667 — Auto_dealer_management_system_project Auto_dealer_management_system: Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27667

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 89VNDAutoVNDAuto Dealer Management System ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-13
2023-04-13 17:15Z
CRIT

CVE-2023-27779 — Amsystem Am_presencia: AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27779

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form. CVSSv3.1 9.8 (CRITICAL) · EPSS 59th percentile

CWECWE 89VNDAmsystemVNDPresenciaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-13
2023-04-13 14:15Z
CRIT

CVE-2023-27812 — Bloofox Bloofoxcms: v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file()

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27812

bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function. CVSSv3.1 9.1 (CRITICAL) · EPSS 65th percentile

CWECWE 22VNDBloofoxTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2023-04-13
2023-04-13 00:00Z
HIGH

BLISTER Loader

Elastic Security Labs·elastic.co

Elastic Security Labs published an in-depth technical analysis of BLISTER, an actively developed malware loader that remains largely undetected despite widespread use distributing ransomware, stealers, trojans, and Cobalt Strike. The analysis details BLISTER's sophisticated evasion techniques including DLL tampering, anti-debug mechanisms, manual API resolution via hashing, Heaven's Gate x64 calls, and three distinct payload injection methods (shellcode, reflective DLL, process hollowing). Elastic released an open-source configuration extractor tool to automate payload recovery and campaign tracking.

SRFOsTACTA0004TACTA0005TACTA0003OSWindowsTYPResearchTYPToolSTGDefense Evasion
78
Edit Score
2023-04-12
2023-04-12 19:33Z
INFO

Volatility 3 2.4.1

Volatility3 releases·github.com

Volatility 3 version 2.4.1 released with new Linux and Windows memory analysis plugins (sockstat, iomem, psscan, envars, drivermodule, vadwalk), improved Windows pstree filtering, and infrastructure improvements including Python 3.7+ requirement and replacement of python-snappy with ctypes.

SRFOsVNDVolatilityTYPTool
35
Edit Score
2023-04-12
2023-04-12 17:15Z
HIGH

CVE-2023-27216 — Dlink Dsl-3782_firmware: An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27216

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page. CVSSv3.1 8.8 (HIGH) · EPSS 90th percentile

CWECWE 78VNDDlinkVNDLinkTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2023-04-10
2023-04-10 00:00Z
HIGH

Attack chain leads to XWORM and AGENTTESLA

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs documented a multi-stage malware campaign delivering XWORM and AGENTTESLA via weaponized Word documents. The attack chain uses RTF-embedded Excel macros to download obfuscated PowerShell scripts that establish persistence, disable AMSI/Defender, create backdoor accounts, and inject payloads into signed Windows binaries via process hollowing. The campaign abuses free file hosting (MediaFire) and Discord webhooks for C2.

SRFApplicationSRFOsTACTA0005TACTA0001TACTA0002TACTA0003TACTA0011OSWindows
68
Edit Score
2023-04-05
2023-04-05 19:15Z
CRIT

CVE-2022-4939 — Wclovers Wcfm_membership: THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-4939

THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings. This makes it possible for unauthenticated attackers to modify the membership registration form in a way that allows them to set the role for registration to that of any user including administrators. Once configured, the attacker can t CVSSv3.1 9.8 (CRITICAL) · EPSS 96th percentile

CWECWE 862VNDWcloversVNDTheTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-04-05
2023-04-05 18:15Z
HIGH

CVE-2022-4935 — Wclovers Wcfm_marketplace: The WCFM Marketplace plugin for WordPress is vulnerable to unauthorized modification and access of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-4935

The WCFM Marketplace plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 3.4.11 due to missing capability checks on various AJAX actions. This makes it possible for authenticated attackers, with minimal permissions such as subscribers, to perform a wide variety of actions such as modifying shipping method details, modifying products, deleting arbitrary posts, and privilege escalation (via the wp_ajax_wcfm_vendor CVSSv3.1 8.8 (HIGH) · EPSS 44th percentile

CWECWE 89CWECWE 862VNDWcloversVNDWcfmTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-04-04
2023-04-04 15:15Z
CRIT

CVE-2021-28235 — Etcd Etcd: Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function. CVSSv3.1 9.8 (CRITICAL) · EPSS 73th percentile

CWECWE 287VNDEtcdTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-04
2023-04-04 15:15Z
CRIT

CVE-2020-29312 — Zend Zend_framework: An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-29312

An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020. CVSSv3.1 9.8 (CRITICAL)

CWECWE 502VNDZendTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-04
2023-04-04 09:15Z
CRIT

CVE-2023-1728 — Fernus Learning_management_systems: Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-1728

Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection.This issue affects LMS: before 23.04.03. CVSSv3.1 9.8 (CRITICAL) · EPSS 81th percentile

CWECWE 434VNDFernusTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-03
2023-04-03 14:15Z
CRIT

CVE-2023-1765 — Akbim Panon: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-1765

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akbim Computer Panon allows SQL Injection.This issue affects Panon: before 1.0.2. CVSSv3.1 9.8 (CRITICAL) · EPSS 41th percentile

CWECWE 89VNDAkbimTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-04-03
2023-04-03 05:15Z
CRIT

CVE-2023-26119 — Htmlunit Htmlunit: Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-26119

Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. CVSSv3.1 9.8 (CRITICAL) · EPSS 84th percentile

CWECWE 94VNDHtmlunitTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-03-31
2023-03-31 20:15Z
CRIT

CVE-2023-27162 — Openapi-generator Openapi_generator: up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-27162

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. CVSSv3.1 9.1 (CRITICAL) · EPSS 57th percentile

CWECWE 918VNDOpenapi GeneratorTYPVulnerability
9.1
CVSS v3.1
96
Edit Score