Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-26 18:06Z
2022-09-06
2022-09-06 18:15Z
HIGH

CVE-2022-2436 — W3eden Download_manager: The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-2436

The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'file[package_dir]' parameter in versions up to, and including 3.2.49. This makes it possible for authenticated attackers with contributor privileges and above to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the CVSSv3.1 8.8 (HIGH) · EPSS 78th percentile

CWECWE 502VNDW3edenVNDDownloadTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2022-09-06
2022-09-06 18:15Z
HIGH

CVE-2022-2434 — Instawp String_locator: The String Locator plugin for WordPress is vulnerable to deserialization of untrusted input via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-2434

The String Locator plugin for WordPress is vulnerable to deserialization of untrusted input via the 'string-locator-path' parameter in versions up to, and including 2.5.0. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they can trick a site administrator into performing an action such as clicking on a link, that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP CVSSv3.1 8.8 (HIGH) · EPSS 90th percentile

CWECWE 502VNDInstawpTYPVulnerability
8.8
CVSS v3.1
96
Edit Score
2022-09-06
2022-09-06 18:15Z
HIGH

CVE-2022-2233 — Banner_cycler_project Banner_cycler: The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-2233

The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the pabc_admin_slides_postback() function found in the ~/admin/admin.php file. This makes it possible for unauthenticated attackers to inject malicious web scripts into the page, granted they can trick a site’s administrator into performing an action such as clicking on a link CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 352VNDBanner Cycler ProjectVNDBannerTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2022-09-02
2022-09-02 21:15Z
CRIT

CVE-2022-36640 — Influxdata Influxdb: The default settings do NOT enable authentication and authorization."

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-36640

influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deployed on a publicly accessible endpoint, we strongly recommend authentication be enabled. Otherwise the data will be publicly available to any unauthenticated user. The default settings do NOT enable authentication and aut CVSSv3.1 9.8 (CRITICAL) · EPSS 79th percentile

CWECWE 276VNDInfluxdataTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-09-01
2022-09-01 18:15Z
CRIT

CVE-2020-35527 — Sqlite Sqlite: In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-35527

In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. CVSSv3.1 9.8 (CRITICAL) · EPSS 68th percentile

CWECWE 119VNDSqliteVNDNetappTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2022-08-31
2022-08-31 21:15Z
CRIT

CVE-2022-36202 — Doctor\'s_appointment_system_project Doctor\'s_appointment_system: Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-36202

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter. CVSSv3.1 9.8 (CRITICAL) · EPSS 55th percentile

CWECWE 639VNDAppointmentVNDDoctor S Appointment System ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2022-08-31
2022-08-31 16:15Z
HIGH

CVE-2022-1271 — Gnu Gzip: An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low pr CVSSv3.1 8.8 (HIGH) · EPSS 92th percentile

CWECWE 20CWECWE 179VNDGnuVNDTukaaniTYPVulnerability
8.8
CVSS v3.1
96
Edit Score
728 × 90 / responsive · programmatic ad slot
2022-08-31
2022-08-31 00:00Z
HIGH

LUNA Ransomware Attack Pattern Analysis

Elastic Security Labs·elastic.co

Elastic Security Labs published a comprehensive technical analysis of LUNA ransomware, a Rust-based cross-platform variant first identified by Kaspersky in July 2022. The research dissects execution chains, encryption mechanisms, and behavioral differences between Windows and Linux variants, revealing that the Windows implementation is significantly more mature with proper OS-aware safeguards, while the Linux variant contains vestigial Windows code and lacks critical system-file protections. The malware uses x25519 elliptic-curve key exchange with AES-CTR encryption, hardcoded initialization vectors, and employs service/process termination to disable security products.

SRFOsTACTA0005TACTA0007OSLinuxOSWindowsSWLunaTYPResearchSTGExecution
72
Edit Score
2022-08-30
2022-08-30 16:15Z
CRIT

CVE-2022-37176 — Tendacn Ac6_firmware: Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-37176

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard. CVSSv3.1 9.8 (CRITICAL) · EPSS 57th percentile

VNDTendaVNDTendacnTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2022-08-29
2022-08-29 21:15Z
CRIT

CVE-2022-32993 — Totolink A7000r_firmware: A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-32993

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh. CVSSv3.1 9.8 (CRITICAL) · EPSS 52th percentile

VNDTotolinkTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2022-08-28
2022-08-28 17:15Z
CRIT

CVE-2022-38555 — Linksys E1200_firmware: E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-38555

Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name. CVSSv3.1 9.8 (CRITICAL) · EPSS 96th percentile

CWECWE 787VNDLinksysTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-08-28
2022-08-28 16:15Z
CRIT

CVE-2022-37053 — Trendnet Tew733gr_firmware: TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-37053

TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php. CVSSv3.1 9.8 (CRITICAL) · EPSS 84th percentile

CWECWE 94VNDTrendnetTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-08-23
2022-08-23 12:15Z
CRIT

CVE-2021-42627 — Dlink Dir-615_firmware: The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42627

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page. CVSSv3.1 9.8 (CRITICAL) · EPSS 99th percentile

VNDDlinkVNDWanTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-08-23
2022-08-23 01:15Z
CRIT

CVE-2021-42232 — Tp-link Archer_a7_firmware: Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42232

TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. This will cause an attacker to execute arbitrary commands on the router. CVSSv3.1 9.8 (CRITICAL) · EPSS 86th percentile

CWECWE 78VNDTp LinkVNDLinkTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-08-22
2022-08-22 00:00Z
HIGH

Exploring the QBOT Attack Pattern

Elastic Security Labs·elastic.co

Elastic Security Labs published a comprehensive technical analysis of the QBOT/QAKBOT trojan, a prolific modular malware family active since 2007. The research details the malware's execution chain, defense evasion tactics (including watchdog process monitoring and AV detection), persistence mechanisms via registry run keys and scheduled tasks, privilege escalation via schtasks.exe, and network infrastructure analysis identifying 138 C2 IP addresses linked to 339 additional malicious samples. Elastic released an open-source QBOT configuration extractor tool and provided YARA detection rules.

SRFOsTACTA0004TACTA0005TACTA0002TACTA0003TACTA0011OSWindowsSWQakbot
78
Edit Score
2022-08-19
2022-08-19 15:15Z
CRIT

CVE-2022-35201 — Tenda Ac18_firmware: Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. CVSSv3.1 9.8 (CRITICAL) · EPSS 76th percentile

VNDTendaTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-08-19
2022-08-19 02:15Z
HIGH

CVE-2022-35167 — Prinitix Cloud_print_management: Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-35167

Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions. CVSSv3.1 8.8 (HIGH) · EPSS 57th percentile

CWECWE 732VNDPrintixVNDPrinitixTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2022-08-15
2022-08-15 12:15Z
CRIT

CVE-2022-36262 — Taogogo Taocms: in the website settings that allows arbitrary php code to be injected by modifying

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-36262

An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php. CVSSv3.1 9.8 (CRITICAL) · EPSS 71th percentile

CWECWE 94VNDTaogogoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2022-08-12
2022-08-12 15:15Z
CRIT

CVE-2022-37042 — Synacor Zimbra_collaboration_suite: By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-37042

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925. CVSSv3.1 9.8 (CRITICAL)

CWECWE 22VNDZimbraVNDSynacorTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2022-08-10
2022-08-10 20:15Z
HIGH

CVE-2022-31673 — Vmware Vrealize_operations: vRealize Operations contains an information disclosure vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-31673

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution. CVSSv3.1 8.8 (HIGH) · EPSS 77th percentile

CWECWE 200VNDVmwareTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2022-08-10
2022-08-10 17:15Z
HIGH

CVE-2022-20866 — Cisco Adaptive_security_appliance_software: A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20866

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key is stored in memory on a hardware platform that performs hardware-based cryptography. An attacker could exploit this vulnerability by using a Lenstra side-channel attack against CVSSv3.1 7.4 (HIGH) · EPSS 97th percentile

CWECWE 203VNDCiscoTYPVulnerability
7.4
CVSS v3.1
92
Edit Score
2022-08-10
2022-08-10 12:15Z
CRIT

CVE-2022-36323 — Siemens Scalance_m-800_firmware: This could allow an authenticated remote attacker with administrative privileges to inject code or

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-36323

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. CVSSv3.1 9.1 (CRITICAL) · EPSS 68th percentile

CWECWE 74VNDSiemensTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2022-08-05
2022-08-05 16:15Z
HIGH

CVE-2022-1012 — Linux Linux_kernel: A memory leak problem was found in the TCP source port generation algorithm in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-1012

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem. CVSSv3.1 8.2 (HIGH) · EPSS 91th percentile

CWECWE 401TYPVulnerability
8.2
CVSS v3.1
92
Edit Score
2022-08-05
2022-08-05 07:15Z
CRIT

CVE-2022-37434 — Zlib Zlib: through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-37434

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference). CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

CWECWE 120CWECWE 787VNDFedoraprojectVNDZlibTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-08-03
2022-08-03 06:15Z
HIGH

CVE-2022-35737 — Sqlite Sqlite: 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-35737

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. CVSSv3.1 7.5 (HIGH) · EPSS 98th percentile

CWECWE 129VNDSplunkVNDSqliteVNDNetappTYPVulnerability
7.5
CVSS v3.1
94
Edit Score