Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-09-27 16:36Z
2026-07-27
2026-07-27 18:16Z
CRIT

CVE-2026-17552 — Plack: This allows an attacker to access internal or restricted hosts that only the webserver

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-17552

Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call. When the rewrite base is a plain string, the REQUEST_URI is appended to it, with no check that the path starts with a forward slash ('/'). When the rewrite base does not contain a path (which is the standard given in the SYNOPSIS), an attacker can create a request that changes the hostname. A request target starting with an at-sign ('@') cha CVSSv3.1 9.1 (CRITICAL)

CWECWE 918VNDPlackTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-07-27
2026-07-27 17:16Z
CRIT

CVE-2026-63077 — JetBrains: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol CVSSv3.1 9.8 (CRITICAL)

CWECWE 502VNDJetbrainsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-07-27
2026-07-27 17:16Z
HIGH

CVE-2026-17192 — VCO: A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-17192

A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of authenticated tenant accounts to internal services that are not otherwise accessible. This vulnerability requires a minimum role of Enterprise Standard Admin. This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks. CVSSv3.1 8.5 (HIGH)

CWECWE 918VNDVcoTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-07-27
2026-07-27 17:16Z
CRIT

CVE-2026-17191 — An authenticated user can exploit this flaw to manipulate backend queries, which may result

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-17191

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended outbound network connections. This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks. CVSSv3.1 9.1 (CRITICAL)

CWECWE 89TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-07-27
2026-07-27 16:18Z
HIGH

CVE-2026-66396 — SiYuan: before v3.7.2 fails to escape the title-img Individual Attribute List value when rendering

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-66396

SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List value when rendering Gallery and Kanban cover images, allowing stored cross-site scripting via unescaped style attribute interpolation. Attackers with editor permissions can inject onload handlers that execute arbitrary code in the Electron renderer with full Node.js access when victims open affected documents. CVSSv3.1 8.4 (HIGH)

CWECWE 79VNDSiyuanTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-07-27
2026-07-27 16:18Z
CRIT

CVE-2026-66395 — SiYuan: desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-66395

SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by crafting a malicious siyuan:// deep link. Attackers can inject HTML payloads via the plugin name parameter that execute with full Node.js access through insertAdjacentHTML rendering in an insecurely configured Electron renderer. CVSSv3.1 9.6 (CRITICAL)

CWECWE 79VNDSiyuanTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-07-27
2026-07-27 16:18Z
HIGH

CVE-2026-66394 — SiYuan: before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG sanitization that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-66394

SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG sanitization that allows authenticated attackers to execute scripts by bypassing the HTML parser-based cleaner. Attackers can hide script tags within desc, style, or noscript elements which the HTML parser treats as raw text but browsers interpret as executable SVG content when served as image/svg+xml, enabling script execution in the application origin. CVSSv3.1 8.7 (HIGH)

CWECWE 79VNDSiyuanTYPVulnerability
8.7
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-07-27
2026-07-27 16:17Z
CRIT

CVE-2026-51303 — UAF: A use-after-free (UAF) vulnerability was discovered in the core parsing component of SQLite 3.41.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-51303

A use-after-free (UAF) vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via sqlite3ExprListDelete and then subsequently accesses the dangling pointer of the released object. A remote adversary can supply specially crafted SQL queries to trigger this vulnerability during SQL statement parsing. Successful exploitation may result in application crash (denial of service), sensitive memory infor CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDUafTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-07-27
2026-07-27 16:17Z
CRIT

CVE-2026-51302 — SQLite: 3.41 has a use-after-free vulnerability exists in the expression evaluation logic.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-51302

SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a malicious SQL statement, a remote attacker can exploit this flaw to cause denial of service, leak sensitive information, or potentially execute arbitrary code on the affected system. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDSqliteTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-07-27
2026-07-27 16:17Z
CRIT

CVE-2026-51300 — A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-51300

A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program still retains the dangling pointer and subsequently accesses member fields of the already freed memory. By constructing malicious SQL queries, a remote attacker can trigger invalid memory access, leading to application crash and sensitive memory information leakage. CVSSv3.1 9.1 (CRITICAL)

CWECWE 416TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-07-27
2026-07-27 16:17Z
HIGH

CVE-2026-51297 — sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-51297

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial. CVSSv3.1 8.8 (HIGH)

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-07-27
2026-07-27 16:17Z
CRIT

CVE-2026-16812 — VeloCloud: Orchestrator (VCO) on-prem has a security issue where this issue may allow a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-16812

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. This functionality was intended to be for internal use only and is not intended to be remotely accessible. Hosted and Dedicated versions of VCO have alrea CVSSv3.1 10.0 (CRITICAL)

CWECWE 78VNDVelocloudTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-07-27
2026-07-27 16:16Z
CRIT

CVE-2025-50455 — SQL: injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50455

SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitized user input passed to the order_by method of the CodeIgniter Query Builder, enabling attackers to perform time-based queries and schema enumeration. Under certain MySQL configurations, the flaw may lead to remote code execution by writing a PHP shell using INTO OUTFILE. CVSSv3.1 9.1 (CRITICAL)

CWECWE 89TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-07-27
2026-07-27 15:17Z
HIGH

CVE-2026-59551 — Subscriber: SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59551

Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. CVSSv3.1 8.5 (HIGH)

CWECWE 89VNDSubscriberTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-07-27
2026-07-27 15:17Z
CRIT

CVE-2026-59550 — SQL: Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59550

Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-27
2026-07-27 15:17Z
CRIT

CVE-2026-59549 — SQL: Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59549

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-27
2026-07-27 15:17Z
CRIT

CVE-2026-59538 — SQL: Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59538

Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-27
2026-07-27 15:17Z
CRIT

CVE-2026-59533 — SQL: Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59533

Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-27
2026-07-27 15:17Z
CRIT

CVE-2026-59527 — SQL: Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59527

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-07-27
2026-07-27 15:02Z
HIGH

From Virtual Share to Physical Shell: Leveraging Windows’ Inconsistent Access Control for LPE

Exodus Intel·blog.exodusintel.comCVE-2025-59517CVE-2025-64673

Exodus Intelligence published a detailed technical analysis of two chained Windows kernel vulnerabilities (CVE-2025-59517 and CVE-2025-64673) in the storvsp.sys driver that enable local privilege escalation from low-privileged user to SYSTEM. The first vulnerability bypasses NTFS ACL checks when opening vSMB shares by omitting the OBJ_FORCE_ACCESS_CHECK flag; the second allows arbitrary file operations when the share lacks write access. Both vulnerabilities were patched in Microsoft's December 2025 security updates.

SRFOsTACTA0004OSWindowsVNDMicrosoftTYPResearchTYPVulnerabilitySTGPrivescTECT1548
78
Edit Score
2026-07-27
2026-07-27 15:01Z
INFO

v9.5.0-rc6

BloodHound releases·github.com

BloodHound v9.5.0-rc6 release candidate published with fixes to composition graph rendering and collector version bumps. This is a pre-release version containing incremental improvements to the Active Directory enumeration and visualization tool.

SWBloodhoundTYPTool
28
Edit Score
2026-07-27
2026-07-27 14:17Z
CRIT

CVE-2026-65879 — Joomla: Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-65879

Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms. CVSSv3.1 9.8 (CRITICAL)

CWECWE 798VNDJoomlaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-07-27
2026-07-27 14:16Z
CRIT

CVE-2026-61511 — vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-61511

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenav[pagenumber] parameter. Attackers can exploit the insufficiently restrictive regex filter by using phpfuck-style encoding with permitted characters to inject and execute arbitrary PHP code via CVSSv3.1 9.8 (CRITICAL)

CWECWE 95TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-07-27
2026-07-27 13:18Z
HIGH

CVE-2026-59690 — Authorization: A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59690

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise. CVSSv3.1 8.0 (HIGH)

CWECWE 862TYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-07-27
2026-07-27 13:18Z
HIGH

CVE-2026-59689 — Incorrect: An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-59689

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise. CVSSv3.1 8.0 (HIGH)

CWECWE 863TYPVulnerability
8.0
CVSS v3.1
90
Edit Score