Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-07 05:56Z
2026-06-03
2026-06-03 16:16Z
HIGH

CVE-2026-6657 — Jupyter Jupyter_server: A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-6657

A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use of `re.match()` for validating the `Origin` header, which only anchors at the start of the string. This allows attacker-controlled domains such as `trusted.example.com.evil.com` to pass validation against patterns intended to match `trusted.example.com`. The vulnerability affects m CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

CWECWE 346VNDJupyterTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-03
2026-06-03 16:16Z
CRIT

CVE-2026-36748 — RockRMS: v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-36748

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile. CVSSv3.1 9.0 (CRITICAL)

CWECWE 79VNDRockrmsTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-06-03
2026-06-03 16:16Z
CRIT

CVE-2026-36576 — An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-36576

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request. CVSSv3.1 9.8 (CRITICAL)

CWECWE 78TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-03
2026-06-03 14:16Z
HIGH

CVE-2026-5241 — LightGlue: A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5241

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using `AutoModel.from_pretrained()` with `trust_remote_c CVSSv3.1 8.0 (HIGH)

CWECWE 829VNDLightglueTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35085 — A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35085

A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root. CVSSv3.1 8.8 (HIGH)

CWECWE 121TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35084 — A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35084

A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root. CVSSv3.1 8.8 (HIGH)

CWECWE 121TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35083 — A remote attacker with user privileges can exploit a stack buffer overflow to gain

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35083

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root. CVSSv3.1 8.8 (HIGH)

CWECWE 121TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35082 — The ugw-logread method allows a remote attacker with user privileges to access arbitrary local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35082

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input. CVSSv3.1 8.8 (HIGH)

CWECWE 22TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35081 — The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35081

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input. CVSSv3.1 8.1 (HIGH)

CWECWE 20TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35080 — The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35080

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. CVSSv3.1 8.1 (HIGH)

CWECWE 73TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35079 — The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35079

The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. CVSSv3.1 8.1 (HIGH)

CWECWE 73TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35078 — The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35078

The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. CVSSv3.1 8.1 (HIGH)

CWECWE 73TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35077 — The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35077

The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. CVSSv3.1 8.1 (HIGH)

CWECWE 73TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-03
2026-06-03 13:16Z
HIGH

CVE-2026-35076 — The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35076

The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. CVSSv3.1 8.1 (HIGH)

CWECWE 73TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-03
2026-06-03 13:16Z
CRIT

CVE-2026-35075 — An unauthenticated remote attacker can recover a default, hard coded password from a firmware

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35075

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices. CVSSv3.1 9.8 (CRITICAL)

CWECWE 1393TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-03
2026-06-03 13:00Z
HIGH

Otto Support - Testing MCP Servers

Bishop Fox Labs·bishopfox.com

Bishop Fox demonstrates a complete attack chain against MCP (Model Context Protocol) servers, using nmap and Nuclei for discovery, then MCP Inspector to enumerate and exploit an authorization bypass in otto-support that allows unprivileged users to delete other users' tickets. The research illustrates that MCP servers, despite being AI-native, remain subject to traditional web application security flaws—specifically missing server-side authorization controls on privileged operations.

SRFApplicationTACTA0007SWNucleiSWMcpSWNmapTYPResearchSTGDiscoveryTECT1592
72
Edit Score
2026-06-03
2026-06-03 11:16Z
CRIT

CVE-2026-47065 — ZDRES: ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-47065

ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed. When the serialised stream contains a TC_PROXYCLASSDESC (the marker for a java.lang.reflect.Proxy ), JDK’s ObjectInputStream.readProxyDesc() is dispatched. JDK then calls the default ObjectInputStream.resolveProxyClass(interfaces) implementation, which performs Class.forName(intf, false, latestUserDefinedLoader()) for EACH interface name CVSSv3.1 9.8 (CRITICAL)

CWECWE 502VNDZdresTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-03
2026-06-03 11:16Z
HIGH

CVE-2025-15656 — Incorrect: Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15656

Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Management: from n/a through 93.2.0. CVSSv3.1 8.8 (HIGH)

CWECWE 266TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-03
2026-06-03 11:16Z
HIGH

CVE-2025-14773 — Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14773

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. CVSSv3.1 8.0 (HIGH)

CWECWE 79TYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-06-03
2026-06-03 11:16Z
HIGH

CVE-2025-14772 — Authorization: bypass through User-Controlled key vulnerability in ABB T-MAC Plus.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14772

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. CVSSv3.1 8.8 (HIGH)

CWECWE 639TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-03
2026-06-03 11:16Z
CRIT

CVE-2025-14771 — Files: or directories accessible to external parties vulnerability in ABB T-MAC Plus.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14771

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. CVSSv3.1 9.9 (CRITICAL)

CWECWE 552TYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-06-03
2026-06-03 11:00Z
HIGH

The sorry state of skill distribution

Trail of Bits·blog.trailofbits.com

Trail of Bits demonstrated critical bypasses of multiple AI skill marketplace scanners (ClawHub, Cisco skill-scanner, skills.sh integrations) using simple techniques: newline padding, .pyc bytecode poisoning, .docx indirection, and prompt injection. The research reveals that static scanning approaches cannot reliably detect malicious skills, and LLM-based analyzers are easily fooled by social engineering and misdirection embedded in skill documentation.

TACTA0001TACTA0002SRFAiSRFSupply ChainSWClaudeSWCodexVNDOpenaiVNDAnthropic
88
Edit Score
2026-06-03
2026-06-03 09:16Z
CRIT

CVE-2026-4035 — A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-4035

A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environment credentials to an attacker-controlled endpoint. This issue arises because the `api_key` field in gateway secrets can accept `$ENV_VAR` references, which are resolved against the MLflow server's environment during runtime. The resolved secrets are then sent in provider authenti CVSSv3.1 9.1 (CRITICAL)

CWECWE 201TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-06-03
2026-06-03 09:00Z
HIGH

Argamal: Malware hidden in hentai games

Kaspersky Securelist·securelist.comin the wild

Kaspersky discovered Argamal, a previously unknown RAT distributed via trojanized hentai games since at least 2024. The malware uses COM hijacking for persistence, multi-stage PowerShell delivery, and provides full remote control capabilities including file operations, surveillance, and command execution. Hundreds of victims identified primarily in Russia, Brazil, Germany, and Vietnam.

SRFApplicationSRFOsTACTA0005TACTA0001TACTA0006TACTA0007TACTA0003TACTA0008
78
Edit Score
2026-06-03
2026-06-03 06:30Z
CRIT

FSB’s matryoshka #2/3 – Gamaredon’s gifts that keeps unpacking – GammaLoad

Sekoia.io·sekoia.ioin the wild

Sekoia's TDR team published a deep technical analysis of GammaLoad, the intermediary loader component in Gamaredon's (FSB-operated) 2026 infection chain targeting Ukraine. The analysis documents a three-stage multi-loader architecture using VBScript and PowerShell, leveraging Dead Drop Resolvers (Telegraph, Telegram, Check-Host) to fetch C2 infrastructure, registry-based persistence via scheduled tasks, and in-memory execution to evade detection. The report includes 70+ recovered artifacts, live C2 interaction data, and IOCs, establishing a unified taxonomy (GammaPhish, GammaLoad, GammaWorm, GammaSteel, GammaWipe) to clarify Gamaredon's decade-long malware evolution.

SRFApplicationSRFOsTACTA0005TACTA0002TACTA0003TACTA0043OSWindowsVNDMicrosoft
92
Edit Score