Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-10 02:48Z
2026-04-30
2026-04-30 09:16Z
HIGH

CVE-2026-42512 — Freebsd Freebsd: This can result in a crash, but it may be possible to leverage this

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42512

As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its new size when requesting memory, resulting in a heap buffer overrun. A specially crafted packet can cause dhclient to overrun its buffer of environment entries. This can result in a crash, but it may be possible to leverage this bug to achieve remote code execution. CVSSv3.1 8.1 (HIGH) · EPSS 8th percentile

CWECWE 122TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-04-30
2026-04-30 09:16Z
CRIT

CVE-2026-35547 — The lack of validation allows a malicious program to write outside the bounds of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35547

When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bounds of a heap allocation. This can trigger a crash or system panic, and it may be possible for an unprivileged user to exploit the bug to elevate their privileges. CVSSv3.1 9.1 (CRITICAL)

CWECWE 122CWECWE 130TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-04-30
2026-04-30 07:16Z
HIGH

CVE-2026-5402 — TLS: protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5402

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution CVSSv3.1 8.8 (HIGH)

CWECWE 122VNDTlsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-30
2026-04-30 07:16Z
HIGH

CVE-2026-42511 — Freebsd Freebsd: The BOOTP file field is written to the lease file without escaping embedded double-quotes

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42511

The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by dhclient, e.g., after a system restart, an attacker-controlled field from the lease is passed to dhclient-script(8), which evaluates it. A rogue DHCP server may be able to execute arbirary code as root on a system running dhclient. CVSSv3.1 8.1 (HIGH) · EPSS 5th percentile

CWECWE 149VNDBootpTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-04-30
2026-04-30 07:00Z
HIGH

Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India

Kaspersky Securelist·securelist.comin the wild

Kaspersky disclosed a phishing campaign by the Silver Fox APT group targeting organizations in Russia and India using tax-themed lures. The campaign delivers a modified Rust-based RustSL loader that unpacks ValleyRAT, which in turn loads a previously undocumented Python backdoor named ABCDoor. The attack chain includes custom persistence mechanisms (Phantom Persistence), geofencing, and sandbox evasion; ABCDoor has been active since late 2024 and continues to be deployed in real-world attacks.

SRFApplicationTACTA0005TACTA0001TACTA0002SRFNetworkTACTA0003TACTA0011OSWindows
78
Edit Score
2026-04-30
2026-04-30 03:16Z
HIGH

CVE-2026-7470 — This manipulation of the argument page causes stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-7470

A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. CVSSv3.1 8.8 (HIGH)

CWECWE 121CWECWE 119TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-30
2026-04-30 00:00Z
CRIT

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

Trend Micro Research·trendmicro.comCVE-2021-26855CVE-2021-26857CVE-2021-26858CVE-2021-27065CVE-2025-55182in the wild

Trend Micro disclosed SHADOW-EARTH-053, a China-aligned APT conducting sustained cyberespionage against government and defense sectors across Asia and NATO members since December 2024. The group exploits unpatched Microsoft Exchange ProxyLogon vulnerabilities (CVE-2021-26855 et al.) for initial access, deploys GODZILLA web shells for persistence, and stages ShadowPad implants via DLL sideloading. The campaign demonstrates sophisticated post-compromise tradecraft including credential harvesting, lateral movement via WMIC/SMBExec, and targeted mailbox exfiltration using custom Exchange Web Services tools.

SRFApplicationTACTA0004TACTA0005TACTA0001SRFNetworkTACTA0006TACTA0007TACTA0003
82
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-04-29
2026-04-29 23:16Z
HIGH

CVE-2026-7420 — The manipulation of the argument Profile results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-7420

A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file route/goform/ConfigAdvideo. The manipulation of the argument Profile results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. CVSSv3.1 8.8 (HIGH)

CWECWE 120CWECWE 119TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-29
2026-04-29 23:16Z
HIGH

CVE-2026-7419 — UTT: The manipulation of the argument Profile leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-7419

A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file route/goform/formTaskEdit_ap. The manipulation of the argument Profile leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. CVSSv3.1 8.8 (HIGH)

CWECWE 120CWECWE 119VNDUttTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-29
2026-04-29 23:16Z
CRIT

CVE-2026-7381 — Plack: Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-7381

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the X-Sendfile-Type header, if it is not considered in the middleware constructor or the Plack environment. A malicious client can set the X-Sendfile-Type header to "X-Accel-Redirect" to services running behind nginx reverse proxies, and then set the X-Accel-Mapping to CVSSv3.1 9.1 (CRITICAL)

CWECWE 200CWECWE 441CWECWE 913VNDPlackTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-04-29
2026-04-29 22:16Z
HIGH

CVE-2026-7418 — UTT: Executing a manipulation of the argument Profile can lead to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-7418

A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability affects the function strcpy of the file route/goform/NTP. Executing a manipulation of the argument Profile can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. CVSSv3.1 8.8 (HIGH)

CWECWE 120CWECWE 119VNDUttTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-29
2026-04-29 22:00Z
HIGH

Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool

Quarkslab·blog.quarkslab.com

Quarkslab published a comprehensive technical deep-dive into Microsoft Entra ID application permission auditing, exposing hidden complexity in the AppRegistration/ServicePrincipal model, transitive permission inheritance paths, and credential visibility gaps. The post introduces QAZPT (Quarkslab Azure Permission Tracker), an open-source tool designed to compute and visualize effective permissions across an Entra ID tenant, and documents several undocumented or poorly-documented attack surfaces including Service Principal-level credentials invisible in the portal and federated identity credential inconsistencies.

TACTA0006TACTA0007SRFIdentitySRFCloudSWAzureSWEntra IdVNDMicrosoftTYPResearch
82
Edit Score
2026-04-29
2026-04-29 21:18Z
INFO

v9.1.0-rc3

BloodHound releases·github.com

BloodHound v9.1.0-rc3 release candidate published with bug fixes for primary kinds handling and database getKinds method. Two commits address issues BED-8155 related to error handling and array returns.

SWBloodhoundTYPTool
25
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2026-7426 — Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-7426

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, resulting in a heap buffer overflow. Users processing IPv4 RA only are not impacted. To mitigate this issue, users should upgrade to the fixed version when available. CVSSv3.1 8.1 (HIGH)

CWECWE 787TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2026-34965 — Cockpit: CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34965

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary PHP code into collection rules parameters. Attackers can inject malicious PHP code through rule parameters which is written directly to server-side PHP files and executed via include() to achieve arbitrary command execution on the underlying server. CVSSv3.1 8.8 (HIGH)

CWECWE 94VNDCockpitTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-29
2026-04-29 20:16Z
CRIT

CVE-2018-25318 — Tenda: FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25318

Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites. CVSSv3.1 9.8 (CRITICAL)

CWECWE 290VNDTendaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-29
2026-04-29 20:16Z
CRIT

CVE-2018-25317 — Tenda: W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25317

Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin language cookie to change primary and secondary DNS servers, redirecting user traffic to malicious DNS servers. CVSSv3.1 9.8 (CRITICAL)

CWECWE 290VNDTendaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-29
2026-04-29 20:16Z
CRIT

CVE-2018-25316 — Tenda: W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25316

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS servers and redirect user traffic to malicious sites. CVSSv3.1 9.8 (CRITICAL)

CWECWE 290VNDTendaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2018-25315 — Alloksoft: Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25315

Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Name field. Attackers can craft a payload with structured exception handler (SEH) overwrite and shellcode to achieve code execution when the application processes the license registration input. CVSSv3.1 8.4 (HIGH)

CWECWE 120VNDAlloksoftTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2018-25314 — Allok: soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25314

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious input containing shellcode with structured exception handler (SEH) overwrite to bypass protections and execute code with application privileges. CVSSv3.1 8.4 (HIGH)

CWECWE 120VNDAllokTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2018-25308 — BuddyPress: Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25308

BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters. Attackers can modify the field_hiddenfile and field_deleteimg parameters during profile editing to unlink files from the server. CVSSv3.1 8.8 (HIGH)

CWECWE 22VNDBuddypressTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2018-25307 — SysGauge: Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25307

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute arbitrary code with application privileges. CVSSv3.1 8.4 (HIGH)

CWECWE 120VNDSysgaugeTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2018-25304 — Free: Download Manager 2.0 Built 417 contains a local buffer overflow vulnerability in the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25304

Free Download Manager 2.0 Built 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured exception handler (SEH) chain exploitation. Attackers can craft a malicious URL file that, when imported through the File > Import > Import lists of downloads menu, causes a buffer overflow in the Location header response that overwrites the SEH chain and executes arbitrary code. CVSSv3.1 8.4 (HIGH)

CWECWE 120VNDFreeTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2018-25303 — Allok: Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25303

Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the License Name field that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) overwrite. Attackers can craft a malicious input string with 780 bytes of junk data followed by SEH chain pointers and shellcode, then paste it into the License Name field during registration to achieve code execution. CVSSv3.1 8.4 (HIGH)

CWECWE 121VNDAllokTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-04-29
2026-04-29 20:16Z
HIGH

CVE-2018-25301 — Easy: MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-25301

Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious username string. Attackers can craft a payload containing junk data, SEH chain pointers, and shellcode that overwrites the SEH handler to redirect execution and run arbitrary commands like opening calc.exe. CVSSv3.1 8.4 (HIGH)

CWECWE 120VNDEasyTYPVulnerability
8.4
CVSS v3.1
92
Edit Score