Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-12 01:34Z
2026-04-07
2026-04-07 05:16Z
CRIT

CVE-2026-0740 — Ninja: The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0740

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Controllers_Uploads::handle_upload' function in all versions up to, and including, 3.3.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: The vulnerability was partially patched in version 3.3.25 and fully patched in v CVSSv3.1 9.8 (CRITICAL)

CWECWE 434VNDNinjaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-07
2026-04-07 04:17Z
HIGH

CVE-2026-20433 — Mediatek Mt2735_firmware: In Modem, there is a possible out of bounds write due to a missing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-20433

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460. CVSSv3.1 8.8 (HIGH)

CWECWE 787VNDMediatekVNDModemTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-07
2026-04-07 04:17Z
HIGH

CVE-2026-20432 — Mediatek Mt2735_firmware: In Modem, there is a possible out of bounds write due to a missing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-20432

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461. CVSSv3.1 8.0 (HIGH)

CWECWE 787VNDMediatekVNDModemTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-04-07
2026-04-07 00:00Z
HIGH

Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do

Trend Micro Research·trendmicro.comin the wild

Threat actors exploited Anthropic's Claude Code npm packaging error to distribute trojanized archives via a fake GitHub repository (leaked-claude-code), delivering Vidar, GhostSocks, and PureLog Stealer malware. The campaign has been active since February 2026, cycling through 25+ software brands as lures, with 533+ confirmed downloads of the Claude Code payload as of April 7, 2026. The malware enables credential theft, cryptocurrency wallet exfiltration, session hijacking, and residential proxy abuse on Windows systems.

SRFApplicationTACTA0001TACTA0006TACTA0007SRFSupply ChainVNDAnthropicVNDGithubTYPResearch
72
Edit Score
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-5709 — Amazon Research_and_engineering_studio: Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5709

Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the FileBrowser functionality. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment. CVSSv3.1 8.8 (HIGH)

CWECWE 78VNDAmazonTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-5708 — Amazon Research_and_engineering_studio: Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5708

Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance profile permissions, and interact with AWS resources and services via a crafted API request. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to th CVSSv3.1 8.8 (HIGH)

CWECWE 915VNDAmazonTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-5707 — Amazon Research_and_engineering_studio: Unsanitized input in an OS command in the virtual desktop session name handling in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5707

Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment. CVSSv3.1 8.8 (HIGH)

CWECWE 78VNDAmazonTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-5687 — This manipulation of the argument page causes stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5687

A weakness has been identified in Tenda CX12L 16.03.53.12. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. CVSSv3.1 8.8 (HIGH)

CWECWE 121CWECWE 119TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-5686 — The manipulation of the argument page results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5686

A security flaw has been discovered in Tenda CX12L 16.03.53.12. This vulnerability affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. CVSSv3.1 8.8 (HIGH)

CWECWE 121CWECWE 119TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-5685 — Tenda: The manipulation of the argument page leads to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5685

A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. CVSSv3.1 8.8 (HIGH)

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-5684 — Tenda: Executing a manipulation of the argument page can lead to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5684

A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack requires access to the local network. The exploit has been publicly disclosed and may be utilized. CVSSv3.1 8.0 (HIGH)

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-04-06
2026-04-06 22:16Z
CRIT

CVE-2026-35471 — Goshs Goshs: Prior to 2.0.0-beta.3, tdeleteFile() missing return after path traversal check.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35471

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, tdeleteFile() missing return after path traversal check. This vulnerability is fixed in 2.0.0-beta.3. CVSSv3.1 9.8 (CRITICAL)

CWECWE 22VNDGoshsVNDSimplehttpserverTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-35442 — Directus: Prior to 11.17.0, aggregate functions (min, max) applied to fields with the conceal special

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35442

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, aggregate functions (min, max) applied to fields with the conceal special type incorrectly return raw database values instead of the masked placeholder. When combined with groupBy, any authenticated user with read access to the affected collection can extract concealed field values, including static API tokens and two-factor authentication secrets from directus_users. This vulne CVSSv3.1 8.1 (HIGH)

CWECWE 863CWECWE 200VNDDirectusTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-04-06
2026-04-06 22:16Z
HIGH

CVE-2026-35408 — Directus: Prior to 11.17.0, Directus's Single Sign-On (SSO) login pages lacked a Cross-Origin-Opener-Policy (COOP) HTTP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35408

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus's Single Sign-On (SSO) login pages lacked a Cross-Origin-Opener-Policy (COOP) HTTP response header. Without this header, a malicious cross-origin window that opens the Directus login page retains the ability to access and manipulate the window object of that page. An attacker can exploit this to intercept and redirect the OAuth authorization flow to an attacker-controll CVSSv3.1 8.7 (HIGH)

CWECWE 693CWECWE 346VNDDirectusTYPVulnerability
8.7
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 22:00Z
HIGH

Milking the last drop of Intego - Time for Windows to get its LPE

Quarkslab·blog.quarkslab.com

Quarkslab disclosed a local privilege escalation vulnerability in Intego 3.0.0.1 for Windows affecting the Optimization module. The vulnerability stems from a time-of-check-time-of-use (TOCTOU) race condition where IavService.exe deletes files as SYSTEM without validating whether targets are symlinks or directories, allowing attackers to chain the deletion with the Config.msi rollback primitive to achieve SYSTEM code execution.

SRFOsTACTA0004VNDIntegoTYPWriteupTYPVulnerabilitySTGPrivescTECT1548TECT1036.006
78
Edit Score
2026-04-06
2026-04-06 21:49Z
INFO

v3.4.0.53

Mythic releases·github.com

Mythic v3.4.0.53 released with a Dockerfile tag bump to match the release version. This is a routine version bump with no disclosed security fixes, features, or breaking changes in the available metadata.

VNDMythicTYPTool
15
Edit Score
2026-04-06
2026-04-06 21:16Z
HIGH

CVE-2026-35395 — Wegia Wegia: Prior to 3.6.9, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35395

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in dao/memorando/DespachoDAO.php. The id_memorando parameter is extracted from $_REQUEST without validation and directly interpolated into SQL queries, allowing any authenticated user to execute arbitrary SQL commands against the database. This vulnerability is fixed in 3.6.9. CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDWegiaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 21:16Z
HIGH

CVE-2026-35394 — Mobilenexthq Mobile_mcp: Prior to 0.0.50, the mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Android's

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35394

Mobile Next is an MCP server for mobile development and automation. Prior to 0.0.50, the mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Android's intent system without any scheme validation, allowing execution of arbitrary Android intents, including USSD codes, phone calls, SMS messages, and content provider access. This vulnerability is fixed in 0.0.50. CVSSv3.1 8.3 (HIGH)

CWECWE 939VNDMobilenexthqVNDMobileTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2026-04-06
2026-04-06 21:16Z
CRIT

CVE-2026-35393 — Goshs Goshs: is a SimpleHTTPServer written in Go.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35393

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, the POST multipart upload directory not sanitized. This vulnerability is fixed in 2.0.0-beta.3. CVSSv3.1 9.8 (CRITICAL)

CWECWE 22VNDGoshsVNDSimplehttpserverTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-06
2026-04-06 21:16Z
CRIT

CVE-2026-35392 — Goshs Goshs: is a SimpleHTTPServer written in Go.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35392

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, PUT upload in httpserver/updown.go has no path sanitization. This vulnerability is fixed in 2.0.0-beta.3. CVSSv3.1 9.8 (CRITICAL)

CWECWE 22VNDGoshsVNDSimplehttpserverTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-06
2026-04-06 20:16Z
CRIT

CVE-2026-35459 — In 0.5.0b3.dev96 and earlier, pyLoad has a server-side request forgery (SSRF) vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35459

pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, pyLoad has a server-side request forgery (SSRF) vulnerability. The fix for CVE-2026-33992 added IP validation to BaseDownloader.download() that checks the hostname of the initial download URL. However, pycurl is configured with FOLLOWLOCATION=1 and MAXREDIRS=10, causing it to automatically follow HTTP redirects. Redirect targets are never validated against the SSRF filter. An au CVSSv3.1 9.1 (CRITICAL)

CWECWE 918TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-04-06
2026-04-06 20:16Z
CRIT

CVE-2026-35184 — EcclesiaCRM: Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35184

EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0. CVSSv3.1 9.8 (CRITICAL)

CWECWE 89VNDEcclesiacrmTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-06
2026-04-06 20:16Z
HIGH

CVE-2026-35182 — Ajax30 Bravecms: Prior to 2.0.6, this vulnerability is a missing authorization check found in the update

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35182

Brave CMS is an open-source CMS. Prior to 2.0.6, this vulnerability is a missing authorization check found in the update role endpoint at routes/web.php. The POST route for /rights/update-role/{id} lacks the checkUserPermissions:assign-user-roles middleware. This allows any authenticated user to change account roles and promote themselves to Super Admin. This vulnerability is fixed in 2.0.6. CVSSv3.1 8.8 (HIGH)

CWECWE 862VNDAjax30VNDBraveTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 20:16Z
CRIT

CVE-2026-35178 — Forceworkbench Forceworkbench: Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35178

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an unsafe manner. This vulnerability is fixed in 65.0.0. CVSSv3.1 9.8 (CRITICAL) · EPSS 39th percentile

CWECWE 94VNDForceworkbenchVNDWorkbenchTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-06
2026-04-06 20:16Z
CRIT

CVE-2026-35022 — Anthropic: Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35022

Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in authentication helper execution where helper configuration values are executed using shell=true without input validation. Attackers who can influence authentication settings can inject shell metacharacters through parameters like apiKeyHelper, awsAuthRefresh, awsCredentialExport, and gcpAuthRefresh to execute arbitrary commands with the privileges of the user or automation environm CVSSv3.1 9.8 (CRITICAL)

CWECWE 78VNDAnthropicTYPVulnerability
9.8
CVSS v3.1
99
Edit Score