Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-12 18:11Z
2026-03-31
2026-03-31 22:16Z
CRIT

CVE-2026-34449 — B3log Siyuan: Prior to version 3.6.2, a malicious website can achieve Remote Code Execution (RCE) on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34449

SiYuan is a personal knowledge management system. Prior to version 3.6.2, a malicious website can achieve Remote Code Execution (RCE) on any desktop running SiYuan by exploiting the permissive CORS policy (Access-Control-Allow-Origin: * + Access-Control-Allow-Private-Network: true) to inject a JavaScript snippet via the API. The injected snippet executes in Electron's Node.js context with full OS access the next time the user opens SiYuan's UI. No user interaction is required CVSSv3.1 9.6 (CRITICAL) · EPSS 39th percentile

CWECWE 942VNDSiyuanVNDB3logTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-03-31
2026-03-31 22:16Z
CRIT

CVE-2026-34448 — B3log Siyuan: Prior to version 3.6.2, an attacker who can place a malicious URL in an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34448

SiYuan is a personal knowledge management system. Prior to version 3.6.2, an attacker who can place a malicious URL in an Attribute View mAsse field can trigger stored XSS when a victim opens the Gallery or Kanban view with “Cover From -> Asset Field” enabled. The vulnerable code accepts arbitrary http(s) URLs without extensions as images, stores the attacker-controlled string in coverURL, and injects it directly into an <img src="..."> attribute without escaping. In the Elec CVSSv3.1 9.0 (CRITICAL) · EPSS 39th percentile

CWECWE 94CWECWE 79VNDSiyuanVNDB3logTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-03-31
2026-03-31 22:16Z
HIGH

CVE-2026-34406 — Aptrs Aptrs: Prior to version 2.0.1, the edit_user endpoint (POST /api/auth/edituser/<pk>) allows Any user who can

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34406

APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. Prior to version 2.0.1, the edit_user endpoint (POST /api/auth/edituser/<pk>) allows Any user who can reach that endpoint and submit crafted permission to escalate their own account (or any other account) to superuser by including "is_superuser": true in the request body. The root cause is that CustomUserSeri CVSSv3.1 8.8 (HIGH)

CWECWE 915VNDAptrsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-31
2026-03-31 22:16Z
CRIT

CVE-2026-34400 — Alerta_project Alerta: Prior to version 9.1.0, the Query string search API (q=) was vulnerable to SQL

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34400

Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API (q=) was vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings. This issue has been patched in version 9.1.0. CVSSv3.1 9.8 (CRITICAL)

CWECWE 89VNDAlerta ProjectVNDAlertaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 21:16Z
HIGH

CVE-2026-5213 — Dlink Dnr-202l_firmware: This manipulation of the argument read_list causes stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5213

A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_adduser_to_session of the file /cgi-bin/account_mgr.cgi. This manipulation of the argument read_list causes stack-based buffer overflow. It is possible to initiate the attack remo CVSSv3.1 8.8 (HIGH) · EPSS 50th percentile

CWECWE 787CWECWE 121CWECWE 119VNDDlinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-31
2026-03-31 21:16Z
HIGH

CVE-2026-5212 — Dlink Dnr-202l_firmware: The manipulation of the argument f_file leads to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5212

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function Webdav_Upload_File of the file /cgi-bin/webdav_mgr.cgi. The manipulation of the argument f_file leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The CVSSv3.1 8.8 (HIGH) · EPSS 50th percentile

CWECWE 787CWECWE 121CWECWE 119VNDDlinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-31
2026-03-31 21:16Z
HIGH

CVE-2026-34394 — Wwbn Avideo: In versions 26.0 and prior, AVideo's admin plugin configuration endpoint (admin/save.json.php) lacks any CSRF

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34394

WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's admin plugin configuration endpoint (admin/save.json.php) lacks any CSRF token validation. There is no call to isGlobalTokenValid() or verifyToken() before processing the request. Combined with the application's explicit SameSite=None cookie policy, an attacker can forge cross-origin POST requests from a malicious page to overwrite arbitrary plugin settings on a victim administrator's session. CVSSv3.1 8.1 (HIGH) · EPSS 14th percentile

CWECWE 352VNDWwbnTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-03-31
2026-03-31 21:16Z
CRIT

CVE-2026-1579 — Px4 Autopilot: The MAVLink communication protocol does not require cryptographic authentication by default.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-1579

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIAL_CONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink interface. PX4 provides MAVLink 2.0 message signing as the cryptographic authentication mechanism for all MAVLink communication. When signing is enabled, unsigned messages are rejec CVSSv3.1 9.8 (CRITICAL)

CWECWE 306VNDPx4VNDMavlinkTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 20:16Z
HIGH

CVE-2026-5211 — Dlink Dnr-202l_firmware: Executing a manipulation of the argument f_dir can lead to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5211

A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vulnerability affects the function UPnP_AV_Server_Path_Del of the file /cgi-bin/app_mgr.cgi. Executing a manipulation of the argument f_dir can lead to stack-based buffer overflow. The attack can be executed remotely. The ex CVSSv3.1 8.8 (HIGH) · EPSS 49th percentile

CWECWE 787CWECWE 121CWECWE 119VNDDlinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-31
2026-03-31 20:16Z
HIGH

CVE-2026-4800 — Lodash Lodash: When an application passes untrusted input as options.imports key names, an attacker can inject

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-4800

Impact: The fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, _.template CVSSv3.1 8.1 (HIGH)

CWECWE 94VNDLodashVNDImpactTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-03-31
2026-03-31 20:16Z
HIGH

CVE-2026-30290 — Intouchapp Intouch_contacts_\&_caller_id: An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30290

An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 8.4 (HIGH)

CWECWE 22VNDIntouchappTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-03-31
2026-03-31 20:16Z
CRIT

CVE-2026-30285 — Zora Zora: An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30285

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 9.8 (CRITICAL)

CWECWE 22VNDZoraTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 20:16Z
HIGH

Expanding Attack Path Management to macOS Environments

SpecterOps·specterops.io

SpecterOps announces expansion of BloodHound Enterprise to model attack paths in macOS environments via Jamf device management platform integration, alongside Okta and GitHub. The research demonstrates how device management platforms introduce attack primitives—privilege escalation within the management plane, fleet-wide code execution, and hybrid attack paths spanning identity and device management systems—that were previously invisible to directory-centric attack path analysis.

SRFApplicationSRFOsTACTA0004TACTA0006SRFIdentityVNDMicrosoftVNDOktaVNDJamf
78
Edit Score
2026-03-31
2026-03-31 18:16Z
HIGH

CVE-2026-32726 — Scitokens Scitokens_cpp_library: Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32726

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested resource path was covered by a token's authorized scope path. Because the check did not require a path-segment boundary, a token scoped to one path could incorrectly authorize access to sibling paths CVSSv3.1 8.1 (HIGH)

CWECWE 863VNDScitokensTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-03-31
2026-03-31 18:16Z
HIGH

CVE-2026-32725 — Scitokens Scitokens_cpp_library: Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32725

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses ".." path components instead of rejecting them. As a result, an attacker can use parent-directory traversal in the scope claim to broaden the effective authorization beyond the intended CVSSv3.1 8.3 (HIGH)

CWECWE 23VNDScitokensTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2026-03-31
2026-03-31 18:16Z
CRIT

CVE-2026-30286 — Funambol Zefiro: An arbitrary file overwrite vulnerability in Funambol, Inc.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30286

An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 9.8 (CRITICAL) · EPSS 47th percentile

CWECWE 22VNDFunambolTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 18:16Z
CRIT

CVE-2026-30283 — Peaksel Animal_sounds_and_ringtones: An arbitrary file overwrite vulnerability in PEAKSEL D.O.O.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30283

An arbitrary file overwrite vulnerability in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 9.8 (CRITICAL)

CWECWE 22VNDPeakselTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 18:16Z
CRIT

CVE-2026-30282 — Uxgroupllc Cast_to_tv: An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30282

An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure. CVSSv3.1 9.0 (CRITICAL)

CWECWE 22CWECWE 73VNDUxgroupllcTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-03-31
2026-03-31 18:16Z
HIGH

CVE-2026-30279 — Squareapps My_location: An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30279

An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 8.4 (HIGH) · EPSS 7th percentile

CWECWE 22VNDSquareappsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-03-31
2026-03-31 18:16Z
CRIT

CVE-2026-30278 — Funair Fly_is_fun: An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30278

An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 9.8 (CRITICAL)

CWECWE 22VNDFunairTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 18:16Z
HIGH

CVE-2026-30277 — Triumph-adler Mobile_print: An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30277

An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 8.4 (HIGH) · EPSS 7th percentile

CWECWE 22VNDTriumph AdlerTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-03-31
2026-03-31 17:16Z
CRIT

CVE-2026-34361 — Hapifhir Hl7_fhir_core: Prior to version 6.9.4, the FHIR Validator HTTP service exposes an unauthenticated "/loadIG" endpoint

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34361

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the FHIR Validator HTTP service exposes an unauthenticated "/loadIG" endpoint that makes outbound HTTP requests to attacker-controlled URLs. Combined with a startsWith() URL prefix matching flaw in the credential provider (ManagedWebAccessUtils.getServer()), an attacker can steal authentication tokens (Bearer, Basic, API keys) configured for legitim CVSSv3.1 9.3 (CRITICAL) · EPSS 22th percentile

CWECWE 552VNDHapifhirVNDHapiTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-03-31
2026-03-31 17:16Z
HIGH

CVE-2026-24164 — Nvidia Bionemo_framework: BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24164

NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. CVSSv3.1 8.8 (HIGH) · EPSS 38th percentile

CWECWE 502VNDNvidiaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-31
2026-03-31 17:16Z
HIGH

CVE-2026-24148 — Nvidia Jetson_linux: A successful exploit of this vulnerability might lead to information disclosure of encrypted data

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24148

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID. CVSSv3.1 8.3 (HIGH) · EPSS 27th percentile

CWECWE 1188VNDNvidiaTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2026-03-31
2026-03-31 16:16Z
HIGH

CVE-2026-5204 — Tenda Ch22_firmware: This manipulation of the argument webSiteId causes stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5204

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. CVSSv3.1 8.8 (HIGH) · EPSS 83th percentile

CWECWE 787CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
95
Edit Score