Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-12 18:57Z
2026-03-31
2026-03-31 16:16Z
CRIT

CVE-2026-34243 — Njzjz Wenxian: In versions 0.3.1 and prior, a GitHub Actions workflow uses untrusted user input from

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34243

wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title). In versions 0.3.1 and prior, a GitHub Actions workflow uses untrusted user input from issue_comment.body directly inside a shell command, allowing potential command injection and arbitrary code execution on the runner. At time of publication, there are no publicly available patches. CVSSv3.1 9.8 (CRITICAL) · EPSS 80th percentile

CWECWE 77CWECWE 78VNDNjzjzTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2026-03-31
2026-03-31 16:16Z
CRIT

CVE-2026-34235 — Teluu Pjsip: Prior to version 2.17, a heap out-of-bounds read vulnerability exists in PJSIP's VP9 RTP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34235

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap out-of-bounds read vulnerability exists in PJSIP's VP9 RTP unpacketizer that occurs when parsing crafted VP9 Scalability Structure (SS) data. Insufficient bounds checking on the payload descriptor length may cause reads beyond the allocated RTP payload buffer. This issue has been patched in version 2.17. A workaround for this issue involves disabling VP9 codec if not n CVSSv3.1 9.1 (CRITICAL) · EPSS 33th percentile

CWECWE 125VNDPjsipVNDTeluuTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-03-31
2026-03-31 16:16Z
HIGH

CVE-2026-34227 — Bishopfox Sliver: Prior to version 1.7.4, a single click on a malicious link gives an unauthenticated

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34227

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to version 1.7.4, a single click on a malicious link gives an unauthenticated attacker immediate, silent control over every active C2 session or beacon, capable of exfiltrating all collected target data (e.g. SSH keys, ntds.dit) or destroying the entire compromised infrastructure, entirely through the operator's own browser. This issue has been patched in version 1.7.4. CVSSv3.1 8.8 (HIGH) · EPSS 32th percentile

CWECWE 306CWECWE 942VNDSliverVNDBishopfoxTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-31
2026-03-31 16:16Z
CRIT

CVE-2026-34221 — Mikro-orm Mikroorm: Prior to versions 6.6.10 and 7.0.6, a prototype pollution vulnerability exists in the Utils.merge

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34221

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, a prototype pollution vulnerability exists in the Utils.merge helper used internally by MikroORM when merging object structures. The function did not prevent special keys such as __proto__, constructor, or prototype, allowing attacker-controlled input to modify the JavaScript object prototype when merged. This issue has been patched in ver CVSSv3.1 9.1 (CRITICAL) · EPSS 30th percentile

CWECWE 1321VNDMikro OrmVNDMikroormTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-03-31
2026-03-31 16:16Z
CRIT

CVE-2026-34220 — Mikro-orm Mikroorm: Prior to versions 6.6.10 and 7.0.6, there is a SQL injection vulnerability when specially

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34220

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, there is a SQL injection vulnerability when specially crafted objects are interpreted as raw SQL query fragments. This issue has been patched in versions 6.6.10 and 7.0.6. CVSSv3.1 9.8 (CRITICAL) · EPSS 35th percentile

CWECWE 89VNDMikro OrmVNDMikroormTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 16:16Z
HIGH

CVE-2026-30284 — Uxgroupllc Voice_recorder: An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30284

An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 8.6 (HIGH)

CWECWE 73VNDUxgroupllcTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-03-31
2026-03-31 16:16Z
CRIT

CVE-2026-30281 — Maru Neo.maru: An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30281

An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 9.8 (CRITICAL)

CWECWE 73VNDMaruTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-03-31
2026-03-31 16:16Z
CRIT

CVE-2026-30276 — Deftpdf Document_translator: An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30276

An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. CVSSv3.1 9.8 (CRITICAL)

CWECWE 73VNDDeftpdfTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 15:16Z
CRIT

CVE-2026-34532 — Parseplatform Parse-server: Prior to versions 8.6.67 and 9.7.0-alpha.11, an attacker can bypass Cloud Function validator access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34532

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.67 and 9.7.0-alpha.11, an attacker can bypass Cloud Function validator access controls by appending "prototype.constructor" to the function name in the URL. When a Cloud Function handler is declared using the function keyword and its validator is a plain object or arrow function, the trigger store traversal resolves the handler through its own prototyp CVSSv3.1 9.1 (CRITICAL) · EPSS 20th percentile

CWECWE 863VNDParseplatformVNDParseTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-03-31
2026-03-31 15:16Z
HIGH

CVE-2026-34504 — Openclaw Openclaw: before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34504

OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetch internal URLs. A malicious or compromised fal relay can exploit unguarded image download fetches to expose internal service metadata and responses through the image pipeline. CVSSv3.1 8.3 (HIGH) · EPSS 13th percentile

CWECWE 918VNDOpenclawTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2026-03-31
2026-03-31 15:16Z
HIGH

CVE-2026-34503 — Openclaw Openclaw: Attackers with revoked credentials can maintain unauthorized access through existing live sessions until forced

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34503

OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked. Attackers with revoked credentials can maintain unauthorized access through existing live sessions until forced reconnection. CVSSv3.1 8.1 (HIGH) · EPSS 25th percentile

CWECWE 613VNDOpenclawTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-03-31
2026-03-31 15:16Z
HIGH

CVE-2026-34377 — Zfnd Zebra: Prior to zebrad version 4.3.0 and zebra-consensus version 5.0.1, a logic error in Zebra's

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34377

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-consensus version 5.0.1, a logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By matching a valid transaction's txid while providing invalid authorization data, a miner could cause vulnerable Zebra nodes to accept an invalid block, leading to a consensus split from the rest of the Zcash network. This would not allow invalid tran CVSSv3.1 8.1 (HIGH)

CWECWE 347VNDZfndVNDZebraTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-03-31
2026-03-31 15:16Z
HIGH

CVE-2026-34373 — Parseplatform Parse-server: Prior to versions 8.6.66 and 9.7.0-alpha.10, the GraphQL API endpoint does not respect the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34373

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.66 and 9.7.0-alpha.10, the GraphQL API endpoint does not respect the allowOrigin server option and unconditionally allows cross-origin requests from any website. This bypasses origin restrictions that operators configure to control which websites can interact with the Parse Server API. The REST API correctly enforces the configured allowOrigin restrict CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

CWECWE 346VNDParseplatformVNDParseTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-31
2026-03-31 15:16Z
HIGH

CVE-2026-34210 — Wevm Mppx: is a TypeScript interface for machine payments protocol.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34210

mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the stripe/charge payment method did not check Stripe's Idempotent-Replayed response header when creating PaymentIntents. An attacker could replay a valid credential containing the same spt token against a new challenge, and the server would accept the replayed Stripe PaymentIntent as a new successful payment without actually charging the customer again. This allowed an attacker to pay once CVSSv3.1 8.1 (HIGH) · EPSS 39th percentile

CWECWE 697VNDWevmTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-03-31
2026-03-31 15:16Z
HIGH

CVE-2026-34172 — Giskard Giskard-agent: A developer who passes user input to this method enables full remote code execution

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34172

Giskard is an open-source Python library for testing and evaluating agentic systems. Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chat(message) passes its string argument directly as a Jinja2 template source to a non-sandboxed Environment. A developer who passes user input to this method enables full remote code execution via Jinja2 class traversal. The method name chat and parameter name message naturally invite passing user input directly, but the string is silently pa CVSSv3.1 8.8 (HIGH)

CWECWE 1336VNDGiskardTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-31
2026-03-31 15:16Z
CRIT

CVE-2026-34162 — Fastgpt Fastgpt: Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34162

FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5. CVSSv3.1 10.0 (CRITICAL) · EPSS 34th percentile

CWECWE 306CWECWE 918VNDFastgptTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-03-31
2026-03-31 15:16Z
CRIT

CVE-2026-33579 — Openclaw Openclaw: before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-33579

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check. A caller with pairing privileges but without admin privileges can approve pending device requests asking for broader scopes including admin access by exploiting the missing scope validation in extensions/device-pair/index.ts and src/infra/device-pairing.ts. CVSSv3.1 9.9 (CRITICAL)

CWECWE 863VNDOpenclawTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-03-31
2026-03-31 15:16Z
HIGH

CVE-2026-33577 — Openclaw Openclaw: before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-33577

OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broader scopes. Attackers can exploit missing callerScopes validation in node-pairing.ts to extend privileges onto paired nodes beyond their authorization level. CVSSv3.1 8.1 (HIGH) · EPSS 30th percentile

CWECWE 863VNDOpenclawTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-03-31
2026-03-31 15:16Z
CRIT

CVE-2026-30314 — Ridvay Auto-approval_module: Code's command auto-approval module contains a critical OS command injection vulnerability that renders

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30314

Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations, it fails to account for standard Shell command substitution Ridvay Code (specifically$(...)and backticks ...). An attacker can construct a command such as git log --grep="$(maliciou CVSSv3.1 9.8 (CRITICAL) · EPSS 65th percentile

CWECWE 78VNDRidvayTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 15:16Z
CRIT

CVE-2026-30312 — DSAI: DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30312

DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on string-based parsing to validate commands; while it intercepts dangerous operators such as ;, &&, ||, |, and command substitution patterns, it fails to account for raw newline characters embedded within the input. An attacker can construct a payload by embedding a literal newline between a w CVSSv3.1 9.8 (CRITICAL) · EPSS 74th percentile

CWECWE 78VNDDsaiTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 15:16Z
CRIT

CVE-2026-30311 — Ridvay Auto-approval_module: Code's command auto-approval module contains a critical OS command injection vulnerability that renders

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30311

Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations, it fails to account for standard Shell command substitution Ridvay Code (specifically$(...)and backticks ...). An attacker can construct a command such as git log --grep="$(maliciou CVSSv3.1 9.8 (CRITICAL) · EPSS 74th percentile

CWECWE 78VNDRidvayTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 15:00Z
HIGH

JamfHound v1.1 Update: SSO Attack Paths and Okta Additions

SpecterOps·specterops.io

SpecterOps released JamfHound v1.1, introducing new attack path visualization for JAMF Pro SSO integrations with identity providers like Okta. The update adds jamf_SSOIntegration nodes, jamf_SSO_Login edges, jamf_Update_SSO_Settings edges, and jamf_Okta_Same_Device hybrid edges to BloodHound, enabling discovery of cross-platform privilege escalation paths where compromised low-privilege accounts can pivot through Okta to gain JAMF Pro admin access.

SRFApplicationTACTA0004TACTA0006SRFIdentityVNDBloodhoundVNDOktaVNDJamfTYPResearch
78
Edit Score
2026-03-31
2026-03-31 14:16Z
CRIT

CVE-2026-34156 — Nocobase Nocobase: An authenticated attacker can traverse the prototype chain to escape the sandbox and achieve

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34156

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.28, NocoBase's Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist (controlled by WORKFLOW_SCRIPT_MODULES env var). However, the console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console._stdout and console._stderr. An authentic CVSSv3.1 9.9 (CRITICAL)

CWECWE 913VNDNocobaseTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-03-31
2026-03-31 14:16Z
CRIT

CVE-2026-30310 — However, this design is highly susceptible to prompt injection attacks.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30310

In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. The description for the former states that commands determined by the model to be safe will be automatically executed, whereas if the model judges a command to be potentially destructive, it still requires user approval. However, this design is highly susceptible to prompt injection attacks. An attacker can employ a generic template to wrap any mal CVSSv3.1 9.8 (CRITICAL) · EPSS 40th percentile

CWECWE 77TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-31
2026-03-31 13:00Z
HIGH

Initial Access Brokers have Shifted to High-Value Targets and Premium Pricing

Rapid7 Research·rapid7.comCVE-2025-61882

Rapid7's analysis of H2 2025 cybercrime forum activity (Exploit, XSS, BreachForums, DarkForums, RAMP) reveals Initial Access Brokers have shifted toward high-value targets with dramatically increased pricing (4055% average base price increase YoY) and prioritized high-privilege access (Domain Admin/User at 75% of offerings). RDP, VPN, and RDWeb remain dominant vectors; Government, Retail, and IT sectors are primary targets; U.S. organizations represent 30.9% of global listings, with DarkForums and RAMP now dominating older forums like XSS.

TACTA0001SRFNetworkTACTA0007SRFIdentityVNDFortinetVNDOracleTYPResearchTYPThreat Intel
78
Edit Score