opsecsafe — cyber intelligence

2026-03-16

2026-03-16 23:16Z

CRIT

CVE-2026-4177 — Toddr Yaml\: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on trailing newlines. strtok mutated n->type_id in place, corrupting shared node data. A memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming ancho CVSSv3.1 9.1 (CRITICAL)

CWECWE 120CWECWE 122VNDToddrTYPVulnerability

9.1

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 21:16Z

CRIT

CVE-2025-69902 — A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-69902

A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters. CVSSv3.1 9.8 (CRITICAL) · EPSS 58th percentile

CWECWE 94TYPVulnerability

9.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 21:16Z

HIGH

CVE-2025-50881 — Use: The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50881

The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. When handling GET requests, the script takes user-supplied input from the `action` URL parameter, performs insufficient validation, and incorporates this input into a string that is subsequently executed by the `eval()` function. Although a `method_exists()` check is performed, it only validates the part of the user input *before* the first parenthe CVSSv3.1 8.8 (HIGH) · EPSS 49th percentile

CWECWE 94TYPVulnerability

8.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 19:16Z

CRIT

CVE-2025-69809 — P2r3 Bareiron: A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-69809

A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling arbitrary code execution via a crafted packet. CVSSv3.1 9.8 (CRITICAL) · EPSS 21th percentile

CWECWE 123VNDP2r3TYPVulnerability

9.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 19:16Z

CRIT

CVE-2025-69808 — P2r3 Bareiron: An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-69808

An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to access sensitive information and cause a Denial of Service (DoS) via supplying a crafted packet. CVSSv3.1 9.1 (CRITICAL) · EPSS 26th percentile

CWECWE 125VNDP2r3TYPVulnerability

9.1

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 18:16Z

CRIT

CVE-2026-27962 — Authlib Authlib: Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-27962

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an unauthenticated attacker to forge arbitrary JWT tokens that pass signature verification. When key=None is passed to any JWS deserialization function, the library extracts and uses the cryptographic key embedded in the attacker-controlled JWT jwk header field. An attacker can sign a token with their ow CVSSv3.1 9.1 (CRITICAL)

CWECWE 347VNDAuthlibTYPVulnerability

9.1

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 18:07Z

HIGH

Cage2Host — Offensive container‑escape toolkit for red teams. Automatically hunts and exploits Docker socket abuse, privileged conta

GitHub · container escape·github.comGITHUB POC

Cage2Host is a modular offensive container-escape toolkit designed for red teams, automating exploitation of Docker socket abuse, privileged containers, and host filesystem breakout vectors. The framework provides dual-mode execution (utility-based payload orchestration and direct module invocation), extensible plugin architecture, and operational features including base64 command transport, multi-stage pipelines, and automated cleanup.

TACTA0004TACTA0005SRFCloudTACTA0008TACTA0011TACTA0009TYPToolTYPExploit

Edit Score

2026-03-16

2026-03-16 16:16Z

CRIT

CVE-2025-62319 — Hcltech Unica: Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62319

Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the injected condition evaluates to true or false. This allows an attacker to inject arbitrary SQL into backend configuration queries executed within the application. CVSSv3.1 9.8 (CRITICAL) · EPSS 15th percentile

CWECWE 89VNDHcltechVNDBooleanTYPVulnerability

9.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 15:25Z

INFO

v2.11.0-rc1

AzureHound releases·github.com

AzureHound v2.11.0-rc1 released with minor maintenance updates including CLA workflow fixes, Windows resource generation tooling, and internal refactoring. No security fixes or feature additions of note in this pre-release candidate.

SRFIdentitySRFCloudVNDSpecteropsVNDMicrosoft AzureTYPTool

Edit Score

2026-03-16

2026-03-16 14:19Z

CRIT

CVE-2026-4181 — Dlink Dir-816_firmware: The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-4181

A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer. CVSSv3.1 9.8 (CRITICAL)

CWECWE 787CWECWE 121CWECWE 119VNDDlinkTYPVulnerability

9.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3562 — Philips Hue_bridge_v2_firmware: Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3562

Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ed25519_sign_open function. The issue results from improper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass au CVSSv3.1 8.8 (HIGH) · EPSS 14th percentile

CWECWE 347VNDPhilipsTYPVulnerability

8.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3561 — Philips Hue_bridge_v2_firmware: Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3561

Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of PUT requests to the characteristics endpoint. The issue results from the la CVSSv3.1 8.0 (HIGH) · EPSS 35th percentile

CWECWE 122VNDPhilipsTYPVulnerability

8.0

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3560 — Philips Hue_bridge_v2_firmware: Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3560

Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hk_hap_pair_storage_put function of the HomeKit implementation, which listens on TCP port 8080 by default. The issue results from the lack CVSSv3.1 8.8 (HIGH) · EPSS 27th percentile

CWECWE 122VNDPhilipsTYPVulnerability

8.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3559 — Philips Hue_bridge_v2_firmware: Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3559

Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the SRP authentication mechanism in the HomeKit Accessory Protocol service, which listens on TCP port 8080 by default. The issue results from CVSSv3.1 8.1 (HIGH) · EPSS 30th percentile

CWECWE 323VNDPhilipsTYPVulnerability

8.1

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3558 — Philips Hue_bridge_v2_firmware: Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3558

Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the HomeKit Accessory Protocol service, which listens on TCP port 8080 by default. The issue results from the lack of authenticatio CVSSv3.1 8.1 (HIGH) · EPSS 30th percentile

CWECWE 306VNDPhilipsTYPVulnerability

8.1

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3557 — Philips Hue_bridge_v2_firmware: Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3557

Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the hap_pair_verify_handler function of the hk_hap service, which listens CVSSv3.1 8.0 (HIGH) · EPSS 41th percentile

CWECWE 122VNDPhilipsTYPVulnerability

8.0

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3556 — Philips Hue_bridge_v2_firmware: Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3556

Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hk_hap_pair_storage_put function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fix CVSSv3.1 8.8 (HIGH) · EPSS 27th percentile

CWECWE 122VNDPhilipsTYPVulnerability

8.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3555 — Philips Hue_bridge_v2_firmware: Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3555

Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. User interaction is required to exploit this vulnerability in that the user must initiate the device pairing process. The specific flaw exists within the handling of custom Zigbee ZCL frames in the Model Info download functionality. CVSSv3.1 8.0 (HIGH) · EPSS 19th percentile

CWECWE 122VNDPhilipsTYPVulnerability

8.0

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3085 — Gstreamer Gstreamer: rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3085

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of X-QDM RTP payloads. The issue results from the lack of proper validation of the length of user-suppl CVSSv3.1 8.8 (HIGH)

CWECWE 122CWECWE 1284VNDGstreamerTYPVulnerability

8.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

HIGH

CVE-2026-3083 — Gstreamer Gstreamer: rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3083

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of X-QDM RTP payload elements. When parsing the packetid element, the process does not properly validate user- CVSSv3.1 8.8 (HIGH)

CWECWE 787CWECWE 129VNDGstreamerTYPVulnerability

8.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

CRIT

CVE-2026-32640 — Danthedeckie Simpleeval: Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32640

SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names to SimpleEval have modules or other disallowed / dangerous objects available as attrs. Additionally, dangerous functions or modules could be accessed by passing them as callbacks to other safe functions to call. The latest version 1.0.5 has t CVSSv3.1 9.8 (CRITICAL)

CWECWE 94CWECWE 915VNDDanthedeckieVNDSimpleevalTYPVulnerability

9.8

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

CRIT

CVE-2026-32635 — Angular Angular_cli: Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32635

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been identified in the Angular runtime and compiler. It occurs when the application uses a security-sensitive attribute (for example href on an anchor tag) together with Angular's ability to internationalize attributes. Enabling internationalizati CVSSv3.1 9.0 (CRITICAL) · EPSS 18th percentile

CWECWE 79VNDAngularTYPVulnerability

9.0

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:19Z

CRIT

CVE-2026-32621 — Apollo: Prior to 2.9.6, 2.10.5, 2.11.6, 2.12.3, and 2.13.2, a vulnerability exists in query plan

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32621

Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Prior to 2.9.6, 2.10.5, 2.11.6, 2.12.3, and 2.13.2, a vulnerability exists in query plan execution within the gateway that may allow pollution of Object.prototype in certain scenarios. A malicious client may be able to pollute Object.prototype in gateway directly by crafting operations with field aliases and/or variable names that target prototype-inheritable properties. Alternatively, CVSSv3.1 9.9 (CRITICAL) · EPSS 11th percentile

CWECWE 1321VNDApolloTYPVulnerability

9.9

CVSS v3.1

100

Edit Score

2026-03-16

2026-03-16 14:18Z

HIGH

CVE-2026-25083 — GROWI: OpenAI thread/message API endpoints do not perform authorization.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25083

GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant's identifier may view and/or tamper the other user's threads/messages. CVSSv3.1 8.3 (HIGH) · EPSS 5th percentile

CWECWE 862VNDGrowiTYPVulnerability

8.3

CVSS v3.1

Edit Score

2026-03-16

2026-03-16 14:17Z

HIGH

CVE-2025-14287 — Lfprojects Mlflow: A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/init.py`

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14287

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, which are then executed using `os.system()`. This allows attackers to execute arbitrary commands by supplying malicious input through the `--container` parameter of the CLI. The iss CVSSv3.1 8.8 (HIGH)

CWECWE 94VNDLfprojectsTYPVulnerability

8.8

CVSS v3.1

Edit Score

Latest intel// live feed

CVE-2026-4177 — Toddr Yaml\: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity

CVE-2025-69902 — A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to

CVE-2025-50881 — Use: The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to

CVE-2025-69809 — P2r3 Bareiron: A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary

CVE-2025-69808 — P2r3 Bareiron: An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to

CVE-2026-27962 — Authlib Authlib: Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows

Cage2Host — Offensive container‑escape toolkit for red teams. Automatically hunts and exploits Docker socket abuse, privileged conta

CVE-2025-62319 — Hcltech Unica: Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates

v2.11.0-rc1

CVE-2026-4181 — Dlink Dir-816_firmware: The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow.

CVE-2026-3562 — Philips Hue_bridge_v2_firmware: Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability.

CVE-2026-3561 — Philips Hue_bridge_v2_firmware: Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVE-2026-3560 — Philips Hue_bridge_v2_firmware: Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVE-2026-3559 — Philips Hue_bridge_v2_firmware: Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability.

CVE-2026-3558 — Philips Hue_bridge_v2_firmware: Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability.

CVE-2026-3557 — Philips Hue_bridge_v2_firmware: Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVE-2026-3556 — Philips Hue_bridge_v2_firmware: Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVE-2026-3555 — Philips Hue_bridge_v2_firmware: Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution

CVE-2026-3085 — Gstreamer Gstreamer: rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVE-2026-3083 — Gstreamer Gstreamer: rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVE-2026-32640 — Danthedeckie Simpleeval: Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access

CVE-2026-32635 — Angular Angular_cli: Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been

CVE-2026-32621 — Apollo: Prior to 2.9.6, 2.10.5, 2.11.6, 2.12.3, and 2.13.2, a vulnerability exists in query plan

CVE-2026-25083 — GROWI: OpenAI thread/message API endpoints do not perform authorization.

CVE-2025-14287 — Lfprojects Mlflow: A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py`

CVE-2025-14287 — Lfprojects Mlflow: A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/init.py`