Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-13 18:05Z
2026-03-16
2026-03-16 14:19Z
CRIT

CVE-2026-32640 — Danthedeckie Simpleeval: Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32640

SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names to SimpleEval have modules or other disallowed / dangerous objects available as attrs. Additionally, dangerous functions or modules could be accessed by passing them as callbacks to other safe functions to call. The latest version 1.0.5 has t CVSSv3.1 9.8 (CRITICAL)

CWECWE 94CWECWE 915VNDDanthedeckieVNDSimpleevalTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-16
2026-03-16 14:19Z
CRIT

CVE-2026-32635 — Angular Angular_cli: Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32635

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been identified in the Angular runtime and compiler. It occurs when the application uses a security-sensitive attribute (for example href on an anchor tag) together with Angular's ability to internationalize attributes. Enabling internationalizati CVSSv3.1 9.0 (CRITICAL) · EPSS 18th percentile

CWECWE 79VNDAngularTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-03-16
2026-03-16 14:19Z
CRIT

CVE-2026-32621 — Apollo: Prior to 2.9.6, 2.10.5, 2.11.6, 2.12.3, and 2.13.2, a vulnerability exists in query plan

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32621

Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Prior to 2.9.6, 2.10.5, 2.11.6, 2.12.3, and 2.13.2, a vulnerability exists in query plan execution within the gateway that may allow pollution of Object.prototype in certain scenarios. A malicious client may be able to pollute Object.prototype in gateway directly by crafting operations with field aliases and/or variable names that target prototype-inheritable properties. Alternatively, CVSSv3.1 9.9 (CRITICAL) · EPSS 11th percentile

CWECWE 1321VNDApolloTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-03-16
2026-03-16 14:18Z
HIGH

CVE-2026-25083 — GROWI: OpenAI thread/message API endpoints do not perform authorization.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25083

GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant's identifier may view and/or tamper the other user's threads/messages. CVSSv3.1 8.3 (HIGH) · EPSS 5th percentile

CWECWE 862VNDGrowiTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2026-03-16
2026-03-16 14:17Z
HIGH

CVE-2025-14287 — Lfprojects Mlflow: A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py`

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14287

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, which are then executed using `os.system()`. This allows attackers to execute arbitrary commands by supplying malicious input through the `--container` parameter of the CLI. The iss CVSSv3.1 8.8 (HIGH)

CWECWE 94VNDLfprojectsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-16
2026-03-16 14:17Z
CRIT

CVE-2017-20224 — Telesquare Sdt-cs3b1_firmware: SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-20224

Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by exploiting enabled WebDAV HTTP methods. Attackers can use PUT, DELETE, MKCOL, MOVE, COPY, and PROPPATCH methods to upload executable code, delete files, or manipulate server content for remote code execution or denial of service. CVSSv3.1 9.8 (CRITICAL)

CWECWE 434VNDTelesquareTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-16
2026-03-16 14:17Z
CRIT

CVE-2017-20223 — Telesquare Sdt-cs3b1_firmware: SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-20223

Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access resources by manipulating user-supplied input parameters. Attackers can directly reference objects in the system to retrieve sensitive information and access functionalities without proper access controls. CVSSv3.1 9.8 (CRITICAL)

CWECWE 639VNDTelesquareTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-03-16
2026-03-16 14:17Z
CRIT

CVE-2016-20030 — ZKTeco: ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-20030

ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters via the username parameter. Attackers can send requests to the authLoginAction!login.do script with varying username inputs to enumerate valid user accounts based on application responses. CVSSv3.1 9.8 (CRITICAL) · EPSS 13th percentile

CWECWE 551VNDZktecoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-16
2026-03-16 14:17Z
CRIT

CVE-2016-20026 — ZKTeco: ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-20026

ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application. Attackers can authenticate with hardcoded credentials stored in tomcat-users.xml to upload malicious WAR archives containing JSP applications and execute arbitrary code with SYSTEM privileges. CVSSv3.1 9.8 (CRITICAL) · EPSS 23th percentile

CWECWE 798VNDZktecoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-16
2026-03-16 14:17Z
HIGH

CVE-2016-20025 — ZKTeco: ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-20025

ZKTeco ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users to escalate privileges by modifying executable files. Attackers can leverage the Modify permission granted to the Authenticated Users group to replace executable binaries with malicious code for privilege escalation. CVSSv3.1 8.8 (HIGH) · EPSS 9th percentile

CWECWE 552VNDZktecoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-16
2026-03-16 14:17Z
CRIT

CVE-2016-20024 — ZKTeco: ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-20024

ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable permissions on the ZKTimeNet3.0 directory and its contents to replace executable files with malicious binaries for privilege escalation. CVSSv3.1 9.8 (CRITICAL) · EPSS 9th percentile

CWECWE 538VNDZktecoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-16
2026-03-16 07:18Z
CRIT

Nuclei Templates v10.4.0 – Release Notes

Nuclei templates·github.comCVE-2026-27971CVE-2026-27944CVE-2026-1603CVE-2026-1492CVE-2026-1357CVE-2026-0770CVE-2025-71243CVE-2025-64328CVE-2025-40554CVE-2025-40552CVE-2025-40536CVE-2024-37261CVE-2024-9643CVE-2023-3452CVE-2021-28481CVE-2021-28480CVE-2026-25512CVE-2026-23829CVE-2026-2413CVE-2026-0829CVE-2025-69971CVE-2025-62780CVE-2025-62613CVE-2025-54726CVE-2025-48281CVE-2025-32355CVE-2025-27506CVE-2025-22785CVE-2024-43965CVE-2024-30502CVE-2024-30498CVE-2024-30464CVE-2024-12025CVE-2024-9765CVE-2024-8625CVE-2023-50839CVE-2023-40600CVE-2023-32590CVE-2023-7337CVE-2023-6030CVE-2023-5652CVE-2023-5203CVE-2023-3643CVE-2022-44588CVE-2022-1453CVE-2022-0439

Nuclei Templates v10.4.0 release adds 94 new templates covering 47 CVEs, including critical RCE vulnerabilities in Qwik, Langflow, Group-Office, and SPIP, plus authentication bypasses in Ivanti, SolarWinds Web Help Desk, and Four-Faith devices. The release includes significant bug fixes reducing false positives and negatives across multiple templates, with enriched metadata and improved detection logic.

SRFApplicationTACTA0001TACTA0002SRFWebTACTA0003VNDProjectdiscoveryTYPToolTYPVulnerability
9.8
CVSS v3.1
82
Edit Score
2026-03-16
2026-03-16 00:00Z
CRIT

Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack

Trend Micro Research·trendmicro.comin the wild

Trend Micro documents an enhanced Warlock ransomware campaign exploiting unpatched Microsoft SharePoint servers with a significantly expanded post-exploitation toolkit including TightVNC for persistent remote access, Yuze for SOCKS5 tunneling, and a BYOVD technique leveraging the NSec driver to disable security products at kernel level. The group maintains redundant C&C channels via Velociraptor, VS Code tunnels, and Cloudflare Tunnel, conducts DCSync attacks for credential theft, and deploys ransomware via GPO to achieve rapid enterprise-wide encryption.

SRFApplicationSRFOsTACTA0004TACTA0005TACTA0001TACTA0002SRFNetworkTACTA0006
82
Edit Score
2026-03-13
2026-03-13 19:55Z
HIGH

CVE-2026-4092 — Google Clasp: Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-4092

Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences. CVSSv3.1 8.8 (HIGH)

CWECWE 22VNDGoogleTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-13
2026-03-13 19:55Z
HIGH

CVE-2026-3999 — Pointsharp Id_server: A broken access control may allow an authenticated user to perform a horizontal privilege

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3999

A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations. CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 639VNDPointsharpTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-13
2026-03-13 19:55Z
CRIT

CVE-2026-32746 — Gnu Inetutils: telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32746

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full. CVSSv3.1 9.8 (CRITICAL) · EPSS 9th percentile

CWECWE 120VNDGnuTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-13
2026-03-13 19:54Z
CRIT

CVE-2026-32306 — Hackerbay Oneuptime: An authenticated user can inject arbitrary SQL into ClickHouse, enabling full database read (including

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32306

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the telemetry aggregation API accepts user-controlled aggregationType, aggregateColumnName, and aggregationTimestampColumnName parameters and interpolates them directly into ClickHouse SQL queries via the .append() method (documented as "trusted SQL"). There is no allowlist, no parameterized query binding, and no input validation. An authenticated user can inject arbitrary SQL into ClickHou CVSSv3.1 9.9 (CRITICAL) · EPSS 59th percentile

CWECWE 89VNDHackerbayVNDOneuptimeTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-03-13
2026-03-13 19:54Z
CRIT

CVE-2026-32304 — Locutus Locutus: Prior to 3.0.14, the create_function(args, code) function passes both parameters directly to the Function

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32304

Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to 3.0.14, the create_function(args, code) function passes both parameters directly to the Function constructor without any sanitization, allowing arbitrary code execution. This is distinct from CVE-2026-29091 which was call_user_func_array using eval() in v2.x. This finding affects create_function using new Function() in v3.x. This vulnerability is fixed in 3.0.14. CVSSv3.1 9.8 (CRITICAL)

CWECWE 94CWECWE 88VNDLocutusTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-13
2026-03-13 19:54Z
CRIT

CVE-2026-31806 — Freerdp Freerdp: Because these values are used during bitmap decoding and memory operations without proper bounds

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31806

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, the gdi_surface_bits() function processes SURFACE_BITS_COMMAND messages sent by the RDP server. When the command is handled using NSCodec, the bmp.width and bmp.height values provided by the server are not properly validated against the actual desktop dimensions. A malicious RDP server can supply crafted bmp.width and bmp.height values that exceed the expected surface size. Because these values CVSSv3.1 9.8 (CRITICAL)

CWECWE 122CWECWE 131VNDFreerdpTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-13
2026-03-13 19:54Z
CRIT

CVE-2026-25823 — HMS: Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25823

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow that leads to a Denial of Service, which can also be exploited to achieve Unauthenticated Remote Code Execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 51th percentile

CWECWE 121VNDHmsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-13
2026-03-13 19:54Z
CRIT

CVE-2026-25818 — HMS: Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25818

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookies, allowing an attacker with a stolen session cookie to find the user password by brute-forcing an encryption parameter. CVSSv3.1 9.1 (CRITICAL) · EPSS 5th percentile

CWECWE 315VNDHmsTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-03-13
2026-03-13 19:54Z
HIGH

CVE-2026-25817 — HMS: Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25817

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special elements used in an OS command allowing remote code execution by attackers with low privilege access on the gateway, provided the attacker has credentials. CVSSv3.1 8.8 (HIGH) · EPSS 56th percentile

CWECWE 94VNDHmsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-03-13
2026-03-13 19:54Z
CRIT

CVE-2026-23941 — Erlang Erlang\/inets: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-23941

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling. This vulnerability is associated with program files lib/inets/src/http_server/httpd_request.erl and program routines httpd_request:parse_headers/7. The server does not reject or normalize duplicate Content-Length headers. The earliest Content-Length in the request is used for body parsing while common reverse proxies (nginx, CVSSv3.1 9.4 (CRITICAL) · EPSS 7th percentile

CWECWE 444VNDErlangVNDInconsistentTYPVulnerability
9.4
CVSS v3.1
97
Edit Score
2026-03-13
2026-03-13 19:53Z
HIGH

CVE-2025-13779 — Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13779

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. CVSSv3.1 8.3 (HIGH) · EPSS 7th percentile

CWECWE 306TYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2026-03-13
2026-03-13 19:53Z
HIGH

CVE-2025-13777 — Authentication: bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13777

Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. CVSSv3.1 8.3 (HIGH) · EPSS 8th percentile

CWECWE 294TYPVulnerability
8.3
CVSS v3.1
92
Edit Score