Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-14 15:34Z
2026-03-03
2026-03-03 14:00Z
HIGH

Beyond Electron: Attacking Alternative Desktop Application Frameworks

Bishop Fox Labs·bishopfox.com

Bishop Fox researchers demonstrate a practical XSS-to-RCE exploitation chain against Tauri desktop applications, showing that despite architectural improvements over Electron, permissive configuration settings combined with XSS vulnerabilities enable full remote code execution. The attack leverages filesystem write access, shell.open() functionality, and Tauri API exposure to write and execute arbitrary binaries on the target system.

SRFApplicationTACTA0001TYPResearchTYPTechniqueSTGExecutionSTGInitial AccessTECT1190TECT1059
78
Edit Score
2026-03-03
2026-03-03 10:16Z
CRIT

CVE-2026-22886 — Eclipse Openmq: exposes a TCP-based management service (imqbrokerd) that by default requires authentication.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-22886

OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication. However, the product ships with a default administrative account (admin/ admin) and does not enforce a mandatory password change on first use. After the first successful login, the server continues to accept the default password indefinitely without warning or enforcement. In real-world deployments, this service is often left enabled without changing the default credentials. CVSSv3.1 9.8 (CRITICAL)

CWECWE 1393CWECWE 1391CWECWE 1392VNDEclipseVNDOpenmqTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-03-03
2026-03-03 00:00Z
HIGH

Claude Code Security set the Cybersecurity Stocks on Fire - Here's the Signal in the Smoke

Trend Micro Research·trendmicro.com

Trend Micro analyzes Anthropic's Claude Code Security announcement and the resulting cybersecurity stock market sell-off, arguing the market overreacted to a pre-deployment code scanning tool. The article contends that while AI-assisted vulnerability detection is valuable, the real emerging threat surface lies in autonomous AI agents themselves—supply chain poisoning, runtime behavior drift, and observability gaps that static code analysis cannot address.

TACTA0043SRFAiVNDAnthropicVNDCrowdstrikeVNDOktaTYPResearchTYPThreat IntelSTGDiscovery
72
Edit Score
2026-03-02
2026-03-02 23:00Z
CRIT

Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV

Quarkslab·blog.quarkslab.comCVE-2026-27748CVE-2026-27749CVE-2026-27750

Quarkslab disclosed three critical vulnerabilities in Avira Internet Security (≤1.1.109.1990) affecting privileged modules: arbitrary file deletion via symlink following in Software Updater (CVE-2026-27748), insecure .NET BinaryFormatter deserialization in System Speedup (CVE-2026-27749), and TOCTOU-based folder deletion in Optimizer (CVE-2026-27750). All three enable local privilege escalation to SYSTEM, with the first two chained via the well-known Config.msi MSI rollback DLL injection primitive.

SRFApplicationSRFOsTACTA0004TACTA0005VNDAviraTYPWriteupTYPExploitTYPVulnerability
92
Edit Score
2026-03-02
2026-03-02 19:16Z
HIGH

CVE-2026-0013 — Google Android: This could lead to local escalation of privilege with no additional execution privileges needed.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0013

In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 8.4 (HIGH) · EPSS 1th percentile

CWECWE 441VNDGoogleVNDPickactivityTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-03-02
2026-03-02 19:16Z
HIGH

CVE-2026-0011 — Google Android: This could lead to local escalation of privilege with no additional execution privileges needed.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0011

In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 8.4 (HIGH) · EPSS 2th percentile

CWECWE 693CWECWE 703VNDGoogleVNDSettingsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-03-02
2026-03-02 19:16Z
HIGH

CVE-2026-0010 — Google Android: In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0010

In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 8.4 (HIGH) · EPSS 1th percentile

CWECWE 787VNDGoogleVNDIdrmmanagerserviceTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-03-02
2026-03-02 19:16Z
HIGH

CVE-2026-0008 — Google Android: In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0008

In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 8.4 (HIGH)

CWECWE 441VNDGoogleVNDFaceenrollTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-03-02
2026-03-02 15:34Z
INFO

v2.10.0

AzureHound releases·github.com

AzureHound v2.10.0 released with support for federated identity credentials enumeration and minor bug fixes. This update extends Azure AD reconnaissance capabilities to include federated identity attack surface.

TACTA0007SRFIdentitySRFCloudVNDSpecteropsVNDMicrosoft AzureTYPToolSTGDiscoverySTGRecon
62
Edit Score
2026-03-02
2026-03-02 15:16Z
CRIT

CVE-2026-23600 — Hpe Autopass_license_server: A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-23600

A remote authentication bypass vulnerability  exists in HPE AutoPass License Server (APLS). CVSSv3.1 9.8 (CRITICAL) · EPSS 58th percentile

CWECWE 287VNDHpeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-27
2026-02-27 23:16Z
CRIT

CVE-2026-28517 — Opendcim Opendcim: version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-28517

openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration parameter from the database and passes it directly to exec() without validation or sanitization. If an attacker can modify the fac_Config.dot value, arbitrary commands may be executed in the context of the web server process. CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

CWECWE 78VNDOpendcimTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2026-02-27
2026-02-27 23:16Z
HIGH

CVE-2026-28516 — Opendcim Opendcim: version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-28516

openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without prepared statements or proper input sanitation. An authenticated user can execute arbitrary SQL statements against the underlying database. CVSSv3.1 8.8 (HIGH) · EPSS 58th percentile

CWECWE 89VNDOpendcimTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-27
2026-02-27 23:16Z
HIGH

CVE-2026-28515 — Opendcim Opendcim: version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-28515

openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allo CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile

CWECWE 862VNDOpendcimTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-27
2026-02-27 22:16Z
HIGH

CVE-2026-28406 — Chainguard Kaniko: is a tool to build container images from a Dockerfile, inside a container

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-28406

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using `filepath.Join(dest, cleanedName)` without enforcing that the final path stays within `dest`. A tar entry like `../outside.txt` escapes the extraction root and writes files outside the destination directory. In environments with registry authentication, this can be chained w CVSSv3.1 8.2 (HIGH)

CWECWE 22VNDChainguardTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-02-27
2026-02-27 19:16Z
CRIT

CVE-2026-2880 — Fastify Fastify\/middie: A vulnerability in @fastify/middie versions < 9.2.0 can result in authentication/authorization bypass when using

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2880

A vulnerability in @fastify/middie versions < 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware (for example, app.use('/secret', auth)). When Fastify router normalization options are enabled (such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related trailing-slash behavior), crafted request paths may bypass middleware checks while still being routed to protected handlers. CVSSv3.1 9.1 (CRITICAL) · EPSS 23th percentile

CWECWE 20VNDFastifyTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-02-27
2026-02-27 17:16Z
CRIT

CVE-2026-2293 — Nestjs Nest: A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2293

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13. CVSSv3.1 9.8 (CRITICAL)

CWECWE 863VNDNestjsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-27
2026-02-27 13:16Z
CRIT

CVE-2025-11252 — Signumtte Windesk.fm: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11252

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc. Windesk.Fm allows SQL Injection. This issue affects windesk.Fm: before v2.3.4.  NOTE:  The vendor patched the vulnerability after the CVE was published. CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 89VNDSignumtteTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-27
2026-02-27 12:16Z
CRIT

CVE-2026-24352 — Pluxml Pluxml: CMS allows a user's session identifier to be set before authentication.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24352

PluXml CMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only versions 5.8.21 and 5.9.0-rc7 were tested and confirmed as vulnerable, other ve CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

CWECWE 384VNDPluxmlTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-27
2026-02-27 12:16Z
CRIT

CVE-2025-11251 — Daynex Woyio: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11251

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows SQL Injection. This issue affects E-Commerce Platform: through 27022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 89VNDDaynexTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-27
2026-02-27 10:16Z
CRIT

CVE-2026-21660 — Johnsoncontrols Frick_controls_quantum_hd_firmware: A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-21660

A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Frick Controls Quantum HD version 10.22 and prior. CVSSv3.1 9.8 (CRITICAL) · EPSS 14th percentile

CWECWE 522CWECWE 256VNDHardcodedVNDJohnsoncontrolsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-27
2026-02-27 01:16Z
HIGH

CVE-2026-25109 — Copeland Xweb_500b_pro_firmware: An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25109

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the devices field when accessing the get setup route. CVSSv3.1 8.0 (HIGH) · EPSS 52th percentile

CWECWE 78VNDCopelandTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-02-27
2026-02-27 01:16Z
HIGH

CVE-2026-20910 — Copeland Xweb_300d_pro_firmware: An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-20910

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the devices field of the firmware update action to achieve remote code execution. CVSSv3.1 8.0 (HIGH) · EPSS 52th percentile

CWECWE 78VNDCopelandTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-02-26
2026-02-26 21:28Z
CRIT

CVE-2026-22207 — OpenViking: through version 0.1.18, prior to commit 0251c70, contains a broken access control vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-22207

OpenViking through version 0.1.18, prior to commit 0251c70, contains a broken access control vulnerability that allows unauthenticated attackers to gain ROOT privileges when the root_api_key configuration is omitted. Attackers can send requests to protected endpoints without authentication headers to access administrative functions including account management, resource operations, and system configuration. CVSSv3.1 9.8 (CRITICAL)

CWECWE 306VNDOpenvikingTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-26
2026-02-26 20:31Z
HIGH

CVE-2026-27509 — Unitree Go2_firmware: Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-27509

Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager.py. A network-adjacent, unauthenticated attacker can join DDS domain 0 and publish a crafted message (api_id=1002) containing arbitrary Python, which the robot writes to disk under /unitree/etc/programming/ and binds to a physical controller keybinding. When CVSSv3.1 8.0 (HIGH) · EPSS 23th percentile

CWECWE 306VNDUnitreeTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-02-26
2026-02-26 18:23Z
HIGH

CVE-2026-23750 — Golioth: Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-23750

Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling. server_cert_write() allocates a heap buffer of size CONFIG_POUCH_SERVER_CERT_MAX_LEN when receiving the first fragment, then appends subsequent fragments using memcpy() without verifying that sufficient capacity remains. An adjacent BLE client can send unauthenticated fragments whose combined size exceeds the allocated buffer, causing a heap ov CVSSv3.1 8.1 (HIGH) · EPSS 5th percentile

CWECWE 122VNDGoliothTYPVulnerability
8.1
CVSS v3.1
91
Edit Score