Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-15 00:30Z
2026-02-18
2026-02-18 22:16Z
HIGH

CVE-2026-2670 — Advantech: Such manipulation of the argument delete_file leads to os command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2670

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. Affected is an unknown function of the file /cgi-bin/luci/admin/openvpn_apply of the component Background Management. Such manipulation of the argument delete_file leads to os command injection. The attack can be ex CVSSv3.1 7.2 (HIGH) · EPSS 97th percentile

CWECWE 77CWECWE 78VNDAdvantechTYPVulnerability
7.2
CVSS v3.1
91
Edit Score
2026-02-18
2026-02-18 18:24Z
HIGH

CVE-2026-24708 — OpenStack: An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24708

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected CVSSv3.1 8.2 (HIGH)

CWECWE 73CWECWE 669VNDOpenstackTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-02-18
2026-02-18 18:24Z
CRIT

CVE-2025-70152 — Fabian Scholars_tracking_system: code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-70152

code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. These endpoints lack authentication checks and directly concatenate user-supplied POST parameters (firstname, lastname, username, password, user_id) into SQL queries without validation or parameterization. CVSSv3.1 9.8 (CRITICAL) · EPSS 33th percentile

CWECWE 89VNDFabianVNDCommunityTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-18
2026-02-18 18:24Z
HIGH

CVE-2025-70151 — Fabian Scholars_tracking_system: code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-70151

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied filename without validating the file type or extension. By uploading a PHP file and then requesting it from /uploads/, an attacker can execute arbitrary PHP code as the web server use CVSSv3.1 8.8 (HIGH) · EPSS 46th percentile

CWECWE 434VNDFabianVNDScholarsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-18
2026-02-18 18:24Z
CRIT

CVE-2025-70150 — Codeastro Membership_management_system: Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter. CVSSv3.1 9.8 (CRITICAL) · EPSS 45th percentile

CWECWE 862VNDCodeastroTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-18
2026-02-18 18:24Z
HIGH

CVE-2025-14009 — Nltk Nltk: This allows attackers to craft malicious zip packages that, when downloaded and extracted by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14009

A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks. This allows attackers to craft malicious zip packages that, when downloaded and extracted by NLTK, can execute arbitrary code. The vulnerability arises because NLTK assumes all downloaded packages are trusted and extracts them without validation. If CVSSv3.1 8.8 (HIGH)

CWECWE 94VNDNltkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-18
2026-02-18 17:21Z
CRIT

CVE-2025-70149 — Codeastro Membership_management_system: Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-70149

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter. CVSSv3.1 9.8 (CRITICAL) · EPSS 28th percentile

CWECWE 89VNDCodeastroTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-02-18
2026-02-18 17:21Z
CRIT

CVE-2025-70146 — Projectworlds Online_time_table_generator: Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-70146

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations (e.g.,adding records, deleting records) via direct HTTP requests to affected endpoints without a valid session. CVSSv3.1 9.1 (CRITICAL) · EPSS 38th percentile

CWECWE 862CWECWE 306VNDProjectworldsTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-02-18
2026-02-18 17:21Z
CRIT

CVE-2025-70141 — Oretnom23 Customer_support_system: SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-70141

SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in admin_class.php based on the action parameter. An unauthenticated remote attacker can perform sensitive operations such as creating customers and deleting users (including the admin account), as well as modifying or deleting other application records (tickets, d CVSSv3.1 9.4 (CRITICAL) · EPSS 44th percentile

CWECWE 862CWECWE 306VNDSourcecodesterVNDOretnom23TYPVulnerability
9.4
CVSS v3.1
97
Edit Score
2026-02-18
2026-02-18 16:22Z
HIGH

CVE-2026-23230 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid bitfields to avoid shared-byte RMW races is_open, has_lease and on_list are stored in the same bitfield byte in struct cached_fid but are updated in different code paths that may run concurrently. Bitfield assignments generate byte read–modify–write operations (e.g. `orb $mask, addr` on x86_64), so updating one flag can restore stale values of the others. A possible interleavi CVSSv3.1 8.8 (HIGH) · EPSS 9th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-18
2026-02-18 16:22Z
HIGH

CVE-2025-71234 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix slab-out-of-bounds

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-71234

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add The driver does not set hw->sta_data_size, which causes mac80211 to allocate insufficient space for driver private station data in __sta_info_alloc(). When rtl8xxxu_sta_add() accesses members of struct rtl8xxxu_sta_info through sta->drv_priv, this results in a slab-out-of-bounds write. KASAN report on RISC-V (VisionFive 2) with RTL8192EU adapter: CVSSv3.1 8.8 (HIGH) · EPSS 2th percentile

CWECWE 787TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-18
2026-02-18 12:00Z
CRIT

Carelessness versus craftsmanship in cryptography

Trail of Bits·blog.trailofbits.com

Trail of Bits disclosed widespread key/IV reuse vulnerabilities in popular AES libraries aes-js (850+ npm dependents, 700k+ repos) and pyaes (23k+ repos) caused by default IV of 0x00000000_00000000_00000000_00000001 in CTR mode. The vulnerability affects downstream projects including strongMan VPN Manager, where attackers with database access could recover RSA private keys and X.509 certificates in seconds, enabling impersonation and MITM attacks. strongSwan maintainer Tobias Brunner responded with immediate patching and migration tools; aes-js maintainer has ignored the issue since 2022.

SRFApplicationTACTA0006VNDStrongswanVNDAes JsVNDPyaesVNDStrongmanTYPResearchTYPAdvisory
87
Edit Score
2026-02-18
2026-02-18 09:15Z
CRIT

CVE-2025-33073 — PoC Exploit for the NTLM reflection SMB flaw.

GitHub · recent CVE PoCs·github.comGITHUB POCCVE-2025-33073in the wild

Public PoC exploit released for CVE-2025-33073, an NTLM reflection vulnerability in SMB that enables relay attacks against Windows systems. The exploit chains NTLM reflection with DNS coercion or LLMNR poisoning to achieve RCE as SYSTEM, with variants supporting LDAPS relay even when SMB signing is enabled through MIC bypass techniques.

SRFOsSRFNetworkTACTA0006TACTA0008TACTA0009VNDMicrosoftTYPWriteupTYPExploit
92
Edit Score
2026-02-18
2026-02-18 00:00Z
HIGH

Speeding APT Attack Confirmation with Attack Discovery, Workflows, and Agent Builder

Elastic Security Labs·elastic.co

Elastic Security Labs published a technical walkthrough demonstrating how Attack Discovery, Workflows, and Agent Builder can automatically detect, correlate, and confirm APT-level attacks using the Chrysalis backdoor (Lotus Blossom/Billbug) as a case study. The post details a two-step workflow that reduces incident confirmation time from 2-6 hours to under 4 minutes by automating alert correlation, IOC enrichment via VirusTotal, log hunting via ES|QL, on-call scheduling, case creation, and Slack notification through agentic reasoning.

SRFApplicationTACTA0005TACTA0001TACTA0002TACTA0003SRFCloudTACTA0011SWElastic Security
72
Edit Score
2026-02-17
2026-02-17 19:21Z
HIGH

CVE-2026-26731 — Totolink A3002ru_firmware: A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26731

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function. CVSSv3.1 8.8 (HIGH)

CWECWE 787CWECWE 121VNDTotolinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-17
2026-02-17 17:05Z
HIGH

STOP THE CAP: Making Entra ID Conditional Access Make Sense Offline

SpecterOps·specterops.io

SpecterOps released CAPSlock, an offline Conditional Access policy (CAP) analysis tool for Microsoft Entra ID that enables red teamers and defenders to reason about policy enforcement without triggering sign-in artifacts. Built on ROADrecon exports, CAPSlock simulates sign-in scenarios, identifies policy gaps, and distinguishes between definitive and signal-dependent policy application to surface potential bypass paths.

TACTA0005TACTA0001SRFIdentitySRFCloudVNDMicrosoftVNDSpecteropsTYPResearchTYPTool
82
Edit Score
2026-02-17
2026-02-17 15:16Z
HIGH

CVE-2026-2616 — Beetel 777vr1_firmware: The manipulation leads to hard-coded credentials.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2616

A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the component Web Management Interface. The manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is advisable to modify the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 798CWECWE 259VNDBeetelTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-17
2026-02-17 15:16Z
CRIT

CVE-2026-22208 — OpenS100: (the reference implementation S-100 viewer) prior to commit 753cf29 contains a remote code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-22208

OpenS100 (the reference implementation S-100 viewer) prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaL_openlibs() without sandboxing or capability restrictions, exposing standard libraries such as 'os' and 'io' to untrusted portrayal catalogues. An attacker can provide a malicious S-100 portrayal catalogue containing Lua scripts that execute arbitrary commands with the pr CVSSv3.1 9.6 (CRITICAL) · EPSS 46th percentile

CWECWE 829CWECWE 749VNDOpens100TYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-02-17
2026-02-17 12:16Z
HIGH

CVE-2025-7631 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-7631

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software allows SQL Injection. This issue affects Tumeva Prime News Software: from v.1.0.1 before v1.0.2. CVSSv3.1 8.6 (HIGH) · EPSS 2th percentile

CWECWE 89TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-02-17
2026-02-17 00:00Z
HIGH

Spam Campaign Abuses Atlassian Jira, Targets Government and Corporate Entities

Trend Micro Research·trendmicro.com

Trend Micro disclosed a spam campaign (December 2025–January 2026) that abused Atlassian Jira Cloud's trusted infrastructure and email systems to deliver targeted phishing and spam to government, corporate, and language-specific audiences. Attackers created disposable trial Jira instances, leveraged Jira Automation rules to send crafted emails from legitimate atlassian.net domains, and bypassed email security controls by exploiting SPF/DKIM compliance and inherent trust in SaaS notifications, ultimately redirecting victims to investment scams and online casinos via Keitaro TDS.

SRFApplicationTACTA0001SRFCloudVNDAtlassianTYPResearchTYPThreat IntelSTGExecutionSTGInitial Access
72
Edit Score
2026-02-16
2026-02-16 15:18Z
HIGH

CVE-2026-2447 — Mozilla Firefox: Heap buffer overflow in libvpx.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2447

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2. CVSSv3.1 8.8 (HIGH)

CWECWE 122VNDMozillaVNDHeapTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-16
2026-02-16 09:27Z
CRIT

Nuclei Templates v10.3.9 – Release Notes

Nuclei templates·github.comCVE-2026-25892CVE-2026-23744CVE-2026-22812CVE-2026-21891CVE-2026-21877CVE-2026-1731CVE-2026-1207CVE-2025-54068CVE-2025-40551CVE-2025-14528CVE-2025-2611CVE-2024-8943CVE-2024-8911CVE-2024-6671CVE-2024-6250CVE-2024-0705CVE-2023-35708CVE-2022-31678CVE-2022-3236CVE-2021-22017CVE-2019-13608CVE-2017-9841in the wild

Nuclei Templates v10.3.9 release adds 182 new detection templates covering 116 CVEs, including critical RCE vulnerabilities in n8n, Laravel Livewire, BeyondTrust Remote Support, SolarWinds Web Help Desk, and multiple authentication bypass/SQL injection flaws. The release includes templates for both recent 2026 CVEs and historical vulnerabilities with public exploits, alongside bug fixes reducing false positives and negatives in existing detection logic.

SRFApplicationTACTA0001TACTA0002SRFNetwork ApplianceSRFWebTACTA0003VNDProjectdiscoveryTYPTool
9.8
CVSS v3.1
78
Edit Score
2026-02-15
2026-02-15 16:15Z
HIGH

CVE-2026-26369 — Jung-group Enet_smart_home: eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26369

eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization checks in the setUserGroup JSON-RPC method. A low-privileged user (UG_USER) can send a crafted POST request to /jsonrpc/management specifying their own username to elevate their account to the UG_ADMIN group, bypassing intended access controls and gaining administrative capabilities such as modifying device configurations, network settings, and other smart ho CVSSv3.1 8.8 (HIGH) · EPSS 48th percentile

CWECWE 269VNDSmartVNDJung GroupTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-15
2026-02-15 04:02Z
CRIT

PSFree — PSFree WebKit Exploit & Lapse Kernel Exploit For PS4 9.00 [WIP] By abc

GitHub · kernel exploits·github.comGITHUB POC

PSFree is a public exploit toolkit combining a WebKit vulnerability chain with the Lapse kernel exploit for PS4 firmware 9.00, achieving ~80% stability. The repository includes payload delivery mechanisms, ROP gadgets, and kernel patches to bypass security controls and achieve code execution.

TACTA0004TACTA0002SRFHardwareVNDSonyTYPToolTYPExploitSTGPrivescSTGExecution
78
Edit Score
2026-02-14
2026-02-14 16:15Z
HIGH

CVE-2025-71202 — Linux Linux_kernel: Enable SVA on x86 architecture since the IOMMU can now receive notification to flush

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-71202

In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space Introduce a new IOMMU interface to flush IOTLB paging cache entries for the CPU kernel address space. This interface is invoked from the x86 architecture code that manages combined user and kernel page tables, specifically before any kernel page table page is freed and reused. This addresses the main issue with vfree() which is a common oc CVSSv3.1 8.8 (HIGH) · EPSS 1th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score