Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-15 01:08Z
2026-02-14
2026-02-14 16:15Z
HIGH

CVE-2025-71202 — Linux Linux_kernel: Enable SVA on x86 architecture since the IOMMU can now receive notification to flush

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-71202

In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space Introduce a new IOMMU interface to flush IOTLB paging cache entries for the CPU kernel address space. This interface is invoked from the x86 architecture code that manages combined user and kernel page tables, specifically before any kernel page table page is freed and reused. This addresses the main issue with vfree() which is a common oc CVSSv3.1 8.8 (HIGH) · EPSS 1th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-14
2026-02-14 07:16Z
CRIT

CVE-2026-1306 — Synth: The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-1306

The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible granted the attacker can obtain a valid nonce. The nonce is exposed in frontend JavaScript making it trivially accessible CVSSv3.1 9.8 (CRITICAL)

CWECWE 434VNDSynthTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-14
2026-02-14 05:16Z
HIGH

CVE-2026-2144 — Magic: The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2144

The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.05. This is due to the plugin storing the magic login QR code image with a predictable, static filename (QR_Code.png) in the publicly accessible WordPress uploads directory during the email sending process. The file is only deleted after wp_mail() completes, creating an exploitable race condition window. This makes it possible for unauthenticated CVSSv3.1 8.1 (HIGH)

CWECWE 269VNDMagicTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-02-13
2026-02-13 18:25Z
INFO

v2.9.2

AzureHound releases·github.com

AzureHound v2.9.2 released with a bug fix addressing unmarshalling of wrapper structs. The update resolves a technical issue in the custom unmarshaller that was causing deserialization failures.

SRFIdentitySRFCloudVNDSpecteropsVNDMicrosoft AzureTYPTool
35
Edit Score
2026-02-13
2026-02-13 16:16Z
CRIT

CVE-2026-26221 — Hyland: An attacker who can reach the service can send crafted .NET Remoting requests to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26221

Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can reach the service can send crafted .NET Remoting requests to default HTTP channel endpoints on TCP/8900 (e.g., TimerServiceAPI.rem and TimerServiceEvents.rem for Workflow) to trigger unsafe object unmarshalling, enabling arbitrary file read/write. By writing attacker-controlled content into web-accessible locations or CVSSv3.1 9.8 (CRITICAL)

CWECWE 502VNDHylandTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-13
2026-02-13 14:16Z
CRIT

CVE-2026-23112 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-23112

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length or offset exceeds sg_cnt and then use bogus sg->length/offset values, leading to _copy_to_iter() GPF/KASAN. Guard sg_idx, remaining entries, and sg->length/offset before building the bvec. CVSSv3.1 9.8 (CRITICAL) · EPSS 24th percentile

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-13
2026-02-13 14:16Z
HIGH

CVE-2026-1619 — Uni-yaz Flexcity: Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-1619

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36. CVSSv3.1 8.3 (HIGH) · EPSS 6th percentile

CWECWE 639VNDUni YazTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-02-13
2026-02-13 14:16Z
HIGH

CVE-2026-1618 — Uni-yaz Flexcity: Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-1618

Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36. CVSSv3.1 8.8 (HIGH) · EPSS 12th percentile

CWECWE 288VNDUni YazTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-13
2026-02-13 14:16Z
HIGH

CVE-2025-14349 — Uni-yaz Flexcity: Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14349

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36. CVSSv3.1 8.8 (HIGH) · EPSS 11th percentile

CWECWE 306CWECWE 267VNDUni YazTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-12
2026-02-12 23:16Z
HIGH

CVE-2020-37167 — ClamAV: versions prior to 0.103.0-rc contain a vulnerability in function name processing through the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-37167

ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine. CVSSv3.1 8.4 (HIGH) · EPSS 8th percentile

VNDClamavTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-02-12
2026-02-12 19:15Z
CRIT

CVE-2026-26219 — Newbee-mall_project Newbee-mall: stores and verifies user passwords using an unsalted MD5 hashing algorithm.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26219

newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorporate per-user salts or computational cost controls, enabling attackers who obtain password hashes through database exposure, backup leakage, or other compromise vectors to rapidly recover plaintext credentials via offline attacks. CVSSv3.1 9.1 (CRITICAL) · EPSS 9th percentile

CWECWE 327VNDNewbee Mall ProjectTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-02-12
2026-02-12 19:15Z
CRIT

CVE-2026-26218 — Newbee-mall_project Newbee-mall: Deployments that initialize or reset the database using the provided schema and fail to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26218

newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predictable default password. Deployments that initialize or reset the database using the provided schema and fail to change the default administrative credentials may allow unauthenticated attackers to log in as an administrator and gain full administrative control of the application. CVSSv3.1 9.8 (CRITICAL) · EPSS 29th percentile

CWECWE 798VNDNewbee Mall ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-12
2026-02-12 16:16Z
HIGH

CVE-2026-26217 — Kidocode Crawl4ai: versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26217

Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. The /execute_js, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing unauthenticated remote attackers to read arbitrary files from the server filesystem. An attacker can access sensitive files such as /etc/passwd, /etc/shadow, application configuration files, and environment variables via /proc/self/environ, potentially exposing credentials, API keys, a CVSSv3.1 8.6 (HIGH) · EPSS 45th percentile

CWECWE 22VNDCrawl4aiVNDKidocodeTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-02-12
2026-02-12 16:16Z
CRIT

CVE-2026-26216 — Kidocode Crawl4ai: versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26216

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and wri CVSSv3.1 10.0 (CRITICAL) · EPSS 73th percentile

CWECWE 94VNDCrawl4aiVNDKidocodeTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-02-12
2026-02-12 15:16Z
CRIT

CVE-2025-14014 — Upload: Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14014

Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Smart Panel: before 20251215. CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

CWECWE 434TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-12
2026-02-12 14:16Z
HIGH

CVE-2026-2007 — Postgresql Postgresql: Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2007

Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation. PostgreSQL 18.1 and 18.0 are affected. CVSSv3.1 8.2 (HIGH)

CWECWE 120CWECWE 122VNDPostgresqlVNDHeapTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-02-12
2026-02-12 14:16Z
HIGH

CVE-2026-2006 — Postgresql Postgresql: Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2006

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected. CVSSv3.1 8.8 (HIGH)

CWECWE 129CWECWE 1285VNDPostgresqlTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-12
2026-02-12 14:16Z
HIGH

CVE-2026-2005 — Postgresql Postgresql: Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2005

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected. CVSSv3.1 8.8 (HIGH)

CWECWE 120CWECWE 122VNDPostgresqlVNDHeapTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-12
2026-02-12 14:16Z
HIGH

CVE-2026-2004 — Postgresql Postgresql: Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2004

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected. CVSSv3.1 8.8 (HIGH)

CWECWE 1287VNDPostgresqlTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-12
2026-02-12 14:16Z
HIGH

CVE-2025-13002 — Farktor E-commerce_package: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13002

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS). This issue affects E-Commerce Package: through 27112025. CVSSv3.1 8.2 (HIGH) · EPSS 2th percentile

CWECWE 79VNDFarktorTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-02-12
2026-02-12 14:16Z
CRIT

CVE-2025-10969 — Farktor E-commerce_package: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10969

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injection. This issue affects E-Commerce Package: through 27112025. CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 89VNDFarktorTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-12
2026-02-12 08:00Z
HIGH

Bypassing Administrator Protection by Abusing UI Access

Project Zero·googleprojectzero.blogspot.com

Project Zero researcher disclosed 9 bypasses of Windows Administrator Protection, with detailed analysis of 5 root causes centered on UI Access abuse. The vulnerabilities exploit weaknesses in the UAC service's RAiLaunchAdminProcess RPC implementation, secure directory validation, and shared profile/environment handling to achieve arbitrary code execution in High-integrity UI Access processes. All issues have been patched.

SRFOsTACTA0004TACTA0005VNDMicrosoftTYPResearchTYPWriteupSTGDefense EvasionSTGPrivesc
82
Edit Score
2026-02-12
2026-02-12 07:30Z
HIGH

OysterLoader Unmasked: The Multi-Stage Evasion Loader

Sekoia.io·sekoia.ioin the wild

Sekoia published a comprehensive technical analysis of OysterLoader, a multi-stage C++ loader malware distributed via fake software installers (PuTTY, WinSCP, etc.) and used by the Rhysida ransomware group and WIZARD SPIDER. The four-stage infection chain employs API hammering, custom LZMA decompression, dynamic API resolution, steganography-embedded payloads, and obfuscated C2 communication using non-standard Base64 encoding to deliver ransomware and commodity infostealers like Vidar.

SRFApplicationSRFOsTACTA0001TACTA0002SRFNetworkTACTA0011VNDRhysidaVNDWizard Spider
76
Edit Score
2026-02-11
2026-02-11 23:16Z
CRIT

CVE-2026-20677 — Apple Ipados: A race condition was addressed with improved handling of symbolic links.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-20677

A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. A shortcut may be able to bypass sandbox restrictions. CVSSv3.1 9.0 (CRITICAL) · EPSS 18th percentile

CWECWE 362CWECWE 367VNDAppleTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-02-11
2026-02-11 19:15Z
CRIT

CVE-2025-69872 — DiskCache: An attacker with write access to the cache directory can achieve arbitrary code execution

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-69872

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache. CVSSv3.1 9.8 (CRITICAL)

CWECWE 94CWECWE 502VNDDiskcacheTYPVulnerability
9.8
CVSS v3.1
99
Edit Score