Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-15 08:03Z
2026-02-03
2026-02-03 19:16Z
HIGH

CVE-2025-62600 — Eprosima Fast_dds: If the fields of PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN in the DATA Submessage — specifically by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62600

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes an Out-Of-Memory (OOM) condition, resulting in remote termination of Fast-DDS. If the fields of PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN in the DATA Submessage — specifically by tamperin CVSSv3.1 8.6 (HIGH)

CWECWE 190CWECWE 789VNDEprosimaVNDFastTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-02-03
2026-02-03 18:16Z
HIGH

CVE-2025-62599 — Eprosima Fast_dds: If the fields of PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN in the DATA Submessage — specifically by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62599

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes an Out-Of-Memory (OOM) condition, resulting in remote termination of Fast-DDS. If the fields of PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN in the DATA Submessage — specifically by tamperin CVSSv3.1 8.6 (HIGH)

CWECWE 190CWECWE 789VNDEprosimaVNDFastTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-02-03
2026-02-03 15:16Z
CRIT

CVE-2025-5319 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-5319

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows SQL Injection. This issue affects DIGITA Efficiency Management System: through 03022026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-03
2026-02-03 13:15Z
HIGH

CVE-2025-6397 — Neutralization: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-6397

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ankara Hosting Website Design Website Software allows Reflected XSS. This issue affects Website Software: through 03022026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.6 (HIGH) · EPSS 20th percentile

CWECWE 79TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-02-03
2026-02-03 07:16Z
CRIT

CVE-2026-24465 — Elecom Wab-s300iw-pd_firmware: Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24465

Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution. CVSSv3.1 9.8 (CRITICAL)

CWECWE 121VNDElecomVNDStackTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-03
2026-02-03 07:16Z
HIGH

CVE-2026-22550 — Elecom Wrc-x1500gsa-b_firmware: OS command injection vulnerability exists in WRC-X1500GS-B and WRC-X1500GSA-B.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-22550

OS command injection vulnerability exists in WRC-X1500GS-B and WRC-X1500GSA-B. A crafted request from a logged-in user may lead to an arbitrary OS command execution. CVSSv3.1 8.8 (HIGH)

CWECWE 78VNDElecomTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-03
2026-02-03 02:16Z
CRIT

CVE-2025-67484 — Mediawiki Mediawiki: Vulnerability in Wikimedia Foundation MediaWiki.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67484

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1. CVSSv3.1 9.8 (CRITICAL)

CWECWE 20VNDMediawikiVNDVulnerabilityTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-02-03
2026-02-03 02:16Z
HIGH

CVE-2025-67478 — Mediawiki Checkuser: Vulnerability in Wikimedia Foundation CheckUser.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67478

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php. This issue affects CheckUser: from * before 1.39.14, 1.43.4, 1.44.1. CVSSv3.1 8.8 (HIGH)

VNDMediawikiVNDVulnerabilityTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-02
2026-02-02 23:16Z
HIGH

CVE-2026-24737 — Parall Jspdf: Prior to 4.1.0, user control of properties and methods of the Acroform module allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24737

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following methods or properties, a user can inject arbitrary PDF objects, such as JavaScript actions, which are executed when the victim opens the document. The vulnerable API members are AcroformChoiceField.addO CVSSv3.1 8.1 (HIGH)

CWECWE 116CWECWE 917VNDParallTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-02-02
2026-02-02 23:16Z
CRIT

CVE-2026-22778 — Vllm Vllm: With this leak, we reduce ASLR from 4 billion guesses to ~8 guesses.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-22778

vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address. With this leak, we reduce ASLR from 4 billion guesses to ~8 guesses. This vulnerability can be chained a heap overflow with JPEG2000 decoder in OpenCV/FFmpeg to achieve remote code execution. This vulnerability is fixed in 0.14.1. CVSSv3.1 9.8 (CRITICAL) · EPSS 87th percentile

CWECWE 532CWECWE 209VNDVllmTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2026-02-02
2026-02-02 18:16Z
HIGH

CVE-2026-22223 — Tp-link Archer_be230_firmware: An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-22223

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Altho CVSSv3.1 8.0 (HIGH) · EPSS 73th percentile

CWECWE 78VNDTp LinkVNDCommandTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-02-02
2026-02-02 18:16Z
HIGH

CVE-2026-22222 — Tp-link Archer_be230_firmware: An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-22222

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code paths CVSSv3.1 8.0 (HIGH) · EPSS 73th percentile

CWECWE 78VNDTp LinkVNDCommandTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-02-02
2026-02-02 18:16Z
HIGH

CVE-2026-22221 — Tp-link Archer_be230_firmware: An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-22221

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Althou CVSSv3.1 8.0 (HIGH)

CWECWE 78VNDTp LinkVNDCommandTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-02-02
2026-02-02 18:16Z
HIGH

CVE-2026-0631 — Tp-link Archer_be230_firmware: An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and OpenVPN of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0631

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and OpenVPN of AXE75 v1 allows an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code CVSSv3.1 8.0 (HIGH) · EPSS 67th percentile

CWECWE 78VNDTp LinkVNDCommandTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-02-02
2026-02-02 14:16Z
HIGH

CVE-2026-24070 — Native-instruments Native_access: The communication with the XPC service of the privileged helper is only allowed if

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24070

During the installation of the Native Access application, a privileged helper `com.native-instruments.NativeAccess.Helper2`, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC service of the privileged helper is only allowed if the client process is signed with the corresponding certificate and fulfills the following code signing requirement: "anchor trusted a CVSSv3.1 8.8 (HIGH) · EPSS 0th percentile

CWECWE 426VNDNative InstrumentsVNDNativeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-02
2026-02-02 14:16Z
HIGH

CVE-2026-1761 — This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-1761

A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may result in application crashes or arbitrary code execution in applications that process untrusted server responses, and it does not require authentication or user inter CVSSv3.1 8.6 (HIGH)

CWECWE 121TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-02-02
2026-02-02 13:15Z
HIGH

CVE-2025-8587 — Akceyazilim Skspro: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8587

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows SQL Injection. This issue affects SKSPro: through 07012026. CVSSv3.1 8.6 (HIGH) · EPSS 5th percentile

CWECWE 89VNDAkceyazilimTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-02-02
2026-02-02 06:16Z
HIGH

CVE-2026-1531 — This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-1531

A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information. CVSSv3.1 8.1 (HIGH)

CWECWE 295TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-02-02
2026-02-02 06:16Z
HIGH

CVE-2026-1530 — This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-1530

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise. CVSSv3.1 8.1 (HIGH)

CWECWE 295TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-02-01
2026-02-01 02:05Z
INFO

v1.6.10

Sliver releases·github.com

Sliver v1.6.10 released with stability improvements to SOCKS5 for HTTP/mTLS transports, expanded time format support, new shellcode encoders, WASM Donut integration, and Go 1.25.6 upgrade. No security vulnerabilities disclosed; this is a routine feature and maintenance release.

SRFOsVNDBishop FoxTYPToolSTGExecutionSTGC2
35
Edit Score
2026-01-31
2026-01-31 12:16Z
CRIT

CVE-2025-71183 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging (either with the rename exchange operation or regular renames in multiple non-atomic steps) two inodes and at least one of them is a directory, we can end up with a log tree that contains only of the inodes and after a power failure that can result in an attempt to delete the other inode when it should not because it was CVSSv3.1 9.1 (CRITICAL) · EPSS 6th percentile

TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-01-30
2026-01-30 21:15Z
HIGH

CVE-2025-24293 — Active: The default allowed list contains three methods allow for the circumvention of the safe

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-24293

# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allow for the circumvention of the safe defaults which enables potential command injection vulnerabilities in cases where arbitrary user supplied input is accepted as valid transformation methods or parameters. Impact ------ Th CVSSv3.1 8.1 (HIGH)

CWECWE 94CWECWE 77CWECWE 88VNDActiveTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-01-30
2026-01-30 17:00Z
HIGH

Weaponizing Whitelists: An Azure Blob Storage Mythic C2 Profile

SpecterOps·specterops.io

SpecterOps released azureBlob, a new Mythic C2 profile that leverages Azure Blob Storage for command and control communications. The technique exploits common firewall whitelisting of *.blob.core.windows.net—a broad exception carved out in deployment guides from vendors like Citrix and Parallels—to establish C2 channels in mature enterprise environments with restrictive egress controls. The implementation includes container-scoped SAS tokens to limit blast radius if an agent is compromised, and integrates with the Medusa agent with a reference Python implementation (Pegasus) for validation.

SRFApplicationTACTA0005SRFCloudTACTA0011VNDMicrosoftVNDMythicTYPResearchTYPTechnique
78
Edit Score
2026-01-30
2026-01-30 16:16Z
HIGH

CVE-2025-4686 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-4686

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kodmatic Computer Software Tourism Construction Industry and Trade Ltd. Co. Online Exam and Assessment allows SQL Injection. This issue affects Online Exam and Assessment: through 30012026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.6 (HIGH) · EPSS 17th percentile

CWECWE 89TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-01-30
2026-01-30 16:15Z
CRIT

Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)

watchTowr Labs·labs.watchtowr.comCVE-2026-1281CVE-2026-1340in the wild0day

watchTowr Labs disclosed two pre-auth RCE vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) affecting the /mifs/c/appstore endpoint. The vulnerabilities stem from unsafe Bash script handling of user-controlled input passed via Apache RewriteMap directives, exploitable through arithmetic expansion and command substitution. Both CVEs are actively exploited in the wild and patched only via temporary RPM workarounds until Q1 2026.

SRFApplicationTACTA0001TACTA0002SRFNetworkVNDIvantiTYPWriteupTYPExploitTYPVulnerability
9.8
CVSS v3.1
95
Edit Score