Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted several times to verifying fixing process but did not respond in any way. CVSSv3.1 8.2 (HIGH) · EPSS 5th percentile
Project Zero published a detailed exploit writeup for CVE-2024-54529, a type confusion vulnerability in macOS CoreAudio's coreaudiod daemon. The exploit chains heap spray via property lists, uninitialized memory in ngne objects, process restart timing, and ROP gadgets to achieve arbitrary code execution with coreaudiod privileges. Full proof-of-concept code and custom instrumentation tools are open-sourced.
Sliver v1.6.9 released with feature additions including certificate database management, edit command, and notifications feature. This is a routine tool update with 358 commits since the previous v1.6.8 release.
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. CVSSv3.1 9.8 (CRITICAL)
Volatility 3 2.27.0 released with new windows.pebmasquerade plugin, improvements to linux.malfind, linux.lsof, and windows.vadyarascan, plus enhanced arrow/parquet format rendering. Known issues affect Windows 11 image handling and arrow/parquet support in the Windows binary.
An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the client side using the MD5 algorithm over a predictable string format CVSSv3.1 9.8 (CRITICAL) · EPSS 33th percentile
AzureHound v2.9.0 released with incremental feature additions including User-Agent customization, Jira transfer capability, and fixes to Azure RM device owner collection and Entra ID user logon timestamp tracking. This is a routine tool update with no security vulnerabilities disclosed.
The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to extract usernames and password hashes from the tbl_users database table. Attackers can exploit the /frontend/get_article_suggestion/ endpoint by crafting malicious search parameters to progressively guess and retrieve user credentials through boolean-based inference techniques. CVSSv3.1 8.2 (HIGH) · EPSS 15th percentile
Ajenti 2.1.36 contains an authentication bypass vulnerability that allows remote attackers to execute arbitrary commands after successful login. Attackers can leverage the /api/terminal/create endpoint to send a netcat reverse shell payload targeting a specified IP and port. CVSSv3.1 9.8 (CRITICAL) · EPSS 68th percentile
kernel-exploit-factory is a curated repository of 37 Linux kernel CVE exploits with working proof-of-concept code, detailed writeups, and pre-configured QEMU debug environments. Each exploit includes vulnerability analysis, protection bypass techniques (KASLR/SMEP/SMAP), and privilege escalation chains spanning from 2015 to 2025, covering heap overflows, use-after-free, integer overflows, and eBPF verifier bypasses.
Improper Access Control vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Authentication Abuse. This issue affects QR Menu: before s1.05.12. CVSSv3.1 8.0 (HIGH) · EPSS 27th percentile
Trail of Bits published research on introducing cryptographic agility into Sigstore, the open-source software signing ecosystem. The work addresses the problem of signature obsolescence by implementing a centralized algorithm registry, updating Rekor and Fulcio to accept configurable algorithm restrictions, and integrating algorithm selection into Cosign—while avoiding in-band algorithm signaling vulnerabilities through predefined algorithm suites and out-of-band negotiation.
Sekoia TDR identified IClickFix, a widespread malware distribution framework active since December 2024 that compromises WordPress sites via watering hole attacks to deliver the ClickFix social engineering lure. The framework has infected over 3,800 WordPress sites across 82 countries, using a Traffic Distribution System (YOURLS) to filter traffic and deliver NetSupport RAT through multi-stage JavaScript payloads and obfuscated PowerShell commands. The operator has continuously evolved the framework throughout 2025, refining lures, adding delivery stages, and expanding infrastructure to evade detection.
Sliver v1.6.8 released with minor bug fixes and feature updates including SGN fixes, general updates, website CSS corrections, and configuration YAML enhancements. No security vulnerabilities or breaking changes documented in the release notes.
Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in the message field to trigger arbitrary command execution when the CSV is opened in spreadsheet applications. CVSSv3.1 9.8 (CRITICAL) · EPSS 96th percentile
The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution. CVSSv3.1 9.8 (CRITICAL)
The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 6.7 due to insufficient restriction on the 'profile_save_field' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_capabilities' parameter during a profile update. CVSSv3.1 8.8 (HIGH)
Nuclei v3.7.0 released with new features including CDP endpoint configuration for headless mode control and RSYNC module support. Release includes multiple bug fixes addressing race conditions, segfaults, logging issues, and template variable handling.
Sliver v1.6.7 released with minor feature additions including website info functionality, SQLite pragma configuration updates, and readline/console dependency upgrades. No security fixes or vulnerability disclosures in this release.
node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue. CVSSv3.1 8.2 (HIGH)
PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue. CVSSv3.1 8.8 (HIGH)
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, F CVSSv3.1 9.8 (CRITICAL) · EPSS 90th percentile
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. CVSSv3.1 8.4 (HIGH)
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that could lead to remote code execution. CVSSv3.1 8.1 (HIGH)
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in themrdemonized xray-monolith.This issue affects xray-monolith: before 2025.12.30. CVSSv3.1 9.1 (CRITICAL) · EPSS 19th percentile