Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-15 19:36Z
2026-01-02
2026-01-02 15:16Z
HIGH

CVE-2025-52872 — Qnap Quts_hero: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-52872

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later CVSSv3.1 8.1 (HIGH) · EPSS 27th percentile

CWECWE 120VNDQnapTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-01-02
2026-01-02 15:16Z
HIGH

CVE-2025-52864 — Qnap Quts_hero: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-52864

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later CVSSv3.1 8.1 (HIGH) · EPSS 27th percentile

CWECWE 120VNDQnapTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-01-02
2026-01-02 15:16Z
HIGH

CVE-2025-52863 — Qnap Quts_hero: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-52863

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later CVSSv3.1 8.1 (HIGH) · EPSS 27th percentile

CWECWE 120VNDQnapTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-01-02
2026-01-02 06:15Z
HIGH

CVE-2025-15431 — Utt 512w_firmware: Executing a manipulation of the argument filename can lead to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15431

A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing a manipulation of the argument filename can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 120CWECWE 119VNDUttTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-01-02
2026-01-02 06:15Z
HIGH

CVE-2025-15430 — Utt 512w_firmware: Performing a manipulation of the argument oldfilename results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15430

A vulnerability was detected in UTT 进取 512W 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formFtpServerShareDirSelcet. Performing a manipulation of the argument oldfilename results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 120CWECWE 119VNDUttTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-01-02
2026-01-02 06:15Z
HIGH

CVE-2025-15429 — Utt 512w_firmware: Such manipulation of the argument addCommand leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15429

A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formConfigCliForEngineerOnly. Such manipulation of the argument addCommand leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 58th percentile

CWECWE 120CWECWE 119VNDUttTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-01-02
2026-01-02 05:15Z
HIGH

CVE-2025-15428 — Utt 512w_firmware: This manipulation of the argument Profile causes buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15428

A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This manipulation of the argument Profile causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 58th percentile

CWECWE 120CWECWE 119VNDUttTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-01-01
2026-01-01 19:15Z
CRIT

CVE-2025-68620 — Signalk Signal_k_server: Both paths require zero authentication and enable complete authentication bypass.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68620

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 expose two features that can be chained together to steal JWT authentication tokens without any prior authentication. The attack combines WebSocket-based request enumeration with unauthenticated polling of access request status. The first is Unauthenticated WebSocket Request Enumeration: When a WebSocket client connects to the SignalK stream endpoint with the `serverevents=a CVSSv3.1 9.1 (CRITICAL) · EPSS 44th percentile

CWECWE 288VNDSignalVNDSignalkTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-01-01
2026-01-01 18:15Z
CRIT

CVE-2025-66398 — Signalk Signal_k_server: This allows the attacker to hijack the administrator's "Restore" functionality to overwrite critical server

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66398

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state (`restoreFilePath`) of the server via the `/skServer/validateBackup` endpoint. This allows the attacker to hijack the administrator's "Restore" functionality to overwrite critical server configuration files (e.g., `security.json`, `package.json`), leading to account takeover and Remote Code Execution (RCE). Version 2 CVSSv3.1 9.6 (CRITICAL) · EPSS 97th percentile

CWECWE 78CWECWE 913VNDSignalVNDSignalkTYPVulnerability
9.6
CVSS v3.1
100
Edit Score
2026-01-01
2026-01-01 17:15Z
HIGH

CVE-2025-48769 — Apache Nuttx: Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48769

Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implementation and single buffer use by two different pointer variables allowed arbitrary user provided size buffer reallocation and write to the previously freed heap chunk, that in specific cases could cause unintended virtual filesystem rename/move operation results. This issue affects Apache NuttX RTOS: from 7.20 before 12.11.0. Users of virtual filesystem b CVSSv3.1 8.1 (HIGH) · EPSS 76th percentile

CWECWE 416VNDApacheTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-01-01
2026-01-01 17:15Z
HIGH

CVE-2025-47411 — Apache Streampipes: A user with a legitimate non-administrator account can exploit a vulnerability in the user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-47411

A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator.  This vulnerability allows an attacker to gain administrative control over the application by manipulating JWT tokens, which can lead to data tampering, unauthorized access and other security issues. This issue affects Apache StreamPipes: through 0. CVSSv3.1 8.1 (HIGH) · EPSS 97th percentile

CWECWE 269VNDApacheTYPVulnerability
8.1
CVSS v3.1
95
Edit Score
2025-12-31
2025-12-31 22:15Z
CRIT

CVE-2025-69288 — Kromit Titra: Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the timeEntryRule

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-69288

Titra is open source project time tracking software. Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the timeEntryRule in the database. The value is then passed to a NodeVM value to execute as code. Without sanitization, it leads to a Remote Code Execution. Version 0.99.49 fixes the issue. CVSSv3.1 9.1 (CRITICAL) · EPSS 56th percentile

CWECWE 20VNDKromitVNDTitraTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-31
2025-12-31 22:15Z
CRIT

CVE-2025-69286 — Infiniflow Ragflow: In versions prior to 0.22.0, the use of an insecure key generation algorithm in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-69286

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation algorithm in the API key and beta (assistant/agent share auth) token generation process allows these tokens to be mutually derivable. Specifically, both tokens are generated using the same `URLSafeTimedSerializer` with predictable inputs, enabling an unauthorized user who obtains the shared assistant/agent URL to derive the personal API key CVSSv3.1 9.8 (CRITICAL) · EPSS 54th percentile

CWECWE 340VNDRagflowVNDInfiniflowTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-31
2025-12-31 22:15Z
HIGH

CVE-2025-68700 — Infiniflow Ragflow: In versions prior to 0.23.0, a low-privileged authenticated user (normal login account) can execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68700

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.23.0, a low-privileged authenticated user (normal login account) can execute arbitrary system commands on the server host process via the frontend Canvas CodeExec component, completely bypassing sandbox isolation. This occurs because untrusted data (stdout) is parsed using eval() with no filtering or sandboxing. The intended design was to "automatically convert string results into Py CVSSv3.1 8.8 (HIGH) · EPSS 52th percentile

CWECWE 78VNDRagflowVNDInfiniflowTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-31
2025-12-31 21:15Z
HIGH

CVE-2015-10145 — Gargoyle-router Gargoyle: Successful exploitation may result in full compromise of the device, including unauthorized access to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2015-10145

Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/run_commands.sh. The application fails to properly restrict or validate input supplied via the 'commands' parameter, allowing an authenticated attacker to execute arbitrary shell commands on the underlying system. Successful exploitation may result in full compromise of the device, including unauthorized access to system files and execution of attacker-con CVSSv3.1 8.8 (HIGH) · EPSS 52th percentile

CWECWE 78VNDGargoyle RouterVNDGargoyleTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-31
2025-12-31 20:15Z
HIGH

CVE-2025-30628 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-30628

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) azon-addon-js-composer allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer): from n/a through <= 1.2. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-31
2025-12-31 20:15Z
HIGH

CVE-2025-28949 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-28949

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codedraft Mediabay - WordPress Media Library Folders mediabay allows Blind SQL Injection.This issue affects Mediabay - WordPress Media Library Folders: from n/a through <= 1.4. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-31
2025-12-31 19:15Z
CRIT

CVE-2025-34468 — Libcoap Libcoap: versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34468

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentially achieve remote code execution depending on compiler options and runtime memory protections. Exploitation requires the proxy logic to be enabled (i.e., the proxy request handling cod CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 787CWECWE 121VNDLibcoapTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-31
2025-12-31 19:15Z
HIGH

CVE-2020-36903 — Selea: CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service configuration

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-36903

Selea CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service configuration that allows local users to potentially execute code with elevated privileges. Attackers can exploit the service's unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during application startup or reboot. CVSSv3.1 8.4 (HIGH) · EPSS 4th percentile

CWECWE 428VNDSeleaTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-12-31
2025-12-31 17:16Z
INFO

v3.6.2

Nuclei releases·github.com

Nuclei v3.6.2 released with TLS session caching, custom Jira OAuth URL support, and multiple bug fixes including JavaScript template execution restoration, pagination improvements for issue detection, and segmentation fault resolution in flow execution.

SRFApplicationVNDProjectdiscoveryTYPTool
35
Edit Score
2025-12-31
2025-12-31 12:00Z
HIGH

Detect Go’s silent arithmetic bugs with go-panikint

Trail of Bits·blog.trailofbits.com

Trail of Bits released go-panikint, a modified Go compiler that converts silent integer overflows into runtime panics, enabling fuzzing to detect a previously invisible class of vulnerabilities. The tool was validated by discovering a live integer overflow in Cosmos SDK's RPC pagination logic where offset+limit wrapping caused empty result sets instead of panicking.

SRFApplicationTACTA0007VNDCosmosTYPResearchTYPToolSTGDiscoveryTECT1592EXPInteger Overflow
78
Edit Score
2025-12-30
2025-12-30 23:15Z
CRIT

CVE-2023-54327 — Tinycontrol Lan_controller_firmware: LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-54327

Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication parameter to disable access controls and modify administrative credentials. CVSSv3.1 9.8 (CRITICAL) · EPSS 52th percentile

CWECWE 862VNDTinycontrolTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-30
2025-12-30 23:15Z
CRIT

CVE-2023-53983 — Ateme Flamingo_xl_firmware: Attackers can leverage these hard-coded credentials to gain full remote system control without complex

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53983

Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 798VNDAtemeVNDAneviaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-30
2025-12-30 23:15Z
CRIT

CVE-2022-50796 — Sound4 Impact_firmware: IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-50796

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized access and code execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 75th percentile

CWECWE 22VNDSound4TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-30
2025-12-30 20:16Z
CRIT

CVE-2025-50343 — Matio_project Matio: A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50343

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption. NOTE: Multiple third-parties note that the available evidence does not demonstrate a vulnerability exploitable through an attacker-controlled input p CVSSv3.1 9.8 (CRITICAL) · EPSS 34th percentile

CWECWE 122VNDMatio ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score