Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-15 21:43Z
2025-12-29
2025-12-29 22:01Z
HIGH

Bugs that survive the heat of continuous fuzzing

GitHub Security·github.blogCVE-2024-39695CVE-2024-24826CVE-2023-44398CVE-2025-26623CVE-2025-54080CVE-2022-40303

GitHub Security Lab researcher Antonio Morales documents how critical vulnerabilities persist in heavily-fuzzed open-source projects (GStreamer, Poppler, Exiv2) despite years of continuous fuzzing via OSS-Fuzz. The analysis reveals systematic gaps: inadequate fuzzer coverage (GStreamer 19% vs OpenSSL 139 fuzzers), unfuzzed dependencies shipped in production (DjVuLibre in Evince), and asymmetric fuzzing focus (decode vs encode paths). Morales proposes a five-step fuzzing workflow emphasizing >90% code coverage, context-sensitive coverage, value coverage, and fault injection to close detection gaps.

SRFApplicationTACTA0043SRFSupply ChainTYPResearchTYPTechniqueSTGDiscovery
82
Edit Score
2025-12-29
2025-12-29 19:15Z
CRIT

CVE-2025-68706 — Kuwfi Ac900_firmware: A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68706

A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSetting handler uses sprintf() to copy the user-supplied pincode parameter into a fixed 132-byte stack buffer with no bounds checks. This allows an attacker to corrupt adjacent stack memory, crash the web server, and (under certain conditions) may enable arbitrary code execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 92th percentile

CWECWE 121VNDKuwfiTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-29
2025-12-29 19:15Z
HIGH

CVE-2025-67255 — Nagios Nagios_xi: In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67255

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 89VNDNagiosVNDNagiosxiTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-29
2025-12-29 18:15Z
HIGH

CVE-2025-55061 — CWE: CWE-434 Unrestricted Upload of File with Dangerous Type

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55061

CWE-434 Unrestricted Upload of File with Dangerous Type CVSSv3.1 8.8 (HIGH) · EPSS 25th percentile

CWECWE 434VNDCweTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-29
2025-12-29 16:15Z
CRIT

CVE-2025-69201 — Quenary Tugtainer: In versions prior to 1.15.1, arbitary arguments can be injected in tugtainer-agent `POST api/command/run`.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-69201

Tugtainer is a self-hosted app for automating updates of docker containers. In versions prior to 1.15.1, arbitary arguments can be injected in tugtainer-agent `POST api/command/run`. Version 1.15.1 fixes the issue. CVSSv3.1 9.8 (CRITICAL) · EPSS 38th percentile

CWECWE 77VNDTugtainerVNDQuenaryTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-29
2025-12-29 16:15Z
CRIT

CVE-2025-68897 — Control: Improper Control of Generation of Code ('Code Injection') vulnerability in Mohammad I.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68897

Improper Control of Generation of Code ('Code Injection') vulnerability in Mohammad I. Okfie IF AS Shortcode if-as-shortcode allows Code Injection.This issue affects IF AS Shortcode: from n/a through <= 1.2. CVSSv3.1 9.9 (CRITICAL)

CWECWE 94TYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2025-12-29
2025-12-29 16:15Z
CRIT

CVE-2025-56333 — Pangolin Pangolin: An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-56333

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component CVSSv3.1 9.8 (CRITICAL) · EPSS 41th percentile

CWECWE 287VNDPangolinVNDFossorialTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-29
2025-12-29 16:15Z
CRIT

CVE-2025-15194 — Dlink Dir-600_firmware: The manipulation of the argument Cookie results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15194

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. CVSSv3.1 9.8 (CRITICAL) · EPSS 67th percentile

CWECWE 121CWECWE 119VNDDlinkTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-29
2025-12-29 15:16Z
CRIT

CVE-2025-68929 — Frappe Frappe: This could lead to a malicious template being executed on the server, resulting in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68929

Frappe is a full-stack web application framework. Prior to versions 14.99.6 and 15.88.1, an authenticated user with specific permissions could be tricked into accessing a specially crafted link. This could lead to a malicious template being executed on the server, resulting in remote code execution. Versions 14.99.6 and 15.88.1 fix the issue. No known workarounds are available. CVSSv3.1 9.0 (CRITICAL) · EPSS 41th percentile

CWECWE 1336VNDFrappeTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2025-12-29
2025-12-29 15:16Z
CRIT

CVE-2025-65570 — Jsish Jsish: A type confusion in jsish 2.0 allows incorrect control flow during execution of the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65570

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather than consuming it during OP_INSTANCEOF. As a result, OP_NEXT interprets the array as an iterator object and reads the iterCmd function pointer from an invalid structure, potentially c CVSSv3.1 9.8 (CRITICAL) · EPSS 43th percentile

CWECWE 843VNDJsishTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-29
2025-12-29 15:16Z
HIGH

CVE-2025-15193 — Dlink Dwr-m920_firmware: Performing manipulation of the argument submit-url results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15193

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 120CWECWE 119VNDDlinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-29
2025-12-29 14:15Z
CRIT

CVE-2025-57460 — Machsol Machpanel: File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-57460

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell. CVSSv3.1 9.8 (CRITICAL) · EPSS 35th percentile

CWECWE 434VNDMachsolTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-29
2025-12-29 14:15Z
HIGH

CVE-2025-15190 — Dlink Dwr-m920_firmware: The manipulation of the argument ip6addr results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15190

A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be exploited. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 121CWECWE 119VNDDlinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-29
2025-12-29 13:15Z
HIGH

CVE-2025-15189 — Dlink Dwr-m920_firmware: The manipulation of the argument submit-url leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15189

A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 120CWECWE 119VNDDlinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-29
2025-12-29 08:15Z
CRIT

CVE-2025-15228 — Welltend Bpmflowwebkit: developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 434VNDWelltendVNDBpmflowwebkitTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-29
2025-12-29 07:15Z
CRIT

CVE-2025-15226 — Sun.net Wmpro: developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15226

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 434VNDSun NetVNDWmproTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-29
2025-12-29 06:15Z
HIGH

CVE-2025-13417 — Plugin: The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13417

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks. CVSSv3.1 8.6 (HIGH) · EPSS 18th percentile

TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-12-29
2025-12-29 03:15Z
CRIT

CVE-2025-52691 — Smartertools Smartermail: Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-52691in the wild

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution. CVSSv3.1 10.0 (CRITICAL) · EPSS 100th percentile

CWECWE 434VNDSmartertoolsVNDSuccessfulTYPVulnerabilitySTAitw exploited
10.0
CVSS v3.1
100
Edit Score
2025-12-28
2025-12-28 14:16Z
MED

CVE-2025-15139 — Trendnet Tew-822dre_firmware: Such manipulation of the argument peerPin leads to command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15139

A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4  of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 6.3 (MEDIUM) · EPSS 96th percentile

CWECWE 74CWECWE 77VNDTrendnetTYPVulnerability
6.3
CVSS v3.1
85
Edit Score
2025-12-28
2025-12-28 14:16Z
HIGH

CVE-2025-15137 — Trendnet Tew-800mb_firmware: The manipulation results in command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15137

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934  of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 96th percentile

CWECWE 74CWECWE 77VNDTrendnetTYPVulnerability
8.8
CVSS v3.1
97
Edit Score
2025-12-28
2025-12-28 13:15Z
HIGH

CVE-2025-15136 — Trendnet Tew-800mb_firmware: The manipulation of the argument WizardConfigured leads to command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-15136

A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0. Affected is the function do_setWizard_asp of the file /goform/wizardset of the component Management Interface. The manipulation of the argument WizardConfigured leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH)

CWECWE 74CWECWE 77VNDTrendnetTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-27
2025-12-27 14:15Z
CRIT

CVE-2025-54322 — Xspeeder Sxzos: through 2025-12-26 allows root remote code execution via base64-encoded Python code in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54322

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used. CVSSv3.1 10.0 (CRITICAL) · EPSS 97th percentile

CWECWE 94CWECWE 95VNDXspeederTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-12-27
2025-12-27 01:15Z
CRIT

CVE-2025-68952 — Eigent Eigent: In version 0.0.60, a 1-click Remote Code Execution (RCE) vulnerability has been identified in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68952

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution (RCE) vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction (1-click). This issue has been patched in version 0.0.61. CVSSv3.1 9.8 (CRITICAL) · EPSS 45th percentile

CWECWE 94VNDEigentTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-27
2025-12-27 01:15Z
HIGH

CVE-2025-68948 — B3log Siyuan: is self-hosted, open source personal knowledge management software.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68948

SiYuan is self-hosted, open source personal knowledge management software. In versions 3.5.1 and prior, the SiYuan Note application utilizes a hardcoded cryptographic secret for its session store. This unsafe practice renders the session encryption ineffective. Since the sensitive AccessAuthCode is stored within the session cookie, an attacker who intercepts or obtains a user's encrypted session cookie (e.g., via session hijacking) can locally decrypt it using the public key. CVSSv3.1 8.1 (HIGH) · EPSS 12th percentile

CWECWE 798CWECWE 321VNDSiyuanVNDB3logTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-27
2025-12-27 00:15Z
CRIT

CVE-2025-68932 — Freshrss Freshrss: This allows attackers to predict valid session tokens, leading to account takeover through persistent

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68932

FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking. The remember-me tokens provide permanent authentication and are the sole credential for "keep me logged in" functionalit CVSSv3.1 9.8 (CRITICAL) · EPSS 45th percentile

CWECWE 338VNDFreshrssTYPVulnerability
9.8
CVSS v3.1
99
Edit Score