Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-16 06:21Z
2025-12-16
2025-12-16 15:15Z
HIGH

CVE-2025-68256 — Linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68256

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser The Information Element (IE) parser rtw_get_ie() trusted the length byte of each IE without validating that the IE body (len bytes after the 2-byte header) fits inside the remaining frame buffer. A malformed frame can advertise an IE length larger than the available data, causing the parser to increment its pointer beyond the buffer end. This CVSSv3.1 8.8 (HIGH) · EPSS 6th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-16
2025-12-16 15:15Z
HIGH

CVE-2025-68255 — Linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stack

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68255

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing The Supported Rates IE length from an incoming Association Request frame was used directly as the memcpy() length when copying into a fixed-size 16-byte stack buffer (supportRate). A malicious station can advertise an IE length larger than 16 bytes, causing a stack buffer overflow. Clamp ie_len to the buffer size before copying the Supp CVSSv3.1 8.8 (HIGH) · EPSS 9th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-16
2025-12-16 15:15Z
HIGH

CVE-2025-68250 — Linux: In the Linux kernel, the following vulnerability has been resolved: hung_task: fix warnings caused

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68250

In the Linux kernel, the following vulnerability has been resolved: hung_task: fix warnings caused by unaligned lock pointers The blocker tracking mechanism assumes that lock pointers are at least 4-byte aligned to use their lower bits for type encoding. However, as reported by Eero Tamminen, some architectures like m68k only guarantee 2-byte alignment of 32-bit values. This breaks the assumption and causes two related WARN_ON_ONCE checks to trigger. To fix this, the runt CVSSv3.1 8.2 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-12-16
2025-12-16 14:15Z
HIGH

CVE-2025-68226 — Linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68226

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfids_invalidation_worker() The previous commit bdb596ceb4b7 ("smb: client: fix potential UAF in smb2_close_cached_fid()") was an incomplete backport and missed one kref_put() call in cfids_invalidation_worker() that should have been converted to close_cached_dir(). CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-16
2025-12-16 14:15Z
CRIT

CVE-2025-68192 — Linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68192

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Raw IP packets have no MAC header, leaving skb->mac_header uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due to strict alignment checks. Initialize the MAC header to prevent such crashes. This can trigger kernel panics on ARM when running IPsec over the qmimux0 interface. Example t CVSSv3.1 9.8 (CRITICAL) · EPSS 8th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-16
2025-12-16 14:15Z
HIGH

CVE-2025-40362 — Linux: Not doing so would result in applying the mds auth caps of one fs

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40362

In the Linux kernel, the following vulnerability has been resolved: ceph: fix multifs mds auth caps issue The mds auth caps check should also validate the fsname along with the associated caps. Not doing so would result in applying the mds auth caps of one fs on to the other fs in a multifs ceph cluster. The bug causes multiple issues w.r.t user authentication, following is one such example. Steps to Reproduce (on vstart cluster): 1. Create two file systems in a cluster, s CVSSv3.1 8.8 (HIGH) · EPSS 16th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-16
2025-12-16 14:15Z
CRIT

CVE-2025-40350 — Linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40350

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ XDP programs can change the layout of an xdp_buff through bpf_xdp_adjust_tail() and bpf_xdp_adjust_head(). Therefore, the driver cannot assume the size of the linear data area nor fragments. Fix the bug in mlx5 by generating skb according to xdp_buff after XDP programs run. Currently, when handling multi-buf XDP, the mlx5 driver ass CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-16
2025-12-16 12:00Z
MED

Use GWP-ASan to detect exploits in production environments

Trail of Bits·blog.trailofbits.com

Trail of Bits details GWP-ASan (Guarded Pool Allocator with AddressSanitizer), a sampling-based memory sanitizer that detects heap memory safety bugs—use-after-free, double-free, buffer overflows—in production with near-zero performance overhead by instrumenting only a fraction of allocations with guard pages. The post explains the technical mechanics, deployment across major projects (Chrome, Firefox, Android, WebKit), and provides practical guidance on integration using LLVM's Scudo allocator with performance benchmarks.

SRFApplicationTYPResearchTYPToolSTGDefense EvasionEXPHeap OverflowEXPUaf
62
Edit Score
2025-12-16
2025-12-16 09:16Z
HIGH

CVE-2025-68056 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68056

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.4. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-16
2025-12-16 09:16Z
HIGH

CVE-2025-68055 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68055

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through <= 1.1.32. CVSSv3.1 8.5 (HIGH) · EPSS 18th percentile

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-16
2025-12-16 09:16Z
HIGH

CVE-2025-68054 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68054

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown With Image or Video Background countdown_with_background allows Blind SQL Injection.This issue affects CountDown With Image or Video Background: from n/a through <= 1.5. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-16
2025-12-16 09:16Z
HIGH

CVE-2025-68053 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-68053

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter top_bar_promoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1.3.4. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-16
2025-12-16 09:15Z
HIGH

CVE-2025-67950 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67950

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Blind SQL Injection.This issue affects All In One SEO Pack: from n/a through <= 4.9.1. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-16
2025-12-16 09:05Z
MED

v3.6.1

Nuclei releases·github.com

Nuclei v3.6.1 released with bug fixes addressing HTTP request body loss on retries/redirects, segmentation faults in headless initialization, data races in page history reading, and memory optimization improvements. The release includes dependency updates and documentation corrections across multiple modules.

SRFApplicationVNDProjectdiscoveryTYPTool
45
Edit Score
2025-12-16
2025-12-16 09:00Z
CRIT

Thinking Outside The Box [dusted off draft from 2017]

Project Zero·googleprojectzero.blogspot.comCVE-2017-3558

Project Zero publishes a 2017 draft detailing exploitation of CVE-2017-3558 in VirtualBox's Slirp NAT networking stack. The vulnerability stems from untrusted IP packet length fields overwriting buffer metadata, enabling out-of-bounds heap reads and writes that culminate in arbitrary code execution on the host via a memcpy() gadget chain and GOT corruption to leak and call system().

SRFApplicationTACTA0002VNDVirtualboxTYPResearchTYPWriteupSTGExecutionSTGInitial AccessTECT1190
82
Edit Score
2025-12-16
2025-12-16 03:15Z
CRIT

CVE-2025-62849 — Qnap Qts: An SQL injection vulnerability has been reported to affect several QNAP operating system versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62849

An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later CVSSv3.1 9.8 (CRITICAL) · EPSS 61th percentile

CWECWE 89VNDQnapTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-16
2025-12-16 03:15Z
CRIT

CVE-2025-59385 — Qnap Qts: An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59385

An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to access resources which are not otherwise accessible without proper authentication. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later CVSSv3.1 9.8 (CRITICAL) · EPSS 49th percentile

CWECWE 290VNDQnapTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-16
2025-12-16 01:15Z
CRIT

CVE-2025-67744 — Thinkinai Deepchat: Prior to version 0.5.3, a security vulnerability exists in the Mermaid diagram rendering component

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67744

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to version 0.5.3, a security vulnerability exists in the Mermaid diagram rendering component that allows arbitrary JavaScript execution. Due to the exposure of the Electron IPC renderer to the DOM, this Cross-Site Scripting (XSS) flaw escalates to full Remote Code Execution (RCE), allowing an attacker to execute arbitrary system commands. Two concurrent issues, unsa CVSSv3.1 9.6 (CRITICAL) · EPSS 49th percentile

CWECWE 94VNDDeepchatVNDThinkinaiTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2025-12-16
2025-12-16 01:15Z
HIGH

CVE-2025-66449 — C4illin Convertx: In versions prior to 0.16.0, the endpoint `/upload` allows an authenticated user to write

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66449

ConvertXis a self-hosted online file converter. In versions prior to 0.16.0, the endpoint `/upload` allows an authenticated user to write arbitrary files on the system, overwriting binaries and allowing code execution. The upload function takes `file.name` directly from user supplied data without doing any sanitization on the name thus allowing for arbitrary file write. This can be used to overwrite system binaries with ones provided from an attacker allowing full code execut CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 434CWECWE 22CWECWE 73VNDC4illinVNDConvertxisTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-16
2025-12-16 00:16Z
HIGH

CVE-2025-58173 — Freshrss Freshrss: In versions 1.23.0 through 1.27.0, using a path traversal inside the `language` user configuration

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58173

FreshRSS is a self-hosted RSS feed aggregator. In versions 1.23.0 through 1.27.0, using a path traversal inside the `language` user configuration parameter, it's possible to call `install.php` and perform various administrative actions as an unprivileged user. These actions include logging in as the admin, creating a new admin user, or set the database to an attacker-controlled MySQL server and abuse it to execute code in FreshRSS by setting malicious feed `curl_params` insid CVSSv3.1 8.8 (HIGH) · EPSS 52th percentile

CWECWE 22CWECWE 20VNDFreshrssTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 23:15Z
HIGH

CVE-2025-9121 — Pentaho: Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9121

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods. CVSSv3.1 8.8 (HIGH) · EPSS 35th percentile

CWECWE 502VNDPentahoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 21:15Z
CRIT

CVE-2025-64725 — Weblate Weblate: In versions prior to 5.15, it was possible to accept an invitation opened by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64725

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended. CVSSv3.1 9.8 (CRITICAL) · EPSS 26th percentile

CWECWE 286VNDWeblateTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-15
2025-12-15 21:15Z
CRIT

CVE-2025-59947 — Emqx Nanomq: Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59947

NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shared subscription and vanila subscription. This is fixed in version 0.24.4. As a workaround, disable shared subscription. CVSSv3.1 9.0 (CRITICAL) · EPSS 24th percentile

CWECWE 120VNDEmqxVNDNanomqTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2025-12-15
2025-12-15 21:15Z
CRIT

CVE-2025-55895 — Totolink A3300r_firmware: A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55895

TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote). CVSSv3.1 9.1 (CRITICAL) · EPSS 25th percentile

CWECWE 284VNDTotolinkTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-15
2025-12-15 21:15Z
HIGH

CVE-2023-53888 — Zomp Zomplog: 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53888

Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload malicious JavaScript files, rename them to PHP, and execute system commands by exploiting the saveE and rename actions in the application. CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile

CWECWE 94VNDZompVNDZomplogTYPVulnerability
8.8
CVSS v3.1
94
Edit Score