Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-16 06:59Z
2025-12-15
2025-12-15 19:16Z
CRIT

CVE-2025-65213 — Mthreads Torch_musa: MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65213

MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code execution. An attacker can craft a malicious pickle file that executes arbitrary Python code when loaded, enabling remote code execution with the privileges of the victim process. CVSSv3.1 9.8 (CRITICAL)

CWECWE 502VNDMthreadsVNDMoorethreadsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-15
2025-12-15 18:15Z
HIGH

CVE-2025-66440 — Frappe Erpnext: Function get_outstanding_reference_documents() at erpnext/accounts/doctype/payment_entry/payment_entry.py is vulnerable to SQL Injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66440

An issue was discovered in Frappe ERPNext through 15.89.0. Function get_outstanding_reference_documents() at erpnext/accounts/doctype/payment_entry/payment_entry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the to_posting_date parameter, which is directly interpolated into the query without proper sanitization or parameter binding. CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDFrappeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 18:15Z
HIGH

CVE-2025-66439 — Frappe Erpnext: Function get_outstanding_reference_documents() at erpnext.accounts.doctype.payment_entry.payment_entry.py is vulnerable to SQL Injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66439

An issue was discovered in Frappe ERPNext through 15.89.0. Function get_outstanding_reference_documents() at erpnext.accounts.doctype.payment_entry.payment_entry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the from_posting_date parameter, which is directly interpolated into the query without proper sanitization or parameter binding. CVSSv3.1 8.8 (HIGH) · EPSS 30th percentile

CWECWE 89VNDFrappeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 18:15Z
HIGH

CVE-2025-66438 — Frappe Erpnext: A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66438

A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism. Specifically, the API frappe.www.printview.get_html_and_style() triggers the rendering of the html field inside a Print Format document using frappe.render_template(template, doc) via the get_rendered_template() call chain. Although ERPNext wraps Jinja2 in a SandboxedEnvironment, it exposes sensitive functions such as frappe.db.sql through get_s CVSSv3.1 8.8 (HIGH) · EPSS 41th percentile

CWECWE 94CWECWE 1336VNDFrappeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 18:15Z
HIGH

CVE-2025-66437 — Frappe Erpnext: An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66437

An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0. This function renders address templates using frappe.render_template() with a context derived from the address_dict parameter, which can be either a dictionary or a string referencing an Address document. Although ERPNext uses a custom Jinja2 SandboxedEnvironment, dangerous functions like frappe.db.sql remain accessible via get_safe_globals(). An CVSSv3.1 8.8 (HIGH) · EPSS 47th percentile

CWECWE 94CWECWE 1336VNDFrappeVNDSstiTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 17:15Z
HIGH

CVE-2025-66434 — Frappe Erpnext: An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66434

An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0. The function renders attacker-controlled Jinja2 templates (body_text) using frappe.render_template() with a user-supplied context (doc). Although Frappe uses a custom SandboxedEnvironment, several dangerous globals such as frappe.db.sql are still available in the execution context via get_safe_globals(). An authenticated attacker with access t CVSSv3.1 8.8 (HIGH) · EPSS 47th percentile

CWECWE 94CWECWE 1336VNDFrappeVNDSstiTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 17:15Z
HIGH

CVE-2025-65742 — Newgensoft Omnidocs: An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65742

An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive information and execute a full account takeover via a crafted API request. CVSSv3.1 8.2 (HIGH) · EPSS 21th percentile

CWECWE 862VNDBrokenVNDNewgensoftTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-15
2025-12-15 17:15Z
HIGH

CVE-2025-11393 — This allows a standard user within the cluster to send unauthorized commands to the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11393

A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to handle. This allows a standard user within the cluster to send unauthorized commands to the management platform, effectively acting with the full permissions of the cluster administrator. This could CVSSv3.1 8.7 (HIGH) · EPSS 12th percentile

CWECWE 441TYPVulnerability
8.7
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 16:15Z
CRIT

CVE-2025-66844 — Getgrav Grav: In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66844

In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows undefined PHP functions to be registered CVSSv3.1 9.1 (CRITICAL) · EPSS 20th percentile

CWECWE 918VNDGetgravTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-15
2025-12-15 16:15Z
HIGH

CVE-2025-60786 — Kagilum Icescrum: A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60786

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file. CVSSv3.1 8.8 (HIGH) · EPSS 49th percentile

CWECWE 22VNDZipVNDKagilumTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 16:15Z
CRIT

CVE-2025-13888 — OpenShift: A flaw was found in OpenShift GitOps.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13888

A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged workloads that run on master nodes, effectively giving them root access to the entire cluster. CVSSv3.1 9.1 (CRITICAL) · EPSS 51th percentile

CWECWE 266VNDOpenshiftTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-15
2025-12-15 16:15Z
HIGH

CVE-2024-44599 — Fntsoftware Fnt_command: FNT Command 13.4.0 is vulnerable to Directory Traversal.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-44599

FNT Command 13.4.0 is vulnerable to Directory Traversal. CVSSv3.1 8.3 (HIGH) · EPSS 34th percentile

CWECWE 434VNDFntsoftwareVNDFntTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2025-12-15
2025-12-15 16:15Z
HIGH

CVE-2024-44598 — Fntsoftware Fnt_command: FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-44598

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module. CVSSv3.1 8.8 (HIGH) · EPSS 27th percentile

CWECWE 434VNDFntsoftwareVNDFntTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 15:15Z
CRIT

CVE-2025-14156 — Fox: The Fox LMS – WordPress LMS Plugin plugin for WordPress is vulnerable to privilege

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14156

The Fox LMS – WordPress LMS Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.5.1. This is due to the plugin not properly validating the 'role' parameter when creating new users via the `/fox-lms/v1/payments/create-order` REST API endpoint. This makes it possible for unauthenticated attackers to create new user accounts with arbitrary roles, including administrator, leading to complete site compromise. CVSSv3.1 9.8 (CRITICAL) · EPSS 94th percentile

CWECWE 20VNDFoxTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-15
2025-12-15 14:15Z
HIGH

CVE-2025-65781 — Wekan_project Wekan: Attachment upload API treats the Authorization bearer value as a userId and enters a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65781

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Attachment upload API treats the Authorization bearer value as a userId and enters a non-terminating body-handling branch for any non-empty bearer token, enabling trivial application-layer DoS and latent identity-spoofing. CVSSv3.1 8.2 (HIGH) · EPSS 26th percentile

CWECWE 287CWECWE 400VNDWekanVNDWekan ProjectTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-12-15
2025-12-15 14:15Z
HIGH

CVE-2025-65780 — Wekan_project Wekan: Authenticated users can update their entire user document (beyond profile fields), including orgs/teams and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65780

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authenticated users can update their entire user document (beyond profile fields), including orgs/teams and loginDisabled, due to missing server-side authorization checks; this enables privilege escalation and unauthorized access to other teams/orgs. CVSSv3.1 8.8 (HIGH) · EPSS 25th percentile

CWECWE 284VNDWekanVNDWekan ProjectTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-15
2025-12-15 14:15Z
HIGH

CVE-2025-65778 — Wekan_project Wekan: Uploaded attachments can be served with attacker-controlled Content-Type (text/html), allowing execution of attacker-supplied HTML/JS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65778

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Uploaded attachments can be served with attacker-controlled Content-Type (text/html), allowing execution of attacker-supplied HTML/JS in the application's origin and enabling session/token theft and CSRF actions. CVSSv3.1 8.1 (HIGH) · EPSS 30th percentile

CWECWE 79VNDWekanVNDWekan ProjectTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-15
2025-12-15 07:15Z
CRIT

CVE-2025-14709 — Sgwbox N3_firmware: The manipulation of the argument params leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14709

A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http_eshell_server of the component WIRELESSCFGGET Interface. The manipulation of the argument params leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

CWECWE 120CWECWE 119VNDSgwboxTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-15
2025-12-15 07:15Z
CRIT

CVE-2025-14708 — Sgwbox N3_firmware: Executing manipulation of the argument params can lead to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14708

A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/http_eshell_server of the component WIREDCFGGET Interface. Executing manipulation of the argument params can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

CWECWE 120CWECWE 119VNDSgwboxTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-15
2025-12-15 06:15Z
CRIT

CVE-2025-14707 — Sgwbox N3_firmware: Performing manipulation of the argument params results in command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14707

A security flaw has been discovered in Shiguangwu sgwbox N3 2.0.25. Affected is an unknown function of the file /usr/sbin/http_eshell_server of the component DOCKER Feature. Performing manipulation of the argument params results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

CWECWE 74CWECWE 77VNDSgwboxTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-15
2025-12-15 06:15Z
CRIT

CVE-2025-14706 — Sgwbox N3_firmware: Such manipulation leads to command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14706

A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25. This impacts an unknown function of the file /usr/sbin/http_eshell_server of the component NETREBOOT Interface. Such manipulation leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

CWECWE 74CWECWE 77VNDSgwboxVNDShiguangwuTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-15
2025-12-15 06:15Z
HIGH

CVE-2025-14549 — Eclipse Omr: In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14549

In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL (0x00) characters during the Latin-compatible charset (UTF-8, ISO8859-1, ASCII, etc) to IBM-1047/037 translation sequence. This can cause the output byte array to be truncated, discarding the first NUL byte and all subsequent characters, and thereby exposing a possible buffer over-read problem. This issue is fixed in E CVSSv3.1 8.1 (HIGH) · EPSS 21th percentile

CWECWE 125VNDEclipseTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-15
2025-12-15 05:15Z
CRIT

CVE-2025-14705 — Sgwbox N3_firmware: This manipulation of the argument params causes command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14705

A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESERVER Feature. This manipulation of the argument params causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

CWECWE 74CWECWE 77VNDSgwboxVNDShiguangwuTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-15
2025-12-15 05:15Z
HIGH

CVE-2025-14704 — Sgwbox N3_firmware: The manipulation results in path traversal.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14704

A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. The impacted element is an unknown function of the file /eshell of the component API. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 7.3 (HIGH) · EPSS 96th percentile

CWECWE 22VNDSgwboxVNDShiguangwuTYPVulnerability
7.3
CVSS v3.1
90
Edit Score
2025-12-14
2025-12-14 23:15Z
HIGH

CVE-2025-67900 — NXLog: Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67900

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable. CVSSv3.1 8.1 (HIGH) · EPSS 2th percentile

CWECWE 829VNDNxlogTYPVulnerability
8.1
CVSS v3.1
91
Edit Score