Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-16 10:48Z
2025-12-10
2025-12-10 22:16Z
HIGH

CVE-2024-58281 — Dotclear Dotclear: 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-58281

Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command execution form to gain system access through the uploaded file. CVSSv3.1 8.8 (HIGH) · EPSS 59th percentile

CWECWE 434VNDDotclearTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-10
2025-12-10 22:16Z
HIGH

CVE-2024-58280 — Cmsimple Cmsimple: 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-58280

CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files. Attackers can append ',php' to Extensions_userfiles and upload a shell script to the media directory to execute arbitrary code on the server. CVSSv3.1 8.8 (HIGH) · EPSS 59th percentile

CWECWE 403VNDCmsimpleTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-10
2025-12-10 22:16Z
HIGH

CVE-2024-58279 — Apprain Apprain: CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative users

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-58279

appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative users to upload malicious PHP files through the filemanager upload endpoint. Attackers can leverage authenticated access to generate a web shell with command execution capabilities by uploading a crafted PHP file to the site's uploads directory. CVSSv3.1 8.8 (HIGH) · EPSS 60th percentile

CWECWE 434VNDApprainVNDCmfTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-10
2025-12-10 21:16Z
HIGH

CVE-2025-65950 — Wbce Wbce_cms: In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65950

WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively bypassing all security controls. The vulnerability exists in the admin/users/save.php script, which handles updates to user profiles. The script improperly processes the groups[] parameter CVSSv3.1 8.8 (HIGH) · EPSS 44th percentile

CWECWE 89VNDWbceTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-10
2025-12-10 21:16Z
HIGH

CVE-2025-65824 — Meatmeet Meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmware: An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65824

An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwritten with the attacker's code. As the device does not perform checks on upgrades, this results in Remote Code Execution (RCE) and the victim losing complete access to the Meatmeet. CVSSv3.1 8.8 (HIGH) · EPSS 45th percentile

CWECWE 306VNDMeatmeetTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-10
2025-12-10 21:16Z
CRIT

CVE-2025-65823 — Meatmeet Meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmware: If an attacker retrieved this, and found the physical location of the Wi-Fi network

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65823

The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor. Additionally, if an attacker were located in close physical proximity to the device when it was first set up, they may be able to force the device to auto-connect to an attacker-controlled a CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 798VNDMeatmeetTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 19:16Z
CRIT

CVE-2025-64539 — Adobe Experience_manager: Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64539

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page that are executed in the context of the victim's browser. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires CVSSv3.1 9.3 (CRITICAL) · EPSS 41th percentile

CWECWE 79VNDAdobeTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-10
2025-12-10 19:16Z
CRIT

CVE-2025-64538 — Adobe Experience_manager: Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64538

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page that are executed in the context of the victim's browser. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires CVSSv3.1 9.3 (CRITICAL) · EPSS 49th percentile

CWECWE 79VNDAdobeTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-12-10
2025-12-10 19:16Z
CRIT

CVE-2025-64537 — Adobe Experience_manager: Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64537

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page that are executed in the context of the victim's browser. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires CVSSv3.1 9.3 (CRITICAL) · EPSS 53th percentile

CWECWE 79VNDAdobeTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-12-10
2025-12-10 18:16Z
CRIT

CVE-2025-13607 — A malicious actor can access camera configuration information, including account credentials, without authenticating when

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13607

A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL. CVSSv3.1 9.4 (CRITICAL)

CWECWE 306TYPVulnerability
9.4
CVSS v3.1
97
Edit Score
2025-12-10
2025-12-10 17:00Z
CRIT

SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDL

watchTowr Labs·labs.watchtowr.comCVE-2025-34392CVE-2025-13659in the wild

Researchers disclosed SOAPwn, a novel attack primitive in .NET Framework's HTTP client proxy classes (SoapHttpClientProtocol, DiscoveryClientProtocol, HttpSimpleClientProtocol) that allows attackers to write arbitrary files or relay NTLM credentials by steering proxies toward file:// URLs. When combined with WSDL import functionality, attackers can achieve pre-authenticated RCE in applications that dynamically generate SOAP proxies from attacker-controlled WSDL definitions. Microsoft declined to patch the underlying framework flaw, treating it as a design feature rather than a vulnerability.

SRFApplicationSRFOsTACTA0001TACTA0002VNDMicrosoftVNDIvantiVNDBarracudaVNDUmbraco
92
Edit Score
2025-12-10
2025-12-10 17:00Z
HIGH

SCOMmand And Conquer – Attacking System Center Operations Manager (Part 2)

SpecterOps·specterops.io

SpecterOps released a comprehensive two-part research series on attacking System Center Operations Manager (SCOM), focusing on RunAs credential extraction from both compromised endpoints and off-host via malicious agent enrollment. The research demonstrates DPAPI-based decryption of credentials stored in registry, policy file decryption using agent certificates, and a novel attack chain enabling arbitrary agent enrollment when automatic approval is enabled, coupled with a new tool (SharpSCOM) to automate credential recovery.

SRFApplicationSRFOsTACTA0006TACTA0007VNDMicrosoftTYPResearchTYPToolTYPWriteup
82
Edit Score
2025-12-10
2025-12-10 17:00Z
HIGH

SCOMmand and Conquer – Attacking System Center Operations Manager (Part 1)

SpecterOps·specterops.io

SpecterOps published a comprehensive two-part research series on attacking System Center Operations Manager (SCOM), detailing enumeration techniques via Active Directory integration, SPN discovery, and client reconnaissance, followed by exploitation paths including NTLM relay attacks against the web management console's PowerShell widget for RCE and privilege escalation. The research demonstrates how insecure default configurations enable attackers to harvest RunAs credentials, escalate privileges on management servers, and compromise entire management groups and monitored infrastructure.

SRFApplicationSRFOsTACTA0004TACTA0005TACTA0001TACTA0002SRFIdentityTACTA0043
82
Edit Score
2025-12-10
2025-12-10 16:16Z
HIGH

CVE-2025-65807 — Chmln Sd: An issue in sd command v1.0.0 and before allows attackers to escalate privileges to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65807

An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command. CVSSv3.1 8.4 (HIGH) · EPSS 8th percentile

CWECWE 266VNDChmlnTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-12-10
2025-12-10 16:16Z
CRIT

CVE-2025-34394 — Barracuda Rmm: Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34394

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 52th percentile

CWECWE 502VNDBarracudaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 16:16Z
CRIT

CVE-2025-34393 — Barracuda Rmm: This can result in remote code execution through either invocation of arbitrary methods or

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34393

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or deserialization of untrusted types. CVSSv3.1 9.8 (CRITICAL)

CWECWE 470VNDBarracudaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 16:16Z
CRIT

CVE-2025-34392 — Barracuda Rmm: This can lead to arbitrary file write and remote code execution via webshell upload.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34392

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload. CVSSv3.1 9.8 (CRITICAL)

CWECWE 36VNDBarracudaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 14:16Z
HIGH

CVE-2025-8110 — Gogs Gogs: Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8110

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. CVSSv3.1 8.8 (HIGH)

CWECWE 22VNDSymbolicVNDGogsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-10
2025-12-10 13:16Z
CRIT

CVE-2025-13184 — Totolink X5000r_firmware: Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13184

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may also be affected. CVSSv3.1 9.8 (CRITICAL) · EPSS 96th percentile

CWECWE 863VNDTotolinkVNDTelnetTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-10
2025-12-10 11:15Z
CRIT

CVE-2025-41732 — Wago 0852-1328_firmware: An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-41732

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise. CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 787CWECWE 121VNDWagoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 11:15Z
CRIT

CVE-2025-41730 — Wago 0852-1328_firmware: An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-41730

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise. CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 787CWECWE 121VNDWagoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 10:16Z
HIGH

CVE-2025-66675 — Apache Struts: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66675

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.4, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue. It's related to  https://cve.org/CVERecord?id=CVE-2025-64775  - this CVE addresses missing affected version 6.7.4 CVSSv3.1 8.2 (HIGH)

CWECWE 459VNDApacheVNDDenialTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-12-10
2025-12-10 10:16Z
HIGH

CVE-2025-14390 — Video: The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14390

The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4. This is due to missing or incorrect nonce validation on the video_merchant_add_video_file() function. This makes it possible for unauthenticated attackers to upload arbitrary files that make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVSSv3.1 8.8 (HIGH) · EPSS 37th percentile

CWECWE 434VNDVideoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-10
2025-12-10 03:15Z
CRIT

CVE-2025-13613 — Elated: The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13613

The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'eltdf_membership_check_facebook_user' and the 'eltdf_membership_login_user_from_social_network' function. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the CVSSv3.1 9.8 (CRITICAL) · EPSS 39th percentile

CWECWE 289VNDElatedTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 01:15Z
HIGH

CVE-2025-67507 — Filamentphp Filament: Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67507

Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect email-based MFA. It also only applies when recovery codes are enabled. This issue is fixed in version 4.3.1. CVSSv3.1 8.1 (HIGH)

CWECWE 288CWECWE 287VNDFilamentVNDFilamentphpTYPVulnerability
8.1
CVSS v3.1
91
Edit Score