Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-16 11:14Z
2025-12-10
2025-12-10 01:15Z
HIGH

CVE-2025-67507 — Filamentphp Filament: Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67507

Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect email-based MFA. It also only applies when recovery codes are enabled. This issue is fixed in version 4.3.1. CVSSv3.1 8.1 (HIGH)

CWECWE 288CWECWE 287VNDFilamentVNDFilamentphpTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-10
2025-12-10 01:15Z
CRIT

CVE-2025-67506 — Pipeshub Pipeshub: Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67506

PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload to os.path.join(tmpdir, file.filename) without normalizing the filename. An attacker can submit a crafted filename containing ../ sequences to write arbitrary files anywhere the serv CVSSv3.1 9.8 (CRITICAL)

CWECWE 434CWECWE 22VNDPipeshubTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 00:16Z
HIGH

CVE-2025-67501 — Wegia Wegia: Versions 3.5.4 and below contain an SQL Injection vulnerability in the /html/matPat/editar_categoria.php endpoint.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67501

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain an SQL Injection vulnerability in the /html/matPat/editar_categoria.php endpoint. The application fails to properly validate and sanitize user inputs in the id_categoria parameter, which allows attackers to inject malicious SQL payloads for direct execution. This issue is fixed in version 3.5.5. CVSSv3.1 8.8 (HIGH) · EPSS 42th percentile

CWECWE 89VNDWegiaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-10
2025-12-10 00:16Z
HIGH

CVE-2025-61813 — Adobe Coldfusion: versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61813

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the server. Exploitation of this issue does requires user interaction and scope is changed. CVSSv3.1 8.2 (HIGH) · EPSS 31th percentile

CWECWE 611VNDAdobeVNDColdfusionTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-12-10
2025-12-10 00:16Z
HIGH

CVE-2025-61812 — Adobe Coldfusion: versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61812

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction. CVSSv3.1 8.4 (HIGH) · EPSS 91th percentile

CWECWE 20VNDAdobeVNDColdfusionTYPVulnerability
8.4
CVSS v3.1
93
Edit Score
2025-12-10
2025-12-10 00:16Z
CRIT

CVE-2025-61811 — Adobe Coldfusion: versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61811

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could leverage this vulnerability to bypass security measures and execute malicious code. Exploitation of this issue does not require user interaction and scope is changed. CVSSv3.1 9.1 (CRITICAL) · EPSS 67th percentile

CWECWE 22VNDAdobeVNDColdfusionTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-10
2025-12-10 00:16Z
HIGH

CVE-2025-61810 — Adobe Coldfusion: versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61810

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted serialized data to the application. Exploitation of this issue requires user interaction and scope is changed. CVSSv3.1 8.4 (HIGH) · EPSS 95th percentile

CWECWE 502VNDAdobeVNDColdfusionTYPVulnerability
8.4
CVSS v3.1
95
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-10
2025-12-10 00:16Z
CRIT

CVE-2025-61809 — Adobe Coldfusion: versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61809

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction and scope is unchanged. CVSSv3.1 9.1 (CRITICAL) · EPSS 50th percentile

CWECWE 20VNDAdobeVNDColdfusionTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-10
2025-12-10 00:16Z
CRIT

CVE-2025-61808 — Adobe Coldfusion: versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61808

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code execution by a high priviledged attacker. Exploitation of this issue does not require user interaction and scope is changed. CVSSv3.1 9.1 (CRITICAL) · EPSS 96th percentile

CWECWE 434VNDAdobeVNDColdfusionTYPVulnerability
9.1
CVSS v3.1
99
Edit Score
2025-12-10
2025-12-10 00:00Z
CRIT

CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation

Trend Micro Research·trendmicro.comCVE-2025-55182in the wild

CVE-2025-55182 is a CVSS 10.0 pre-authentication RCE in React Server Components (RSC) affecting React.js, Next.js, and related frameworks. The vulnerability exploits improper deserialization in the React Flight protocol through a four-stage chain leveraging JavaScript prototype pollution, duck-typing, and the Blob handler to achieve arbitrary code execution with full Node.js privileges. Trend Micro documents active in-the-wild exploitation across 145+ PoC variants, with observed campaigns (emerald, nuts) deploying Mirai botnets, Cobalt Strike beacons, Nezha, FRP, Sliver, cryptominers, and custom backdoors on both Linux and Windows infrastructure.

SRFApplicationTACTA0004TACTA0001TACTA0002SRFWebTACTA0003TACTA0011VNDNextjs
95
Edit Score
2025-12-09
2025-12-09 23:15Z
HIGH

CVE-2025-67495 — Zitadel Zitadel: Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67495

ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account ta CVSSv3.1 8.0 (HIGH) · EPSS 21th percentile

CWECWE 79VNDZitadelTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2025-12-09
2025-12-09 22:57Z
INFO

Operationalizing BloodHound Enterprise: Security automation with Tines

SpecterOps·specterops.io

SpecterOps published a technical guide demonstrating how to operationalize BloodHound Enterprise by integrating it with Tines for automated incident response workflows. The post covers manual blast-radius assessment techniques (checking Tier Zero status, local admin privileges, and attack paths) and provides a ready-to-use Tines story that automates these investigations using Cypher queries and AI-generated risk summaries.

SRFApplicationTACTA0007SRFIdentityTACTA0010VNDBloodhoundVNDSpecteropsVNDTinesTYPTechnique
62
Edit Score
2025-12-09
2025-12-09 22:16Z
CRIT

CVE-2025-67494 — Zitadel Zitadel: Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67494

ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and b CVSSv3.1 9.3 (CRITICAL) · EPSS 37th percentile

CWECWE 918VNDZitadelTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-12-09
2025-12-09 22:16Z
CRIT

CVE-2025-66039 — Sangoma Freepbx: Versions are vulnerable to authentication bypass when the authentication type is set to "webserver."

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66039

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23. CVSSv3.1 9.8 (CRITICAL) · EPSS 88th percentile

CWECWE 287VNDFreepbxVNDSangomaTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-09
2025-12-09 21:16Z
CRIT

CVE-2025-67489 — React: Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67489

@vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs (loadServerAction, decodeReply, decodeAction) when integrated into RSC applications that expose server function endpoints. Attackers with network access to the development server can read/modify files, exfiltrate sensitive data (source code, environ CVSSv3.1 9.8 (CRITICAL)

CWECWE 94VNDReactTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-09
2025-12-09 21:16Z
HIGH

CVE-2025-66626 — Argoproj Argo_workflows: Versions 3.6.13 and below and versions 3.7.0 through 3.7.4, contain unsafe untar code that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66626

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions 3.6.13 and below and versions 3.7.0 through 3.7.4, contain unsafe untar code that handles symbolic links in archives. Concretely, the computation of a link's target and the subsequent check are flawed. An attacker can overwrite the file /var/run/argo/argoexec with a script of their choice, which would be executed at the pod's start. The patch deployed agai CVSSv3.1 8.1 (HIGH) · EPSS 51th percentile

CWECWE 78CWECWE 23CWECWE 59VNDArgoVNDArgoprojTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-09
2025-12-09 20:15Z
HIGH

CVE-2025-66457 — Elysiajs Elysia: Versions 1.4.17 and below are subject to arbitrary code execution from cookie config.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66457

Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.17 and below are subject to arbitrary code execution from cookie config. When dynamic cookies are enabled (e.g. there an existing cookie schema), the cookie config is injected into the compiled route without first being sanitised. Availability of this exploit is generally low, but when combined with GHSA-hxj9-33pp-j2cc, it allows for a CVSSv3.1 8.8 (HIGH) · EPSS 56th percentile

CWECWE 94VNDElysiajsVNDElysiaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 20:15Z
CRIT

CVE-2025-66456 — Elysiajs Elysia: Due to the ordering of merging, there must be an any type that is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66456

Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.0 through 1.4.16 contain a prototype pollution vulnerability in `mergeDeep` after merging results of two standard schema validations with the same key. Due to the ordering of merging, there must be an any type that is set as a standalone guard, to allow for the `__proto__ prop` to be merged. When combined with GHSA-8vch-m3f4-q8jf this al CVSSv3.1 9.8 (CRITICAL)

CWECWE 1321VNDElysiajsVNDElysiaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-09
2025-12-09 20:15Z
CRIT

CVE-2025-64113 — Emby Emby: Versions below 4.9.1.81 allow an attacker to gain full administrative access to an Emby

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64113

Emby Server is a user-installable home media server. Versions below 4.9.1.81 allow an attacker to gain full administrative access to an Emby Server (for Emby Server administration, not at the OS level). Other than network access, no specific preconditions need to be fulfilled for a server to be vulnerable. This issue is fixed in version 4.9.1.81. CVSSv3.1 9.8 (CRITICAL) · EPSS 47th percentile

CWECWE 640VNDEmbyTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-09
2025-12-09 19:15Z
CRIT

CVE-2025-65882 — Openmptcprouter Openmptcprouter: An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function create_xor_ipa

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function create_xor_ipad_opad allowing attackers to potentially write arbitrary files or execute arbitrary commands. CVSSv3.1 9.8 (CRITICAL) · EPSS 44th percentile

CWECWE 78VNDOpenmptcprouterTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-09
2025-12-09 19:15Z
HIGH

CVE-2025-11531 — Hp Omen_gaming_hub: System Event Utility and Omen Gaming Hub might allow execution of certain files

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11531

HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerability was remediated with HP System Event Utility version 3.2.12 and Omen Gaming Hub version 1101.2511.101.0. CVSSv3.1 8.8 (HIGH) · EPSS 32th percentile

CWECWE 22VNDHpTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 18:29Z
CRIT

The December 2025 Security Update Review

Zero Day Initiative·thezdi.comCVE-2025-62221CVE-2025-62554CVE-2025-62557CVE-2025-62562CVE-2025-64671CVE-2025-54100CVE-2025-62550CVE-2025-62552CVE-2025-62553CVE-2025-62556CVE-2025-62560CVE-2025-62561CVE-2025-62563CVE-2025-62564CVE-2025-62555CVE-2025-62558CVE-2025-62559CVE-2025-62456CVE-2025-62549CVE-2025-64678in the wild

Microsoft released 56 CVEs (70 with Chromium) and Adobe released 139 CVEs in December 2025 patch Tuesday. Three Microsoft CVEs are rated Critical, including two Office RCEs via Preview Pane (CVE-2025-62554/62557) and one Outlook RCE (CVE-2025-62562); CVE-2025-62221 (Windows Cloud Files UAF EoP) is under active exploitation. Adobe's 139 CVEs are dominated by XSS bugs in Experience Manager, with arbitrary code execution fixes in ColdFusion (deployment priority 1) and Reader.

SRFApplicationSRFOsTACTA0004TACTA0002VNDMicrosoftVNDAdobeTYPAdvisorySTGPrivesc
72
Edit Score
2025-12-09
2025-12-09 18:16Z
HIGH

CVE-2025-65594 — Os4ed Opensis: 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65594

OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations relating to the data of other users. CVSSv3.1 8.1 (HIGH) · EPSS 17th percentile

CWECWE 284VNDOs4edVNDOpensisTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-09
2025-12-09 18:16Z
HIGH

CVE-2025-64672 — Microsoft Sharepoint_server: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64672

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CVSSv3.1 8.8 (HIGH) · EPSS 62th percentile

CWECWE 79VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 18:16Z
HIGH

CVE-2025-64671 — Microsoft Github_copilot: Improper neutralization of special elements used in a command ('command injection') in Copilot allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64671

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally. CVSSv3.1 8.4 (HIGH) · EPSS 28th percentile

CWECWE 77VNDMicrosoftTYPVulnerability
8.4
CVSS v3.1
92
Edit Score