Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-16 11:41Z
2025-12-09
2025-12-09 18:16Z
HIGH

CVE-2025-64447 — Fortinet Fortiweb: A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64447

A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to execute arbitrary operations on the system via crafted HTTP or HTTPS request via forged cookies, requiring prior knowledge of the FortiWeb serial number. CVSSv3.1 8.1 (HIGH) · EPSS 95th percentile

CWECWE 565VNDFortinetTYPVulnerability
8.1
CVSS v3.1
93
Edit Score
2025-12-09
2025-12-09 18:16Z
HIGH

CVE-2025-62557 — Microsoft 365_apps: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62557

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVSSv3.1 8.4 (HIGH) · EPSS 28th percentile

CWECWE 416VNDMicrosoftTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-12-09
2025-12-09 18:16Z
HIGH

CVE-2025-62554 — Microsoft 365_apps: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62554

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. CVSSv3.1 8.4 (HIGH) · EPSS 50th percentile

CWECWE 843VNDMicrosoftVNDAccessTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-12-09
2025-12-09 18:16Z
HIGH

CVE-2025-62550 — Microsoft Azure_monitor_agent: Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62550

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH) · EPSS 53th percentile

CWECWE 787CWECWE 131VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 18:15Z
HIGH

CVE-2025-62549 — Microsoft Windows_10_1607: Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62549

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH) · EPSS 70th percentile

CWECWE 822VNDMicrosoftVNDUntrustedTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 18:15Z
HIGH

CVE-2025-62456 — Microsoft Windows_11_23h2: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62456

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile

CWECWE 122VNDMicrosoftVNDHeapTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 18:15Z
HIGH

CVE-2025-62221 — Microsoft Windows_10_1809: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62221in the wild

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVSSv3.1 7.8 (HIGH) · EPSS 84th percentile

CWECWE 416VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
90
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-09
2025-12-09 18:15Z
HIGH

CVE-2025-60024 — Fortinet Fortivoice: Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22]

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60024

Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 may allow a privileged authenticated attacker to write arbitrary files via specifically HTTP or HTTPS commands CVSSv3.1 8.8 (HIGH) · EPSS 39th percentile

CWECWE 22VNDFortinetVNDLimitationsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 18:15Z
CRIT

CVE-2025-59719 — Fortinet Fortiweb: An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59719

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 347VNDFortinetTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-09
2025-12-09 18:15Z
CRIT

CVE-2025-59718 — Fortinet Fortiproxy: A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59718in the wild

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authe CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

CWECWE 347VNDFortinetTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2025-12-09
2025-12-09 18:15Z
HIGH

CVE-2025-53949 — Fortinet Fortisandbox: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-53949

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests. CVSSv3.1 7.2 (HIGH) · EPSS 97th percentile

CWECWE 78VNDFortinetTYPVulnerability
7.2
CVSS v3.1
91
Edit Score
2025-12-09
2025-12-09 18:15Z
HIGH

CVE-2025-53679 — Fortinet Fortisandbox: An improper neutralization of special elements used in an OS command ('OS Command Injection')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-53679

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox Cloud 24.1, FortiSandbox Cloud 23 all versions allows a remote privileged attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests. CVSSv3.1 7.2 (HIGH) · EPSS 96th percentile

CWECWE 78VNDFortinetTYPVulnerability
7.2
CVSS v3.1
90
Edit Score
2025-12-09
2025-12-09 18:15Z
HIGH

CVE-2025-33214 — NVIDIA: NVTabular for Linux contains a vulnerability in the Workflow component, where a user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-33214

NVIDIA NVTabular for Linux contains a vulnerability in the Workflow component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. CVSSv3.1 8.8 (HIGH) · EPSS 50th percentile

CWECWE 502VNDNvidiaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 18:15Z
HIGH

CVE-2025-33213 — NVIDIA: Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-33213

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. CVSSv3.1 8.8 (HIGH) · EPSS 50th percentile

CWECWE 502VNDNvidiaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 17:15Z
CRIT

CVE-2025-63742 — Rockoa Rockoa: SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-63742

SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the shouji and userid parameters. CVSSv3.1 9.8 (CRITICAL) · EPSS 33th percentile

CWECWE 89VNDRockoaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-09
2025-12-09 17:15Z
HIGH

CVE-2025-56704 — Lepton-cms Leptoncms: version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-56704

LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a specially crafted ZIP/PHP file to execute arbitrary code. CVSSv3.1 8.8 (HIGH) · EPSS 47th percentile

CWECWE 434VNDLepton CmsVNDLeptoncmsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 17:00Z
HIGH

Git SCOMmit – Putting the Ops in OpsMgr

SpecterOps·specterops.io

SpecterOps releases a modular Ludus automation framework for deploying System Center Operations Manager (SCOM) lab environments across single-server, small-distributed, and medium-distributed topologies. The tool enables red teamers to practice attack techniques against SCOM infrastructure ahead of the Black Hat Europe 2025 talk 'SCOMmand and Conquer' which will detail default configuration weaknesses and domain compromise paths.

SRFApplicationSRFNetworkVNDMicrosoftTYPResearchTYPToolSTGDiscoverySTGLat Movement
72
Edit Score
2025-12-09
2025-12-09 16:18Z
HIGH

CVE-2025-67518 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67518

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Blind SQL Injection.This issue affects Accordion Slider PRO: from n/a through <= 1.2. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-09
2025-12-09 16:18Z
HIGH

CVE-2025-67517 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67517

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through <= 2.22.9.2. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-09
2025-12-09 16:18Z
HIGH

CVE-2025-67516 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67516

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agile Logix Store Locator WordPress agile-store-locator allows Blind SQL Injection.This issue affects Store Locator WordPress: from n/a through <= 1.6.2. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-09
2025-12-09 16:18Z
HIGH

CVE-2025-67515 — Qodeinteractive Wilmer: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67515

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a through < 3.5. CVSSv3.1 8.8 (HIGH)

CWECWE 98VNDQodeinteractiveTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-09
2025-12-09 16:18Z
CRIT

CVE-2025-67504 — Wbce Wbce_cms: rand() is not cryptographically secure, which allows password sequences to be predicted or brute-forced.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67504

WBCE CMS is a content management system. Versions 1.6.4 and below use function GenerateRandomPassword() to create passwords using PHP's rand(). rand() is not cryptographically secure, which allows password sequences to be predicted or brute-forced. This can lead to user account compromise or privilege escalation if these passwords are used for new accounts or password resets. The vulnerability is fixed in version 1.6.5. CVSSv3.1 9.1 (CRITICAL) · EPSS 42th percentile

CWECWE 331CWECWE 338VNDWbceTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-09
2025-12-09 16:18Z
HIGH

CVE-2025-67487 — Static-web-server Static_web_server: Static Web Server (SWS) is a production-ready web server suitable for static web files

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67487

Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Versions 2.40.0 and below contain symbolic links (symlinks) which can be used to access files or directories outside the intended web root folder. SWS generally does not prevent symlinks from escaping the web server’s root directory. Therefore, if a malicious actor gains access to the web server’s root directory, they could create symlinks to access other files outside the design CVSSv3.1 8.6 (HIGH)

CWECWE 61CWECWE 59VNDStatic Web ServerVNDStaticTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-12-09
2025-12-09 16:18Z
CRIT

CVE-2025-66631 — Cslanet Csla_.net: Versions 5.5.4 and below allow the use of WcfProxy.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66631

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer (NDCS) and is vulnerable to remote code execution during deserialization. This vulnerability is fixed in version 6.0.0. To workaround this issue, remove the WcfProxy in data portal configurations. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 502VNDCslanetVNDCslaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-09
2025-12-09 16:18Z
HIGH

CVE-2025-66627 — Wasmi-labs Wasmi: In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66627

Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory growth conditions. This issue potentially leads to memory corruption, information disclosure, or code execution. This issue is fixed in versions 0.41.2, 0.47.1, 0.51.3 and 1.0.1. To w CVSSv3.1 8.4 (HIGH)

CWECWE 416VNDWasmi LabsVNDWasmiTYPVulnerability
8.4
CVSS v3.1
92
Edit Score