Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-16 13:42Z
2025-12-09
2025-12-09 00:15Z
HIGH

CVE-2025-65964 — N8n N8n: Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65964

n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, including core.hooksPath, which can point to a malicious Git hook that executes arbitrary commands on the n8n host during subsequent Git operations. Exploitation requires the ability to create or modify an n8n workflow usi CVSSv3.1 8.8 (HIGH) · EPSS 50th percentile

CWECWE 829VNDN8nTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-08
2025-12-08 21:21Z
CRIT

CVE-2025-55182-research — CVE-2025-55182 POC

GitHub · recent CVE PoCs·github.comGITHUB POCCVE-2025-55182in the wild

CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol affecting versions 19.0.0–19.2.0 and Next.js 15.x–16.x. The exploit chains path traversal via `$1:constructor:constructor`, fake chunk injection with self-referential thenable objects, and `$B` handler abuse to reach the Function constructor and execute arbitrary code. Patches are available in React 19.0.1+, 19.1.2+, 19.2.1+ and corresponding Next.js releases.

SRFApplicationTACTA0002SRFWebTACTA0003VNDReactVNDNext JsTYPWriteupTYPExploit
92
Edit Score
2025-12-08
2025-12-08 17:16Z
HIGH

CVE-2025-63721 — Hummerrisk Hummerrisk: thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-63721

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server. CVSSv3.1 8.8 (HIGH) · EPSS 40th percentile

CWECWE 502VNDHummerriskTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-08
2025-12-08 17:16Z
MED

CVE-2025-48633 — Google Android: This could lead to local escalation of privilege with no additional execution privileges needed.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48633in the wild

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 5.5 (MEDIUM) · EPSS 18th percentile

VNDGoogleVNDDevicepolicymanagerserviceTYPVulnerabilitySTAitw exploited
5.5
CVSS v3.1
78
Edit Score
2025-12-08
2025-12-08 17:16Z
CRIT

CVE-2025-48626 — Google Android: This could lead to remote escalation of privilege with no additional execution privileges needed.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48626

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 9.8 (CRITICAL) · EPSS 32th percentile

CWECWE 693VNDGoogleTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-08
2025-12-08 17:16Z
HIGH

CVE-2025-48572 — Google Android: In multiple locations, there is a possible way to launch activities from the background

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48572in the wild

In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 7.8 (HIGH) · EPSS 18th percentile

CWECWE 306VNDGoogleTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
89
Edit Score
2025-12-08
2025-12-08 16:15Z
CRIT

CVE-2025-61318 — Emlog Emlog: Pro 2.5.20 has an arbitrary file deletion vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61318

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal. CVSSv3.1 9.1 (CRITICAL) · EPSS 53th percentile

CWECWE 24VNDEmlogTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-08
2025-12-08 13:51Z
CRIT

CVE-2025-55182 — Explanation and full RCE PoC for CVE-2025-55182

GitHub · recent CVE PoCs·github.comGITHUB POCCVE-2025-55182

CVE-2025-55182 is a critical prototype pollution vulnerability in React Server Functions (Next.js) that allows unauthenticated remote code execution via the React Flight Protocol deserialization. The vulnerability stems from insufficient validation during chunk reference resolution, enabling attackers to access the Function constructor and chain gadgets through blob deserialization to achieve arbitrary code execution before action validation occurs.

SRFApplicationTACTA0002SRFWebTACTA0003VNDNextjsVNDReactTYPWriteupTYPExploit
92
Edit Score
2025-12-08
2025-12-08 10:16Z
CRIT

CVE-2025-27020 — Nokia Infinera_mtc-9_firmware: Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0. CVSSv3.1 9.8 (CRITICAL) · EPSS 40th percentile

CWECWE 306VNDNokiaVNDSshTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-08
2025-12-08 10:16Z
CRIT

CVE-2025-27019 — Nokia Infinera_mtc-9_firmware: Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-27019

Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0. CVSSv3.1 9.8 (CRITICAL) · EPSS 35th percentile

CWECWE 306VNDNokiaVNDRshTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-08
2025-12-08 10:15Z
MED

CVE-2025-14225 — Dlink Dcs-930l_firmware: Executing manipulation of the argument AdminID can lead to command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14225

A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer. CVSSv3.1 6.3 (MEDIUM) · EPSS 95th percentile

CWECWE 74CWECWE 77VNDDlinkTYPVulnerability
6.3
CVSS v3.1
84
Edit Score
2025-12-08
2025-12-08 09:15Z
HIGH

CVE-2025-66328 — Huawei Harmonyos: Multi-thread race condition vulnerability in the network management module.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66328

Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability. CVSSv3.1 8.4 (HIGH) · EPSS 0th percentile

CWECWE 362VNDHuaweiVNDMultiTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-12-08
2025-12-08 09:15Z
HIGH

CVE-2025-26487 — Nokia Infinera_mtc-9_firmware: Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-26487

Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge. CVSSv3.1 8.6 (HIGH) · EPSS 26th percentile

CWECWE 918VNDNokiaTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-12-08
2025-12-08 09:15Z
HIGH

CVE-2025-12956 — 3ds 3dexperience_enovia: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12956

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. CVSSv3.1 8.7 (HIGH) · EPSS 8th percentile

CWECWE 79VND3dsVNDScriptingTYPVulnerability
8.7
CVSS v3.1
94
Edit Score
2025-12-08
2025-12-08 08:15Z
HIGH

CVE-2025-66324 — Huawei Harmonyos: Input verification vulnerability in the compression and decompression module.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66324

Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity. CVSSv3.1 8.4 (HIGH) · EPSS 0th percentile

CWECWE 269VNDHuaweiVNDInputTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-12-08
2025-12-08 02:15Z
CRIT

CVE-2023-53769 — Linux: In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy whole messages in or out as needed before doing any computation on them. CVSSv3.1 9.3 (CRITICAL) · EPSS 1th percentile

TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-12-08
2025-12-08 02:15Z
HIGH

CVE-2023-53764 — Linux: Currently the WBM error path does not hold the lock and calling that function

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53764

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Handle lock during peer_id find ath12k_peer_find_by_id() requires that the caller hold the ab->base_lock. Currently the WBM error path does not hold the lock and calling that function, leads to the following lockdep_assert()in QCN9274: [105162.160893] ------------[ cut here ]------------ [105162.160916] WARNING: CPU: 3 PID: 0 at drivers/net/wireless/ath/ath12k/peer.c:71 ath12k_peer_find_by_id CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-08
2025-12-08 02:15Z
HIGH

CVE-2023-53762 — Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53762

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync Use-after-free can occur in hci_disconnect_all_sync if a connection is deleted by concurrent processing of a controller event. To prevent this the code now tries to iterate over the list backwards to ensure the links are cleanup before its parents, also it no longer relies on a cursor, instead it always uses the last element since hci_abort_conn_sync CVSSv3.1 8.8 (HIGH) · EPSS 6th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-08
2025-12-08 02:15Z
CRIT

CVE-2023-53751 — Linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53751

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCP_Server_Info::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential use-after-free bugs. CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-08
2025-12-08 01:16Z
CRIT

CVE-2025-40320 — Linux: Because cfid wasn't reset on replay, later cleanup could act on a stale pointer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40320

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound When smb2_query_info_compound() retries, a previously allocated cfid may have been freed in the first attempt. Because cfid wasn't reset on replay, later cleanup could act on a stale pointer, leading to a potential use-after-free. Reinitialize cfid to NULL under the replay label. Example trace (trimmed): refcount_t: underflow; use-after-free CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-08
2025-12-08 01:16Z
HIGH

CVE-2025-40318 — Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40318

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once hci_cmd_sync_dequeue_once() does lookup and then cancel the entry under two separate lock sections. Meanwhile, hci_cmd_sync_work() can also delete the same entry, leading to double list_del() and "UAF". Fix this by holding cmd_sync_work_lock across both lookup and cancel, so that the entry cannot be removed concurrently. CVSSv3.1 8.8 (HIGH) · EPSS 6th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-08
2025-12-08 01:16Z
HIGH

CVE-2025-40309 — Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40309

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_conn_free BUG: KASAN: slab-use-after-free in sco_conn_free net/bluetooth/sco.c:87 [inline] BUG: KASAN: slab-use-after-free in kref_put include/linux/kref.h:65 [inline] BUG: KASAN: slab-use-after-free in sco_conn_put+0xdd/0x410 net/bluetooth/sco.c:107 Write of size 8 at addr ffff88811cb96b50 by task kworker/u17:4/352 CPU: 1 UID: 0 PID: 352 Comm: kworker/u17:4 Not tainted 6.17. CVSSv3.1 8.0 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2025-12-08
2025-12-08 01:16Z
HIGH

CVE-2025-40292 — Linux: the host vhost_net driver's get_rx_bufs is modified to announce incorrect length), we need a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40292

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix received length check in big packets Since commit 4959aebba8c0 ("virtio-net: use mtu size as buffer length for big packets"), when guest gso is off, the allocated size for big packets is not MAX_SKB_FRAGS * PAGE_SIZE anymore but depends on negotiated MTU. The number of allocated frags for big packets is stored in vi->big_packets_num_skbfrags. Because the host announced buffer length can be CVSSv3.1 8.4 (HIGH) · EPSS 7th percentile

TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-12-08
2025-12-08 00:00Z
HIGH

AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows

Trend Micro Research·trendmicro.com

Trend Micro Research disclosed GhostPenguin, a previously undocumented Linux backdoor written in C++ that evaded detection for over four months on VirusTotal. The malware was discovered through AI-automated threat hunting and provides remote shell access, file operations, and C&C communication via RC5-encrypted UDP channels. Analysis reveals the backdoor is still in active development with debug artifacts and unused persistence functions.

SRFOsTACTA0011TACTA0010VNDTrend MicroTYPResearchTYPThreat IntelSTGExecutionSTGPersistence
72
Edit Score
2025-12-07
2025-12-07 16:15Z
HIGH

CVE-2025-14196 — This manipulation of the argument param causes buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-14196

A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub_44de0 of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 43th percentile

CWECWE 120CWECWE 119TYPVulnerability
8.8
CVSS v3.1
94
Edit Score