Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-16 15:24Z
2025-12-05
2025-12-05 17:16Z
HIGH

CVE-2025-65879 — Yeqifu Warehouse_management_system: Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65879

Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods endpoint accepts a user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOAD_PATH and passed to File.delete() without validation. A remote authenticated attacker can delete arbitrary files on the server by supplying directory traversal payloads. CVSSv3.1 8.1 (HIGH) · EPSS 55th percentile

CWECWE 22VNDYeqifuVNDWarehouseTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-05
2025-12-05 17:16Z
HIGH

CVE-2025-65036 — Xwiki Pro_macros: Prior to 1.27.1, the macro executes Velocity from the details pages without checking for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65036

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote code execution. This vulnerability is fixed in 1.27.1. CVSSv3.1 8.3 (HIGH) · EPSS 34th percentile

CWECWE 862VNDXwikiTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2025-12-05
2025-12-05 16:15Z
HIGH

CVE-2025-65897 — Zhaoyachao Zdh_web: In zdh_web thru 5.6.17, insufficient validation of file upload paths in the application allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65897

zdh_web is a data collection, processing, monitoring, scheduling, and management platform. In zdh_web thru 5.6.17, insufficient validation of file upload paths in the application allows an authenticated user to write arbitrary files to the server file system, potentially overwriting existing files and leading to privilege escalation or remote code execution. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 434CWECWE 22VNDZhaoyachaoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-05
2025-12-05 16:15Z
CRIT

CVE-2025-64054 — Fanvil X210_firmware: A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64054

A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint. CVSSv3.1 9.6 (CRITICAL) · EPSS 32th percentile

CWECWE 79VNDFanvilTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2025-12-05
2025-12-05 15:15Z
HIGH

CVE-2025-64057 — Fanvil X210_firmware: Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64057

Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts. CVSSv3.1 8.3 (HIGH) · EPSS 52th percentile

CWECWE 22VNDFanvilTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2025-12-05
2025-12-05 14:15Z
HIGH

CVE-2025-58098 — Apache Http_server: HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58098

Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. CVSSv3.1 8.3 (HIGH) · EPSS 72th percentile

CWECWE 201VNDApacheTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2025-12-05
2025-12-05 10:15Z
HIGH

CVE-2025-13614 — Cool: The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13614

The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cool_tag_cloud' shortcode in all versions up to, and including, 2.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVSSv3.1 8.1 (HIGH) · EPSS 28th percentile

CWECWE 79VNDCoolTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-05
2025-12-05 10:15Z
HIGH

CVE-2025-12879 — User: The User Generator and Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12879

The User Generator and Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2. This is due to missing nonce validation in the "Import Using CSV File" function. This makes it possible for unauthenticated attackers to elevate user privileges by creating arbitrary accounts with administrator privileges via a forged request, provided they can trick a site administrator into performing an action such as clicking on a link. CVSSv3.1 8.8 (HIGH) · EPSS 8th percentile

CWECWE 352TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-05
2025-12-05 10:15Z
HIGH

CVE-2025-12851 — The My auctions allegro plugin for WordPress is vulnerable to Local File Inclusion in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12851

The My auctions allegro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.32 via the 'controller' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded CVSSv3.1 8.1 (HIGH) · EPSS 54th percentile

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-05
2025-12-05 08:56Z
CRIT

React2Shell-CVE-2025-55182-original-poc — Original Proof-of-Concepts for React2Shell CVE-2025-55182

GitHub · recent CVE PoCs·github.comGITHUB POCCVE-2025-55182in the wild

Original proof-of-concept code for CVE-2025-55182 affecting React2Shell has been publicly released on GitHub by the original discoverer. The vulnerability allows remote code execution through a promise-chain gadget attack that manipulates Chunk objects and leverages the `_formData` gadget chain in Next.js/React environments. Public variants are already in circulation and integrated into Google's Tsunami security scanner.

SRFApplicationTACTA0002SRFWebVNDMetaVNDReactTYPExploitTYPVulnerabilitySTGExecution
92
Edit Score
2025-12-05
2025-12-05 08:11Z
HIGH

RSC_Detector — Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.

GitHub · recent CVE PoCs·github.comGITHUB POCCVE-2025-55182

RSC_Detector is a Chrome extension that performs passive and active fingerprinting of React Server Components (RSC) and Next.js App Router implementations, with exploitation capabilities for CVE-2025-55182. The tool uses multiple detection methods including Content-Type analysis, header inspection, and React Flight Protocol pattern matching to identify vulnerable RSC deployments.

SRFWebTACTA0043SRFBrowserVNDNextjsVNDReactTYPToolTYPExploitSTGInitial Access
78
Edit Score
2025-12-05
2025-12-05 07:16Z
CRIT

CVE-2025-12374 — Email: The Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12374

The Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.44. This is due to the plugin not properly validating that an OTP was generated before comparing it to user input in the "user_verification_form_wrap_process_otpLogin" function. This makes it possible for unauthenticated attackers to log in as any user with a v CVSSv3.1 9.8 (CRITICAL)

CWECWE 287TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-05
2025-12-05 06:16Z
HIGH

CVE-2025-12181 — ContentStudio: The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12181

The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the cstu_update_post() function in all versions up to, and including, 1.3.7. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVE-2025-67910 is likely a duplicate of this. CVSSv3.1 8.8 (HIGH)

CWECWE 434VNDContentstudioTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-05
2025-12-05 06:16Z
HIGH

CVE-2025-12153 — Featured: The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12153

The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation function in all versions up to, and including, 0.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 8.8 (HIGH) · EPSS 45th percentile

CWECWE 434VNDFeaturedTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-05
2025-12-05 05:16Z
CRIT

CVE-2025-13313 — CRM: The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13313

The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 2.6. This is due to missing authorization and authentication checks on the `ntzcrm_changepassword` AJAX action. This makes it possible for unauthenticated attackers to reset arbitrary user passwords and gain unauthorized access to user accounts via the `ntzcrm_changepassword` endpoint, granted they can obtain or enumerate a target user's emai CVSSv3.1 9.8 (CRITICAL)

CWECWE 862VNDCrmTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-05
2025-12-05 04:15Z
HIGH

CVE-2025-13066 — Demo: The Demo Importer Plus plugin for WordPress is vulnerable to arbitrary file upload in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13066

The Demo Importer Plus plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 2.0.6. This is due to insufficient file type validation detecting WXR files, allowing double extension files to bypass sanitization while being accepted as a valid WXR file. This makes it possible for authenticated attackers, with author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution poss CVSSv3.1 8.8 (HIGH) · EPSS 45th percentile

CWECWE 434VNDDemoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-05
2025-12-05 00:00Z
CRIT

Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know

Trend Micro Research·trendmicro.comCVE-2025-55182in the wild

CVE-2025-55182 is a critical pre-authentication RCE (CVSS 10.0) in React Server Components affecting React 19.x, Next.js 15.x/16.x, and related frameworks. The vulnerability stems from unsafe deserialization of HTTP payloads in Server Function endpoints, allowing unauthenticated attackers to execute arbitrary code with a single malicious POST request. Active exploitation in the wild has been observed targeting financial services, technology, and e-commerce sectors.

SRFApplicationTACTA0001SRFWebVNDReactVNDNext JsVNDFacebookTYPVulnerabilityTYPAdvisory
92
Edit Score
2025-12-04
2025-12-04 21:20Z
INFO

v3.6.0

Nuclei releases·github.com

Nuclei v3.6.0 released with new features including resume file writing, JavaScript multi-port support, direct fuzzing for OpenAPI/Swagger specs, .NET deserialization DSL helpers, and persistent metadata caching. The release includes bug fixes for DNS lookups, parallel processing restoration, and various dependency updates.

SRFApplicationVNDProjectdiscoveryTYPTool
52
Edit Score
2025-12-04
2025-12-04 20:16Z
CRIT

CVE-2025-29269 — Allnet All-rut22gw_firmware: ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-29269

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint. CVSSv3.1 9.8 (CRITICAL) · EPSS 82th percentile

CWECWE 78VNDAllnetTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-04
2025-12-04 20:16Z
CRIT

CVE-2025-29268 — Allnet All-rut22gw_firmware: ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-29268

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library. CVSSv3.1 9.8 (CRITICAL) · EPSS 94th percentile

CWECWE 798VNDAllnetTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-12-04
2025-12-04 20:16Z
HIGH

CVE-2025-12995 — Medtronic Carelink_network: CareLink Network allows an unauthenticated remote attacker to perform a brute force attack

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12995

Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certain circumstances. This issue affects CareLink Network: before December 4, 2025. CVSSv3.1 8.1 (HIGH) · EPSS 27th percentile

CWECWE 307VNDMedtronicTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-04
2025-12-04 17:15Z
HIGH

CVE-2025-66287 — WebKitGTK: A flaw was found in WebKitGTK.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66287

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. CVSSv3.1 8.8 (HIGH) · EPSS 30th percentile

CWECWE 120VNDWebkitgtkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-04
2025-12-04 16:16Z
HIGH

CVE-2025-40266 — Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40266

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value [U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX] is set from the host kernel. CVSSv3.1 8.2 (HIGH) · EPSS 6th percentile

TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-12-04
2025-12-04 16:16Z
CRIT

CVE-2025-40261 — Linux: In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40261

In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() nvme_fc_delete_assocation() waits for pending I/O to complete before returning, and an error can cause ->ioerr_work to be queued after cancel_work_sync() had been called. Move the call to cancel_work_sync() to be after nvme_fc_delete_association() to ensure ->ioerr_work is not running when the nvme_fc_ctrl object is freed. Otherwise CVSSv3.1 9.8 (CRITICAL) · EPSS 10th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-04
2025-12-04 16:16Z
CRIT

CVE-2025-40258 — Linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40258

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcp_schedule_work() syzbot reported use-after-free in mptcp_schedule_work() [1] Issue here is that mptcp_schedule_work() schedules a work, then gets a refcount on sk->sk_refcnt if the work was scheduled. This refcount will be released by mptcp_worker(). [A] if (schedule_work(...)) { [B] sock_hold(sk); return true; } Problem is that mptcp_worker() can run imm CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score