Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-16 18:03Z
2025-12-02
2025-12-02 13:15Z
CRIT

CVE-2025-11783 — Circutor Sge-plc1000_firmware: Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11783

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The vulnerability is found in the 'AddEvent()' function when copying the user-controlled username input to a fixed-size buffer (48 bytes) without boundary checking. This can lead to memory corruption, resulting in possible remote code execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 121VNDStackVNDCircutorTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-02
2025-12-02 13:15Z
CRIT

CVE-2025-11782 — Circutor Sge-plc1000_firmware: Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11782

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'ShowDownload()' function uses “sprintf()” to format a string that includes the user-controlled input of 'GetParameter(meter)' in the fixed-size buffer 'acStack_4c' (64 bytes) without checking the length. An attacker can provide an excessively long value for the 'meter' parameter that exceeds the 64-byte buffer size. CVSSv3.1 9.8 (CRITICAL) · EPSS 31th percentile

CWECWE 121VNDStackVNDCircutorTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-02
2025-12-02 13:15Z
CRIT

CVE-2025-11779 — Circutor Sge-plc1000_firmware: Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11779

Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2. The 'SetLan' function is invoked when a new configuration is applied. This new configuration function is activated by a management web request, which can be invoked by a user when making changes to the 'index.cgi' web application. The parameters are not being sanitised, which could lead to command injection. CVSSv3.1 9.8 (CRITICAL) · EPSS 68th percentile

CWECWE 121VNDStackVNDCircutorTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-02
2025-12-02 11:15Z
CRIT

CVE-2025-41744 — Sprecher-automation Sprecon-e-c_firmware: Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-41744

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity. CVSSv3.1 9.1 (CRITICAL) · EPSS 35th percentile

CWECWE 1394VNDSprecher AutomationVNDSprecherTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-02
2025-12-02 11:15Z
CRIT

CVE-2025-41742 — Sprecher-automation Sprecon-e-c_firmware: Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-41742

Sprecher Automations SPRECON-E-C,  SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance. CVSSv3.1 9.8 (CRITICAL) · EPSS 39th percentile

CWECWE 1394VNDSprecher AutomationVNDSprecherTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-02
2025-12-02 10:16Z
CRIT

CVE-2025-13872 — Objectplanet Opinio: Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13872

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attacker to force the server to perform HTTP GET requests via crafted import requests to an arbitrary destination. CVSSv3.1 9.1 (CRITICAL) · EPSS 23th percentile

CWECWE 918VNDObjectplanetVNDBlindTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-12-02
2025-12-02 10:16Z
HIGH

CVE-2025-13871 — Objectplanet Opinio: Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13871

Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on behalf of the connected users and then access such files without authentication. CVSSv3.1 8.8 (HIGH) · EPSS 8th percentile

CWECWE 352VNDObjectplanetTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-12-02
2025-12-02 03:16Z
HIGH

CVE-2024-45675 — Ibm Informix_dynamic_server: Informix Dynamic Server 14.10 could allow a local user on the system to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-45675

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password. CVSSv3.1 8.4 (HIGH) · EPSS 2th percentile

CWECWE 309VNDIbmTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-12-02
2025-12-02 00:00Z
HIGH

Unraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp

Trend Micro Research·trendmicro.comin the wild

Water Saci threat actors are deploying a sophisticated multi-stage banking trojan campaign targeting Brazilian users via WhatsApp, leveraging AI-converted Python automation scripts alongside HTA/ZIP/PDF delivery vectors. The infection chain combines obfuscated VB scripts, MSI installers, AutoIt loaders, and encrypted PE payloads with process hollowing into svchost.exe, coupled with aggressive reconnaissance of banking applications, browser history, antivirus software, and cryptocurrency wallets. The malware exhibits behavioral continuity with the Casbaneiro/Metamorfo lineage while introducing enhanced evasion techniques including custom RC4-like encryption, LZNT1 decompression, anti-sandbox VM detection, and persistent window-title monitoring to trigger credential theft during banking sessions.

SRFApplicationTACTA0001TACTA0002TACTA0007SRFWebTACTA0003VNDTrend MicroTYPResearch
78
Edit Score
2025-12-01
2025-12-01 22:15Z
CRIT

CVE-2025-66301 — Getgrav Grav: Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66301

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/{page_name}, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through modifying the content of the data[_json][header][form] which is the YAML frontmatter which includes the process section which dictates what happens after a user submits the form wh CVSSv3.1 9.6 (CRITICAL) · EPSS 70th percentile

CWECWE 285VNDGravVNDGetgravTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2025-12-01
2025-12-01 22:15Z
HIGH

CVE-2025-66300 — Getgrav Grav: This can allow an adversary to compromise any registered account by resetting a password

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66300

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using "Frontmatter" form. This includes Grav user account files (/grav/user/accounts/*.yaml), which store hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracki CVSSv3.1 8.5 (HIGH) · EPSS 39th percentile

CWECWE 22VNDGravVNDGetgravTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-12-01
2025-12-01 22:15Z
HIGH

CVE-2025-66299 — Getgrav Grav: Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side Template Injection (SSTI) that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66299

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side Template Injection (SSTI) that allows any authenticated user with editor permissions to execute arbitrary code on the remote server, bypassing the existing security sandbox. Since the security sandbox does not fully protect the Twig object, it is possible to interact with it (e.g., call methods, read/write attributes) through maliciously crafted Twig template directives injected CVSSv3.1 8.8 (HIGH) · EPSS 48th percentile

CWECWE 94CWECWE 1336VNDGravVNDGetgravTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-01
2025-12-01 21:15Z
HIGH

CVE-2025-66297 — Getgrav Grav: Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66297

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, the user can escalate their privileges to admin or execute arbitrary system commands via the scheduler API. This results in both Privilege Escalation (PE) and Remote Code Execution (RCE) vulnerabilities. This vulnerability is fixed in 1.8.0-beta CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 1336VNDGravVNDGetgravTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-01
2025-12-01 21:15Z
HIGH

CVE-2025-66296 — Getgrav Grav: Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav’s Admin plugin due to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66296

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav’s Admin plugin due to the absence of username uniqueness validation when creating users. A user with the create user permission can create a new account using the same username as an existing administrator account, set a new password/email, and then log in as that administrator. This effectively allows privilege escalation from limited user-manager permissions to ful CVSSv3.1 8.8 (HIGH) · EPSS 25th percentile

CWECWE 266VNDGravVNDGetgravTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-01
2025-12-01 21:15Z
HIGH

CVE-2025-66295 — Getgrav Grav: Prior to 1.8.0-beta.27, when a user with privilege of user creation creates a new

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66295

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, when a user with privilege of user creation creates a new user through the Admin UI and supplies a username containing path traversal sequences (for example ..\Nijat or ../Nijat), Grav writes the account YAML file to an unintended path outside user/accounts/. The written YAML can contain account fields such as email, fullname, twofa_secret, and hashed_password. This vulnerability is fixed in 1.8.0-beta.27. CVSSv3.1 8.8 (HIGH) · EPSS 45th percentile

CWECWE 22VNDGravVNDGetgravTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-12-01
2025-12-01 21:15Z
HIGH

CVE-2025-66294 — Getgrav Grav: Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists in Grav that allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-66294

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by unauthenticated attackers. This vulnerability stems from weak regex validation in the cleanDangerousTwig method. This vulnerability is fixed in 1.8.0-beta.27. CVSSv3.1 8.8 (HIGH) · EPSS 86th percentile

CWECWE 94CWECWE 1336VNDGravVNDGetgravTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-12-01
2025-12-01 20:15Z
CRIT

CVE-2025-51683 — Mjobtime Mjobtime: A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-51683

A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/update_profile_Server endpoint . CVSSv3.1 9.8 (CRITICAL) · EPSS 33th percentile

CWECWE 89VNDMjobtimeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-01
2025-12-01 20:15Z
CRIT

CVE-2025-51682 — Mjobtime Mjobtime: 15.7.2 handles authorization on the client side, which allows an attacker to modify

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-51682

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly. CVSSv3.1 9.8 (CRITICAL) · EPSS 31th percentile

CWECWE 602VNDMjobtimeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-12-01
2025-12-01 16:15Z
HIGH

CVE-2025-57489 — Shirt-pocket Superduper\!: Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper!

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-57489

Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privileges to root due to the improper use of a setuid binary. CVSSv3.1 8.1 (HIGH) · EPSS 23th percentile

CWECWE 284VNDShirt PocketTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-12-01
2025-12-01 16:15Z
HIGH

CVE-2025-55222 — Socomec Diris_m-70_firmware: A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55222

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus RTU over TCP on port 503. CVSSv3.1 8.6 (HIGH) · EPSS 35th percentile

CWECWE 306VNDSocomecTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-12-01
2025-12-01 16:15Z
HIGH

CVE-2025-55221 — Socomec Diris_m-70_firmware: A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55221

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus TCP over port 502. CVSSv3.1 8.6 (HIGH) · EPSS 36th percentile

CWECWE 306VNDSocomecTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-12-01
2025-12-01 16:15Z
CRIT

CVE-2025-3500 — Avast Antivirus: Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-3500

Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3. CVSSv3.1 9.0 (CRITICAL) · EPSS 39th percentile

CWECWE 190VNDAvastTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2025-12-01
2025-12-01 16:15Z
HIGH

CVE-2025-26858 — Socomec Diris_m-70_firmware: A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-26858

A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of network packets can lead to denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability. CVSSv3.1 8.6 (HIGH) · EPSS 49th percentile

CWECWE 20VNDSocomecTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-12-01
2025-12-01 16:15Z
HIGH

CVE-2025-23417 — Socomec Diris_m-70_firmware: A denial of service vulnerability exists in the Modbus RTU over TCP functionality of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-23417

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability. CVSSv3.1 8.6 (HIGH) · EPSS 44th percentile

CWECWE 306VNDSocomecTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-12-01
2025-12-01 16:15Z
HIGH

CVE-2024-48882 — Socomec Diris_m-70_firmware: A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-48882

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability. CVSSv3.1 8.6 (HIGH) · EPSS 44th percentile

CWECWE 306VNDSocomecTYPVulnerability
8.6
CVSS v3.1
93
Edit Score