Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 03:29Z
2025-10-30
2025-10-30 10:15Z
CRIT

CVE-2025-40099 — Linux: In the Linux kernel, the following vulnerability has been resolved: cifs: parse_dfs_referrals: prevent oob

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40099

In the Linux kernel, the following vulnerability has been resolved: cifs: parse_dfs_referrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTL_DFS_GET_REFERRALS - reply smaller than sizeof(struct get_dfs_referral_rsp) - reply with number of referrals smaller than NumberOfReferrals in the header Processing of such replies will cause oob. Return -EINVAL error on such replies to prevent oob-s. CVSSv3.1 9.4 (CRITICAL) · EPSS 8th percentile

TYPVulnerability
9.4
CVSS v3.1
97
Edit Score
2025-10-29
2025-10-29 15:15Z
HIGH

CVE-2025-10932 — Uncontrolled: Resource Consumption vulnerability in Progress MOVEit Transfer (AS2 module).This issue affects MOVEit Transfer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10932

Uncontrolled Resource Consumption vulnerability in Progress MOVEit Transfer (AS2 module).This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.3, from 2024.1.0 before 2024.1.7, from 2023.1.0 before 2023.1.16. CVSSv3.1 8.2 (HIGH) · EPSS 40th percentile

CWECWE 400VNDUncontrolledTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-10-29
2025-10-29 14:15Z
HIGH

CVE-2025-64140 — Jenkins Azure_cli: Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-64140

Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands. CVSSv3.1 8.8 (HIGH) · EPSS 48th percentile

CWECWE 78VNDJenkinsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-29
2025-10-29 14:15Z
HIGH

CVE-2023-7324 — Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-7324

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses Sanitize possible addl_desc_ptr out-of-bounds accesses in ses_enclosure_data_process(). CVSSv3.1 8.1 (HIGH)

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-10-29
2025-10-29 00:15Z
CRIT

CVE-2025-4665 — WordPress: plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-4665

WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing crafted input to influence backend queries in unexpected ways. Using specially crafted payloads, this can escalate into unsafe deserialization, enabling arbitrary object injection i CVSSv3.1 9.6 (CRITICAL) · EPSS 24th percentile

CWECWE 89VNDWordpressTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2025-10-28
2025-10-28 21:15Z
CRIT

CVE-2025-62368 — Taiga: In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62368

Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0. CVSSv3.1 9.0 (CRITICAL) · EPSS 74th percentile

CWECWE 502VNDTaigaTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2025-10-28
2025-10-28 21:15Z
CRIT

CVE-2025-43017 — Hp Thinpro: 8.1 System management application failed to verify user's true id.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-43017

HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities. CVSSv3.1 9.8 (CRITICAL) · EPSS 17th percentile

CWECWE 250VNDHpVNDThinproTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-10-28
2025-10-28 16:15Z
HIGH

CVE-2025-56399 — alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-56399

alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution (RCE) through a crafted file upload. A file with a '.png` extension containing PHP code can be uploaded via the file manager interface. Although the upload appears to fail client-side validation, the file is still saved on the server. The attacker can then use the rename API to change the file extension to `.php`, and upon accessing it via a public URL, the server CVSSv3.1 8.8 (HIGH) · EPSS 42th percentile

CWECWE 94TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-28
2025-10-28 16:15Z
CRIT

CVE-2025-36386 — Ibm Maximo_application_suite: Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-36386

IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application. CVSSv3.1 9.8 (CRITICAL) · EPSS 43th percentile

CWECWE 305VNDIbmTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-28
2025-10-28 15:16Z
HIGH

CVE-2025-34312 — Ipfire Ipfire: versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34312

IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the 'nobody' user via the BE_NAME parameter when installing a blacklist. When a blacklist is installed the application issues an HTTP POST to /cgi-bin/urlfilter.cgi and interpolates the value of BE_NAME directly into a shell invocation without appropriate sanitation. Crafted input can inject shell metacharacters, lead CVSSv3.1 8.8 (HIGH) · EPSS 82th percentile

CWECWE 78VNDIpfireTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-10-28
2025-10-28 15:16Z
HIGH

CVE-2025-34311 — Ipfire Ipfire: versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34311

IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the user 'nobody' via multiple parameters when creating a Proxy report. When a user creates a Proxy report the application issues an HTTP POST to /cgi-bin/logs.cgi/calamaris.dat and reads the values of DAY_BEGIN, MONTH_BEGIN, YEAR_BEGIN, DAY_END, MONTH_END, YEAR_END, NUM_DOMAINS, PERF_INTERVAL, NUM_CONTENT, HIST_LEVEL CVSSv3.1 8.8 (HIGH) · EPSS 96th percentile

CWECWE 78VNDIpfireTYPVulnerability
8.8
CVSS v3.1
98
Edit Score
2025-10-28
2025-10-28 14:15Z
CRIT

CVE-2025-12380 — Mozilla Firefox: Starting with Firefox 142, it was possible for a compromised child process to trigger

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDMozillaVNDStartingTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-28
2025-10-28 12:15Z
HIGH

CVE-2025-40075 — Linux: In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: use dst_dev_net_rcu() Replace

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40075

In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: use dst_dev_net_rcu() Replace three dst_dev() with a lockdep enabled helper. CVSSv3.1 8.1 (HIGH) · EPSS 8th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-10-28
2025-10-28 12:15Z
CRIT

CVE-2025-40074 — Linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu()

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40074

In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu() Change icmpv4_xrlim_allow(), ip_defrag() to prevent possible UAF. Change ipmr_prepare_xmit(), ipmr_queue_fwd_xmit(), ip_mr_output(), ipv4_neigh_lookup() to use lockdep enabled dst_dev_rcu(). CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-28
2025-10-28 12:15Z
HIGH

CVE-2025-40068 — Linux: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40068

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer overflow in run_unpack() The MFT record relative to the file being opened contains its runlist, an array containing information about the file's location on the physical disk. Analysis of all Call Stack paths showed that the values of the runlist array, from which LCNs are calculated, are not validated before run_unpack function. The run_unpack function decodes the compressed runlist CVSSv3.1 8.4 (HIGH) · EPSS 11th percentile

TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-10-28
2025-10-28 12:15Z
HIGH

CVE-2025-40058 — Linux: The Intel VT-d specification, Section 3.10 "Snoop Behavior" states: "Remapping hardware encountering the need

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40058

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must be coherent between the IOMMU and the CPU. In another word, if the iommu page walk is incoherent, dirty page tracking doesn't work. The Intel VT-d specification, Section 3.10 "Sno CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-28
2025-10-28 12:15Z
HIGH

CVE-2025-40046 — Linux: It's caused by io_zcrx_recv_skb() adjusting desc->count for all received buffers including frag lists, but

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40046

In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix overshooting recv limit It's reported that sometimes a zcrx request can receive more than was requested. It's caused by io_zcrx_recv_skb() adjusting desc->count for all received buffers including frag lists, but then doing recursive calls to process frag list skbs, which leads to desc->count double accounting and underflow. CVSSv3.1 8.6 (HIGH) · EPSS 8th percentile

TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-10-28
2025-10-28 12:15Z
HIGH

CVE-2025-40043 — Linux: This leads to the processing of memory content at the address assuming the correct

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40043

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nci_init_req, which was introduced by commit 5aca7966d2a7 ("Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools"). This bug arises due to very limited and poor input validation that was done at nic_valid_size(). This validation only validates t CVSSv3.1 8.8 (HIGH) · EPSS 11th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-28
2025-10-28 12:15Z
HIGH

CVE-2025-40039 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

CWECWE 362TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-28
2025-10-28 05:15Z
HIGH

CVE-2025-62777 — Use: of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62777

Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands. CVSSv3.1 8.8 (HIGH) · EPSS 18th percentile

CWECWE 798TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 21:15Z
INFO

CVE-2025-62725 — Docker: Compose trusts the path information embedded in remote OCI compose artifacts.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62725

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cache directory and writes the file there. This affects any platform or workflow that resolves remote OCI compose artifacts, Docker Desktop, standalone Compose binaries on Linux, CI/CD r EPSS 96th percentile

CWECWE 22VNDDockerTYPVulnerability
54
Edit Score
2025-10-27
2025-10-27 21:15Z
HIGH

CVE-2025-12322 — Tenda Ch22_firmware: Executing a manipulation of the argument page can lead to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12322

A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromNatStaticSetting of the file /goform/NatStaticSetting. Executing a manipulation of the argument page can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 20:15Z
HIGH

CVE-2025-59151 — Pi-hole Web_interface: Admin Interface before 6.3 is vulnerable to Carriage Return Line Feed (CRLF) injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59151

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface before 6.3 is vulnerable to Carriage Return Line Feed (CRLF) injection. When a request is made to a file ending with the .lp extension, the application performs a redirect without properly sanitizing the input. An attacker can inject carriage return and line feed characters (%0d%0a) to manipulate both the headers and CVSSv3.1 8.2 (HIGH) · EPSS 36th percentile

CWECWE 93CWECWE 113VNDPi HoleTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-10-27
2025-10-27 18:15Z
CRIT

CVE-2025-55754 — Apache Tomcat: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55754

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker control CVSSv3.1 9.6 (CRITICAL) · EPSS 31th percentile

CWECWE 150VNDApacheTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2025-10-27
2025-10-27 18:15Z
HIGH

CVE-2025-55752 — Apache Tomcat: Relative Path Traversal vulnerability in Apache Tomcat.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55752

Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the request URI to bypass security constraints including the protection for /WEB-INF/ and /META-INF/. If PUT requests were also enabled then malicious files could b CVSSv3.1 7.5 (HIGH) · EPSS 99th percentile

CWECWE 23VNDApacheVNDRelativeTYPVulnerability
7.5
CVSS v3.1
100
Edit Score