Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 04:12Z
2025-10-27
2025-10-27 20:15Z
HIGH

CVE-2025-59151 — Pi-hole Web_interface: Admin Interface before 6.3 is vulnerable to Carriage Return Line Feed (CRLF) injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59151

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface before 6.3 is vulnerable to Carriage Return Line Feed (CRLF) injection. When a request is made to a file ending with the .lp extension, the application performs a redirect without properly sanitizing the input. An attacker can inject carriage return and line feed characters (%0d%0a) to manipulate both the headers and CVSSv3.1 8.2 (HIGH) · EPSS 36th percentile

CWECWE 93CWECWE 113VNDPi HoleTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-10-27
2025-10-27 18:15Z
CRIT

CVE-2025-55754 — Apache Tomcat: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55754

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker control CVSSv3.1 9.6 (CRITICAL) · EPSS 31th percentile

CWECWE 150VNDApacheTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2025-10-27
2025-10-27 18:15Z
HIGH

CVE-2025-55752 — Apache Tomcat: Relative Path Traversal vulnerability in Apache Tomcat.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55752

Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the request URI to bypass security constraints including the protection for /WEB-INF/ and /META-INF/. If PUT requests were also enabled then malicious files could b CVSSv3.1 7.5 (HIGH) · EPSS 99th percentile

CWECWE 23VNDApacheVNDRelativeTYPVulnerability
7.5
CVSS v3.1
100
Edit Score
2025-10-27
2025-10-27 16:15Z
HIGH

CVE-2023-49440 — AhnLab: EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter." CVSSv3.1 8.8 (HIGH) · EPSS 24th percentile

CWECWE 89VNDAhnlabTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 13:15Z
HIGH

CVE-2025-12274 — Tenda Ch22_firmware: The manipulation of the argument page leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12274

A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 52th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 13:15Z
HIGH

CVE-2025-12273 — Tenda Ch22_firmware: Executing a manipulation of the argument page can lead to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12273

A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. CVSSv3.1 8.8 (HIGH) · EPSS 62th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 12:15Z
HIGH

CVE-2025-12272 — Tenda Ch22_firmware: Performing a manipulation of the argument page results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12272

A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing a manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-10-27
2025-10-27 12:15Z
HIGH

CVE-2025-12271 — Tenda Ch22_firmware: Such manipulation of the argument page leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12271

A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used. CVSSv3.1 8.8 (HIGH) · EPSS 62th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 11:15Z
HIGH

CVE-2025-12265 — Tenda Ch22_firmware: This manipulation of the argument page causes buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12265

A weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 10:15Z
HIGH

CVE-2025-8432 — Incorrect: Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8432

Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issue affects Infra Monitoring: from 24.10.0 before 24.10.6, from 24.04.0 before 24.04.9, from 23.10.0 before 23.10.15. CVSSv3.1 8.4 (HIGH) · EPSS 35th percentile

CWECWE 276TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-10-27
2025-10-27 10:15Z
HIGH

CVE-2025-12260 — Totolink A3300r_firmware: Such manipulation of the argument enable leads to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12260

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. Such manipulation of the argument enable leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 62th percentile

CWECWE 121CWECWE 119VNDTotolinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 10:15Z
HIGH

CVE-2025-12259 — Totolink A3300r_firmware: This manipulation of the argument recHour causes stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12259

A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. This manipulation of the argument recHour causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 62th percentile

CWECWE 121CWECWE 119VNDTotolinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 10:15Z
HIGH

CVE-2025-12258 — Totolink A3300r_firmware: The manipulation of the argument opmode results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12258

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from remote. CVSSv3.1 8.8 (HIGH) · EPSS 62th percentile

CWECWE 121CWECWE 119VNDTotolinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 07:15Z
HIGH

CVE-2025-12241 — Totolink A3300r_firmware: The manipulation of the argument lang results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12241

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. The manipulation of the argument lang results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile

CWECWE 121CWECWE 119VNDTotolinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 07:15Z
HIGH

CVE-2025-12240 — Totolink A3300r_firmware: The manipulation of the argument ip leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12240

A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 56th percentile

CWECWE 120CWECWE 119VNDTotolinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 07:15Z
HIGH

CVE-2025-12239 — Totolink A3300r_firmware: Executing manipulation can lead to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12239

A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. Executing manipulation can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. CVSSv3.1 8.8 (HIGH) · EPSS 56th percentile

CWECWE 120CWECWE 119VNDTotolinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 07:15Z
HIGH

CVE-2025-12236 — Tenda Ch22_firmware: This manipulation of the argument page causes buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12236

A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. CVSSv3.1 8.8 (HIGH) · EPSS 89th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-10-27
2025-10-27 07:15Z
HIGH

CVE-2025-12235 — Tenda Ch22_firmware: The manipulation of the argument page results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12235

A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used. CVSSv3.1 8.0 (HIGH) · EPSS 37th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2025-10-27
2025-10-27 07:15Z
HIGH

CVE-2025-12234 — Tenda Ch22_firmware: The manipulation of the argument page leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12234

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 61th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 07:15Z
HIGH

CVE-2025-12233 — Tenda Ch22_firmware: Executing a manipulation of the argument page can lead to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12233

A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 92th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-10-27
2025-10-27 07:15Z
HIGH

CVE-2025-12232 — Tenda Ch22_firmware: Performing a manipulation of the argument page results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12232

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 91th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-10-27
2025-10-27 05:15Z
HIGH

CVE-2025-12225 — Tenda Ac6_firmware: Such manipulation of the argument shareSpeed leads to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12225

A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component HTTP Request Handler. Such manipulation of the argument shareSpeed leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 04:15Z
HIGH

CVE-2025-12214 — Tenda O3_firmware1.0.0.10\(2478\): Performing a manipulation of the argument enable results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12214

A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a manipulation of the argument enable results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 04:15Z
HIGH

CVE-2025-12213 — Tenda O3_firmware1.0.0.10\(2478\): Such manipulation of the argument lan leads to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12213

A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file /goform/setVlanConfig. Such manipulation of the argument lan leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-27
2025-10-27 04:15Z
HIGH

CVE-2025-12212 — Tenda O3_firmware1.0.0.10\(2478\): This manipulation of the argument upnpEn causes stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12212

A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This manipulation of the argument upnpEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score