Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 05:52Z
2025-10-23
2025-10-23 04:16Z
CRIT

CVE-2025-47699 — Exposure: of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-47699

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior. CVSSv3.1 9.9 (CRITICAL) · EPSS 25th percentile

CWECWE 497TYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2025-10-23
2025-10-23 00:00Z
CRIT

Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques

Trend Micro Research·trendmicro.comin the wild

Trend Micro Research documented a sophisticated Agenda ransomware campaign (attributed to Qilin) that deployed Linux-based ransomware on Windows systems via legitimate remote management tools (Splashtop, WinSCP, ScreenConnect, AnyDesk) combined with BYOVD defense evasion techniques. The attack chain leveraged fake CAPTCHA social engineering for initial access, credential harvesting from Veeam backup infrastructure, and cross-platform execution through Windows Subsystem for Linux (WSL). Since January 2025, Agenda has compromised over 700 victims across 62 countries, with heavy targeting of manufacturing, technology, financial services, and healthcare sectors.

SRFApplicationSRFOsTACTA0004TACTA0005TACTA0001SRFNetworkTACTA0006TACTA0007
92
Edit Score
2025-10-22
2025-10-22 20:15Z
HIGH

CVE-2025-62610 — Hono Hono: This can lead to unintended cross-service access.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62610

Hono is a Web application framework that provides support for any JavaScript runtime. In versions from 1.1.0 to before 4.10.2, Hono’s JWT Auth Middleware does not provide a built-in aud (Audience) verification option, which can cause confused-deputy / token-mix-up issues: an API may accept a valid token that was issued for a different audience (e.g., another service) when multiple services share the same issuer/keys. This can lead to unintended cross-service access. Hono’s do CVSSv3.1 8.1 (HIGH) · EPSS 30th percentile

CWECWE 285VNDHonoTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-10-22
2025-10-22 17:15Z
HIGH

CVE-2025-11957 — Devolutions Devolutions_server: Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11957

Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary access requests of other users and gain unauthorized access to vaults and entries via crafted API requests. CVSSv3.1 8.4 (HIGH) · EPSS 24th percentile

CWECWE 639VNDDevolutionsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-10-22
2025-10-22 16:15Z
HIGH

CVE-2025-8677 — Querying: for records within a specially crafted zone containing certain malformed DNSKEY records can

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8677

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. CVSSv3.1 7.5 (HIGH) · EPSS 96th percentile

CWECWE 405VNDQueryingTYPVulnerability
7.5
CVSS v3.1
91
Edit Score
2025-10-22
2025-10-22 16:15Z
HIGH

CVE-2025-40780 — In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40780

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. CVSSv3.1 8.6 (HIGH) · EPSS 38th percentile

CWECWE 341TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-10-22
2025-10-22 16:15Z
HIGH

CVE-2025-40778 — BIND: Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40778

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. CVSSv3.1 8.6 (HIGH) · EPSS 50th percentile

CWECWE 349VNDBindTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-10-22
2025-10-22 16:06Z
HIGH

Impacket 0.13.0

Impacket releases·github.com

Impacket 0.13.0 released with major SMB client/server refactoring, enhanced LDAP/Kerberos handling including channel binding and LDAPS-based LAPS retrieval, expanded relay attack capabilities (WinRMS, SCCM, RPC), and new offensive examples including AD CS "bad successor" attack and LSA secrets extraction. The release adds 50 commits with improvements to authentication, relay tooling, and remote access utilities across Windows domain attack surfaces.

SRFNetworkTACTA0006SRFIdentityTACTA0008TACTA0009VNDImpacketTYPToolSTGCred Access
78
Edit Score
2025-10-22
2025-10-22 15:16Z
HIGH

CVE-2025-62606 — PHP: Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62606

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a full compromise of the application's database, including reading, modifying, or deleting all data. This issue has been patched in version 2.5.12. CVSSv3.1 8.8 (HIGH) · EPSS 23th percentile

CWECWE 89TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-22
2025-10-22 15:16Z
HIGH

CVE-2025-62029 — Control: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62029

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themesion Grevo grevo.This issue affects Grevo: from n/a through <= 2.4. CVSSv3.1 8.1 (HIGH) · EPSS 38th percentile

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-10-22
2025-10-22 15:16Z
CRIT

CVE-2025-62025 — Deserialization: of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62025

Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8. CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-22
2025-10-22 15:16Z
CRIT

CVE-2025-62023 — Control: Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62023

Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through <= 250905. CVSSv3.1 9.0 (CRITICAL)

CWECWE 94TYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2025-10-22
2025-10-22 15:16Z
HIGH

CVE-2025-62008 — Deserialization: of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62008

Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects Product Table For WooCommerce: from n/a through <= 1.2.4. CVSSv3.1 8.8 (HIGH) · EPSS 42th percentile

CWECWE 502TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-22
2025-10-22 15:16Z
HIGH

CVE-2025-62007 — Incorrect: Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privilege Escalation.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62007

Incorrect Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privilege Escalation.This issue affects Voice Feedback: from n/a through <= 1.0.3. CVSSv3.1 8.8 (HIGH) · EPSS 30th percentile

CWECWE 266TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-22
2025-10-22 15:16Z
CRIT

CVE-2025-60238 — Deserialization: of Untrusted Data vulnerability in universam UNIVERSAM universam-demo allows Object Injection.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60238

Deserialization of Untrusted Data vulnerability in universam UNIVERSAM universam-demo allows Object Injection.This issue affects UNIVERSAM: from n/a through <= 9.04.02. CVSSv3.1 9.8 (CRITICAL)

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-22
2025-10-22 15:16Z
HIGH

CVE-2025-60234 — Deserialization: of Untrusted Data vulnerability in designthemes Single Property single-property allows Object Injection.This issue

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60234

Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property allows Object Injection.This issue affects Single Property: from n/a through <= 2.8. CVSSv3.1 8.8 (HIGH) · EPSS 43th percentile

CWECWE 502TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-22
2025-10-22 15:16Z
CRIT

CVE-2025-60232 — Deserialization: of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60232

Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro Ultimate: from n/a through <= 8.0.5. CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-22
2025-10-22 15:16Z
HIGH

CVE-2025-60228 — Deserialization: of Untrusted Data vulnerability in designthemes Knowledge Base kbase allows Object Injection.This issue

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60228

Deserialization of Untrusted Data vulnerability in designthemes Knowledge Base kbase allows Object Injection.This issue affects Knowledge Base: from n/a through <= 2.9. CVSSv3.1 8.8 (HIGH) · EPSS 43th percentile

CWECWE 502TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-22
2025-10-22 15:15Z
HIGH

CVE-2025-60227 — Thimpress Wp_pipes: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThimPress

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60227

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThimPress WP Pipes wp-pipes allows Path Traversal.This issue affects WP Pipes: from n/a through <= 1.4.3. CVSSv3.1 8.6 (HIGH)

CWECWE 22VNDThimpressTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-10-22
2025-10-22 15:15Z
CRIT

CVE-2025-60226 — Axiomthemes White_rabbit: Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60226

Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2. CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 502VNDAxiomthemesTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-22
2025-10-22 15:15Z
CRIT

CVE-2025-60225 — Deserialization: of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60225

Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue affects BugsPatrol: from n/a through <= 1.5.0. CVSSv3.1 9.8 (CRITICAL) · EPSS 47th percentile

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-22
2025-10-22 15:15Z
CRIT

CVE-2025-60224 — Deserialization: of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60224

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through <= 2.0.9. CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-22
2025-10-22 15:15Z
HIGH

CVE-2025-60222 — Incorrect: Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60222

Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.8.0. CVSSv3.1 8.8 (HIGH) · EPSS 31th percentile

CWECWE 266TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-22
2025-10-22 15:15Z
CRIT

CVE-2025-60221 — Deserialization: of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60221

Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <= 3.0.3. CVSSv3.1 9.8 (CRITICAL) · EPSS 46th percentile

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-22
2025-10-22 15:15Z
CRIT

CVE-2025-60220 — Incorrect: Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-60220

Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0. CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score