Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 09:12Z
2025-10-21
2025-10-21 09:26Z
HIGH

Pwn2Own Ireland 2025: Day One Results

Zero Day Initiative·thezdi.com

Pwn2Own Ireland 2025 Day One concluded with 17 successful exploit attempts across 34 unique vulnerabilities, awarding $522,500 in prizes. Researchers demonstrated exploits against network appliances and IoT devices including HP printers, Canon multifunction devices, Synology NAS systems, QNAP storage, Philips Hue bridges, Sonos speakers, and Home Assistant Green, using techniques ranging from stack/heap overflows to SSRF, command injection, and auth bypass chains.

TACTA0004TACTA0002SRFNetwork ApplianceSRFHardwareVNDSynologyVNDCanonVNDQnapVNDHp
72
Edit Score
2025-10-21
2025-10-21 06:15Z
CRIT

CVE-2025-10916 — FormGent: The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10916

The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server. CVSSv3.1 9.1 (CRITICAL) · EPSS 25th percentile

VNDFormgentTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-10-21
2025-10-21 00:00Z
HIGH

Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities

Trend Micro Research·trendmicro.comin the wild

Trend Micro Research disclosed technical analysis of Vidar Stealer 2.0, released October 6, 2025, featuring a complete C-language rewrite, multithreaded architecture, and novel Chrome AppBound encryption bypass via direct memory injection. The malware targets credentials across browsers, cloud services, cryptocurrency wallets, gaming platforms, and communication apps, with activity spiking as threat actors migrate from declining Lumma Stealer operations.

SRFApplicationSRFOsTACTA0006TACTA0007TACTA0009SRFBrowserTACTA0010VNDTrend Micro
72
Edit Score
2025-10-20
2025-10-20 20:15Z
CRIT

CVE-2025-8053 — Opentext Flipper: Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8053

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1.2. CVSSv3.1 9.1 (CRITICAL) · EPSS 16th percentile

CWECWE 1220VNDOpentextVNDGranularityTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-10-20
2025-10-20 20:15Z
HIGH

CVE-2025-8052 — Opentext Flipper: SQL Injection vulnerability in opentext Flipper allows SQL Injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8052

SQL Injection vulnerability in opentext Flipper allows SQL Injection.  The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2. CVSSv3.1 8.8 (HIGH) · EPSS 27th percentile

CWECWE 564VNDOpentextTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-20
2025-10-20 20:15Z
HIGH

CVE-2025-8049 — Opentext Flipper: Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8049

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue affects Flipper: 3.1.2. CVSSv3.1 8.8 (HIGH) · EPSS 18th percentile

CWECWE 1220VNDOpentextVNDGranularityTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-20
2025-10-20 18:15Z
HIGH

CVE-2025-62510 — Filerise Filerise: In version 1.4.0, a regression allowed folder visibility/ownership to be inferred from folder names.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62510

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In version 1.4.0, a regression allowed folder visibility/ownership to be inferred from folder names. Low-privilege users could see or interact with folders matching their username and, in some cases, other users’ content. This issue has been patched in version 1.5.0, where it introduces explicit per-folder ACLs (owners/read/write/share/read_own) and strict server-side check CVSSv3.1 8.1 (HIGH) · EPSS 21th percentile

CWECWE 284CWECWE 280VNDFileriseTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-10-20
2025-10-20 18:15Z
HIGH

CVE-2025-62509 — Filerise Filerise: Prior to version 1.4.0, a business logic flaw in FileRise’s file/folder handling allows low-privilege

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62509

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to version 1.4.0, a business logic flaw in FileRise’s file/folder handling allows low-privilege users to perform unauthorized operations (view/delete/modify) on files created by other users. The root cause was inferring ownership/visibility from folder names (e.g., a folder named after a username) and missing server-side authorization/ownership checks across file oper CVSSv3.1 8.1 (HIGH) · EPSS 21th percentile

CWECWE 284CWECWE 280VNDFileriseTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-10-20
2025-10-20 18:15Z
CRIT

CVE-2025-55086 — Eclipse Threadx_netx_duo: In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55086

In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read. CVSSv3.1 9.8 (CRITICAL) · EPSS 34th percentile

CWECWE 125CWECWE 1285VNDEclipseVNDNetxduoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-20
2025-10-20 18:15Z
HIGH

CVE-2025-47902 — Microchip Timeprovider_4100_firmware: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-47902

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5. CVSSv3.1 8.8 (HIGH) · EPSS 30th percentile

CWECWE 89VNDMicrochipTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-20
2025-10-20 18:15Z
HIGH

CVE-2025-47901 — Microchip Timeprovider_4100_firmware: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-47901

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. CVSSv3.1 8.8 (HIGH) · EPSS 71th percentile

CWECWE 78VNDMicrochipTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-20
2025-10-20 18:15Z
HIGH

CVE-2025-47900 — Microchip Timeprovider_4100_firmware: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-47900

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. CVSSv3.1 8.8 (HIGH) · EPSS 71th percentile

CWECWE 78VNDMicrochipTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-20
2025-10-20 18:12Z
HIGH

Microsoft Windows Cloud Files Minifilter TOCTOU Privilege Escalation

Exodus Intel·blog.exodusintel.comCVE-2025-55680CVE-2020-17136

Microsoft patched CVE-2025-55680, a time-of-check-time-of-use (TOCTOU) race condition in the Cloud Files Minifilter driver (cldflt.sys) discovered in March 2024. The vulnerability exists in HsmpOpCreatePlaceholders() where a filename validation check for backslash and colon characters can be bypassed by modifying a mapped userspace buffer between validation and file creation, allowing arbitrary file creation anywhere on the system via DLL side-loading for privilege escalation.

SRFOsTACTA0004TACTA0005VNDMicrosoftTYPWriteupTYPExploitTYPVulnerabilitySTGPrivesc
78
Edit Score
2025-10-20
2025-10-20 15:15Z
HIGH

CVE-2025-57738 — Apache Syncope: offers the ability to extend / customize the base behavior on every

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-57738

Apache Syncope offers the ability to extend / customize the base behavior on every deployment by allowing to provide custom implementations of a few Java interfaces; such implementations can be provided either as Java or Groovy classes, with the latter being particularly attractive as the machinery is set for runtime reload. Such a feature has been available for a while, but recently it was discovered that a malicious administrator can inject Groovy code that can be executed CVSSv3.1 7.2 (HIGH) · EPSS 98th percentile

CWECWE 653VNDApacheTYPVulnerability
7.2
CVSS v3.1
93
Edit Score
2025-10-20
2025-10-20 13:15Z
HIGH

CVE-2025-56224 — Ascertia Signinghub: A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-56224

A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack. CVSSv3.1 8.1 (HIGH) · EPSS 37th percentile

CWECWE 307VNDAscertiaTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-10-20
2025-10-20 08:15Z
CRIT

CVE-2025-61932 — Motex Lanscope_endpoint_manager: Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61932in the wild

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets. CVSSv3.1 9.8 (CRITICAL) · EPSS 86th percentile

CWECWE 940VNDMotexVNDLanscopeTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2025-10-20
2025-10-20 04:15Z
CRIT

CVE-2025-11948 — Document: Management System developed by Excellent Infotek has an Arbitrary File Upload vulnerability, allowing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11948

Document Management System developed by Excellent Infotek has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. CVSSv3.1 9.8 (CRITICAL) · EPSS 62th percentile

CWECWE 434VNDDocumentTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-18
2025-10-18 16:15Z
HIGH

CVE-2025-47410 — Apache Geode: is vulnerable to CSRF attacks through GET requests to the Management and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-47410

Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their Geode session credentials to submit malicious commands on the target system on behalf of the authenticated user. This issue affects Apache Geode: versions 1.10 through 1.15.1 Users are recommended to upgrade to version 1.15.2, which fixes the issue. CVSSv3.1 8.8 (HIGH) · EPSS 27th percentile

CWECWE 352VNDApacheTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-18
2025-10-18 09:15Z
HIGH

CVE-2025-9890 — Theme: The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9890

The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0. This is due to missing or incorrect nonce validation on the 'theme_editor_theme' page. This makes it possible for unauthenticated attackers to achieve remote code execution via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVSSv3.1 8.8 (HIGH) · EPSS 34th percentile

CWECWE 352TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-18
2025-10-18 07:15Z
CRIT

CVE-2025-11391 — PPOM: The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11391

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image cropper functionality in all versions up to, and including, 33.0.15. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. While the vulnerable code is in the free version, this only affected users with the pai CVSSv3.1 9.8 (CRITICAL) · EPSS 61th percentile

CWECWE 434VNDPpomTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-18
2025-10-18 06:08Z
HIGH

ADCollector — A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and

GitHub · AD attack tooling·github.comGITHUB POC

ADCollector is a C# enumeration tool designed to rapidly extract attack-relevant information from Active Directory environments, including domain trusts, privileged accounts, delegation configurations, ADCS settings, and ACL misconfigurations. The tool focuses on identifying high-value targets and attack vectors without the overhead of comprehensive enumeration, complementing PowerView for initial reconnaissance phases.

SRFOsTACTA0007SRFIdentityTYPToolSTGDiscoverySTGReconTECT1526TECT1087
72
Edit Score
2025-10-17
2025-10-17 21:15Z
HIGH

CVE-2025-62650 — Rbi Restaurant_brands_international_assistant: The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62650

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen. CVSSv3.1 8.3 (HIGH) · EPSS 41th percentile

CWECWE 603VNDRestaurantVNDRbiTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2025-10-17
2025-10-17 21:15Z
CRIT

CVE-2025-62645 — Rbi Restaurant_brands_international_assistant: The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62645

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the entire platform via the createToken GraphQL mutation. CVSSv3.1 9.9 (CRITICAL) · EPSS 52th percentile

CWECWE 266VNDRestaurantVNDRbiTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2025-10-17
2025-10-17 21:15Z
CRIT

CVE-2025-62515 — When FlightServer is configured to listen on 0.0.0.0, this allows attackers across the entire

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-62515

pyquokka is a framework for making data lakes work for time series. In versions 0.3.1 and prior, the FlightServer class directly uses pickle.loads() to deserialize action bodies received from Flight clients without any sanitization or validation in the do_action() method. The vulnerable code is located in pyquokka/flight.py at line 283 where arbitrary data from Flight clients is directly passed to pickle.loads(). When FlightServer is configured to listen on 0.0.0.0, this allo CVSSv3.1 9.8 (CRITICAL) · EPSS 56th percentile

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-17
2025-10-17 19:15Z
CRIT

CVE-2025-56218 — Ascertia Signinghub: An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-56218

An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file. CVSSv3.1 9.8 (CRITICAL) · EPSS 47th percentile

CWECWE 434VNDAscertiaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score