Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 10:29Z
2025-10-15
2025-10-15 14:15Z
HIGH

CVE-2025-61958 — F5 Big-ip_access_policy_manager: A vulnerability exists in the iHealth command that may allow an authenticated attacker with

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61958

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell.  For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. CVSSv3.1 8.7 (HIGH) · EPSS 33th percentile

CWECWE 250VNDF5TYPVulnerability
8.7
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 14:15Z
HIGH

CVE-2025-59481 — F5 Big-ip_access_policy_manager: A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59481

A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to execute arbitrary system commands with higher privileges.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. CVSSv3.1 8.7 (HIGH) · EPSS 31th percentile

CWECWE 250VNDF5TYPVulnerability
8.7
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 14:15Z
HIGH

CVE-2025-53868 — F5 Big-ip_access_policy_manager: When running in Appliance mode, a highly privileged authenticated attacker with access to SCP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-53868

When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. CVSSv3.1 8.7 (HIGH) · EPSS 37th percentile

CWECWE 78VNDF5VNDApplianceTYPVulnerability
8.7
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 14:15Z
CRIT

CVE-2025-53521 — F5 Big-ip_access_policy_manager: When a BIG-IP APM access policy is configured on a virtual server, specific malicious

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-53521in the wild

When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. CVSSv3.1 9.8 (CRITICAL) · EPSS 83th percentile

CWECWE 121VNDF5VNDBigTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2025-10-15
2025-10-15 11:15Z
CRIT

CVE-2025-55081 — Eclipse Threadx_netx_duo: In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55081

In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside of the expected range, it could cause an out-of-bound read. CVSSv3.1 9.1 (CRITICAL) · EPSS 29th percentile

CWECWE 125CWECWE 126VNDEclipseTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-10-15
2025-10-15 09:15Z
CRIT

CVE-2025-9967 — Orion: The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9967

The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's password to a one-time password if the attacker knows the user's phone number CVSSv3.1 9.8 (CRITICAL)

CWECWE 288VNDOrionTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-15
2025-10-15 09:15Z
HIGH

CVE-2025-10299 — Instant: The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10299

The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ctl_create_link AJAX action in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new administrative user accounts and subsequently log in as those. CVSSv3.1 8.8 (HIGH)

CWECWE 862VNDInstantTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-10-15
2025-10-15 09:15Z
CRIT

CVE-2025-10294 — OwnID: The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10294

The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownid_shared_secret value is empty prior to authenticating a user via JWT. This makes it possible for unauthenticated attackers to log in as other users, including administrators, on instances where the plugin has not been fully configured yet. CVSSv3.1 9.8 (CRITICAL) · EPSS 55th percentile

CWECWE 288VNDOwnidTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-15
2025-10-15 09:15Z
HIGH

CVE-2025-10293 — Keyy: The Keyy Two Factor Authentication (like Clef) plugin for WordPress is vulnerable to privilege

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10293

The Keyy Two Factor Authentication (like Clef) plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible for authenticated attackers, with subscriber-level access and above, to generate valid auth tokens and leverage that to auto-login as other accounts, including administrators, as lon CVSSv3.1 8.8 (HIGH) · EPSS 27th percentile

CWECWE 287VNDKeyyTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 09:15Z
CRIT

CVE-2025-10041 — Flex: The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10041

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesave_qr_code_to_db() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 9.8 (CRITICAL)

CWECWE 434VNDFlexTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-15
2025-10-15 08:15Z
HIGH

CVE-2025-40000 — Linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40000

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() There is a bug observed when rtw89_core_tx_kick_off_and_wait() tries to access already freed skb_data: BUG: KFENCE: use-after-free write in rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110 CPU: 6 UID: 0 PID: 41377 Comm: kworker/u64:24 Not tainted 6.17.0-rc1+ #1 PREEMPT(lazy) Hardware name: QEMU Standard CVSSv3.1 8.8 (HIGH) · EPSS 9th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 08:15Z
HIGH

CVE-2025-39983 — Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39983

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue This fixes the following UAF caused by not properly locking hdev when processing HCI_EV_NUM_COMP_PKTS: BUG: KASAN: slab-use-after-free in hci_conn_tx_dequeue+0x1be/0x220 net/bluetooth/hci_conn.c:3036 Read of size 4 at addr ffff8880740f0940 by task kworker/u11:0/54 CPU: 1 UID: 0 PID: 54 Comm: kworker/u11:0 Not tainted 6.16.0-rc7 #3 PREEMPT(full) Hardware CVSSv3.1 8.8 (HIGH) · EPSS 7th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 08:15Z
HIGH

CVE-2025-39982 — Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39982

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_sync where a connection still pending is command submission (conn->state == BT_OPEN) maybe freed, also since this also can happen with the likes of hci_le_create_conn_sync fix it as well: BUG: KASAN: slab-use-after-free in hci_acl_create_conn_sync+0x5ef/0x790 net/bluetooth/hci_sync.c:6861 Write of CVSSv3.1 8.8 (HIGH) · EPSS 9th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 08:15Z
CRIT

CVE-2025-39975 — Linux: This incorrect indexing leads to improper handling of command results.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39975

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2_compound_op() In smb2_compound_op(), the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling of command results. Also, if incorrectly computed index is greather than or equal to MAX_COMPOUND, it can cause out-of-bounds accesses. CVSSv3.1 9.8 (CRITICAL) · EPSS 8th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-15
2025-10-15 08:15Z
HIGH

CVE-2025-39973 — Linux: In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39973

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To address this, introduce an upper boundary check for both Tx and Rx queue lengths. The maximum number of descriptors supported by the hardware is 8k-32. Additionally, enforce alignment constraints: Tx rings must be a multi CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 08:15Z
HIGH

CVE-2025-39972 — Linux: In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39972

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_validate_queue_map(). CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 08:15Z
HIGH

CVE-2025-39971 — Linux: In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39971

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_queues_msg(). CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 08:15Z
HIGH

CVE-2025-39970 — Linux: In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39970

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB dereference. CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 08:15Z
HIGH

CVE-2025-39969 — Linux: In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40E_VF_STATE_ACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use I40E_VF_STATE_RESOURCES_LOADED that is set only in i40e_vc_get_vf_resources_msg() and cleared during reset. CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 03:15Z
HIGH

CVE-2025-11746 — XStore: The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11746

The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theet_ajax_required_plugins_popup() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .ph CVSSv3.1 8.8 (HIGH) · EPSS 52th percentile

CWECWE 22VNDXstoreTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-15
2025-10-15 00:00Z
CRIT

Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits

Trend Micro Research·trendmicro.comCVE-2025-20352CVE-2017-3881in the wild

Trend Micro disclosed Operation Zero Disco, an active campaign exploiting Cisco SNMP vulnerability CVE-2025-20352 to achieve remote code execution and deploy persistent rootkits on Cisco 9400, 9300, and legacy 3750G switches. The rootkit establishes universal passwords, hooks IOSd memory for authentication bypass, enables lateral movement across VLANs via ARP spoofing, and provides a UDP controller for log manipulation, configuration hiding, and VTY ACL bypass.

TACTA0005TACTA0001TACTA0002SRFNetwork ApplianceTACTA0003TACTA0008VNDCiscoTYPResearch
92
Edit Score
2025-10-14
2025-10-14 22:53Z
HIGH

ProtectMyTooling — Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured

GitHub · red-team tooling·github.comGITHUB POC

ProtectMyTooling is a multi-packer wrapper framework that chains together various PE obfuscators, packers, and shellcode loaders to produce evasion-hardened red team implants. The tool supports 30+ packers (both commercial and open-source), includes artifact watermarking, IOC collection, and PE backdooring capabilities, with a GUI and Cobalt Strike integration.

SRFApplicationSRFOsTACTA0005TYPResearchTYPToolSTGDefense EvasionSTGExecution
78
Edit Score
2025-10-14
2025-10-14 22:15Z
CRIT

CVE-2025-49553 — Adobe Connect: versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49553

Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in that a victim must navigate to a crafted web page. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Scope is changed. CVSSv3.1 9.3 (CRITICAL) · EPSS 43th percentile

CWECWE 79VNDAdobeTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-10-14
2025-10-14 22:15Z
HIGH

CVE-2025-49552 — Adobe Connect: versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49552

Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a high-privileged attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in that a victim must navigate to a crafted web page. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Scope is changed. CVSSv3.1 8.1 (HIGH)

CWECWE 79VNDAdobeTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-10-14
2025-10-14 21:15Z
HIGH

CVE-2025-54264 — Adobe Commerce: versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54264

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting (XSS) Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session CVSSv3.1 8.1 (HIGH) · EPSS 47th percentile

CWECWE 79VNDAdobeTYPVulnerability
8.1
CVSS v3.1
91
Edit Score