Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 15:16Z
2025-10-08
2025-10-08 02:15Z
CRIT

CVE-2025-11423 — Tenda Ch22_firmware: Performing a manipulation of the argument page results in memory corruption.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11423

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing a manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and could be used. CVSSv3.1 9.8 (CRITICAL) · EPSS 57th percentile

CWECWE 119VNDTendaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-08
2025-10-08 01:15Z
HIGH

CVE-2025-48981 — An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection. CVSSv3.1 8.6 (HIGH) · EPSS 2th percentile

CWECWE 311TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-10-08
2025-10-08 01:15Z
CRIT

CVE-2025-11418 — Tenda Ch22_firmware: The manipulation of the argument mit_ssid_index leads to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11418

A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. CVSSv3.1 9.8 (CRITICAL) · EPSS 94th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-10-08
2025-10-08 00:00Z
HIGH

How Your AI Chatbot Can Become a Backdoor

Trend Micro Research·trendmicro.com

Trend Micro published a detailed attack chain demonstrating how LLM-powered chatbots can be weaponized as backdoors through a multi-stage exploitation sequence: initial information disclosure via error messages, indirect prompt injection via third-party data sources, system prompt leakage, excessive API permissions, command injection, and lateral movement into infrastructure. The research maps vulnerabilities to OWASP LLM Top 10 (LLM01, LLM02, LLM05, LLM06, LLM07, LLM08) and illustrates how seemingly minor AI security gaps chain into full infrastructure compromise.

SRFApplicationTACTA0004TACTA0001TACTA0002TACTA0007TACTA0009SRFAiVNDTrend Micro
68
Edit Score
2025-10-08
2025-10-08 00:00Z
CRIT

A Cascade of Insecure Architectures: Axis Plugin Design Flaw Expose Select Autodesk Revit Users to Supply Chain Risk

Trend Micro Research·trendmicro.comZDI-24-1181ZDI-24-1328ZDI-24-1329ZDI-25-858

Trend Micro discovered hardcoded Azure Storage Account credentials (SAS tokens and access keys) embedded in signed DLLs within Axis Communications' Autodesk Revit plugin, exposing MSI installers and RFA model files to unauthorized modification. Combined with multiple RCE vulnerabilities in Autodesk Revit's RFA file parser, attackers could have poisoned the storage account to deliver malicious installers or crafted model files, enabling mass supply-chain compromise of Axis customers. Axis patched the issue across multiple iterations (versions 25.3.710, 25.3.711, and final fix in 25.3.718), but initial patches used obfuscation and retained overly permissive credentials before implementing least-privilege SAS tokens.

SRFApplicationTACTA0001TACTA0006SRFCloudVNDAutodeskVNDAxis CommunicationsTYPResearchTYPVulnerability
82
Edit Score
2025-10-08
2025-10-08 00:00Z
HIGH

What the 2025 Elastic Global Threat Report reveals about the evolving threat landscape

Elastic Security Labs·elastic.co

Elastic's 2025 Global Threat Report analyzes real-world telemetry to reveal shifting adversary tactics: Execution techniques now dominate Windows attacks (32%), surpassing Defense Evasion; cloud attacks concentrate on Initial Access, Persistence, and Credential Access; and AI-driven malware generation is lowering barriers to entry. Browser credential theft has industrialized, with 1-in-8 malware samples designed to steal credentials for the access broker economy.

SRFApplicationSRFOsTACTA0005TACTA0002TACTA0006TACTA0003SRFCloudVNDElastic
68
Edit Score
2025-10-07
2025-10-07 21:15Z
HIGH

CVE-2025-11408 — Dlink Di-7001mini-8g_firmware: Such manipulation of the argument str leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11408

A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown function of the file /dbsrv.asp. Such manipulation of the argument str leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 58th percentile

CWECWE 120CWECWE 119VNDDlinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-10-07
2025-10-07 20:15Z
HIGH

CVE-2025-44824 — Nagios Log_server: Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-44824

Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Could not stop elasticsearch" is in the API response. This is GL:NLS#474. CVSSv3.1 8.5 (HIGH) · EPSS 86th percentile

CWECWE 863VNDNagiosTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-10-07
2025-10-07 20:15Z
CRIT

CVE-2025-44823 — Nagios Log_server: Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475. CVSSv3.1 9.9 (CRITICAL) · EPSS 97th percentile

CWECWE 497VNDNagiosTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2025-10-07
2025-10-07 19:15Z
HIGH

CVE-2025-11192 — Extremenetworks Fabric_engine_\(voss\): The SD-WAN AutoSense implementation may be exploited by malicious actors by allowing unauthorized access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11192

A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious actors by allowing unauthorized access to network fabric and configuration data. CVSSv3.1 8.6 (HIGH) · EPSS 26th percentile

CWECWE 287VNDExtremenetworksVNDExtremeTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-10-07
2025-10-07 16:15Z
HIGH

CVE-2023-53679 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mt7601u: fix an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53679

In the Linux kernel, the following vulnerability has been resolved: wifi: mt7601u: fix an integer underflow Fix an integer underflow that leads to a null pointer dereference in 'mt7601u_rx_skb_from_seg()'. The variable 'dma_len' in the URB packet could be manipulated, which could trigger an integer underflow of 'seg_len' in 'mt7601u_rx_process_seg()'. This underflow subsequently causes the 'bad_frame' checks in 'mt7601u_rx_skb_from_seg()' to be bypassed, eventually leading CVSSv3.1 8.3 (HIGH) · EPSS 4th percentile

CWECWE 191TYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2025-10-07
2025-10-07 16:15Z
HIGH

CVE-2023-53676 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53676

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks CVSSv3.1 8.8 (HIGH) · EPSS 6th percentile

CWECWE 787TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-07
2025-10-07 16:15Z
HIGH

CVE-2023-53675 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53675

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible desc_ptr out-of-bounds accesses Sanitize possible desc_ptr out-of-bounds accesses in ses_enclosure_data_process(). CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

CWECWE 125TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-07
2025-10-07 16:15Z
HIGH

CVE-2023-53673 — Linux Linux_kernel: ISO, L2CAP and SCO connections refer to the hci_conn without hci_conn_get, so disconn_cfm must

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53673

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback before deleting conn In hci_cs_disconnect, we do hci_conn_del even if disconnection failed. ISO, L2CAP and SCO connections refer to the hci_conn without hci_conn_get, so disconn_cfm must be called so they can clean up their conn, otherwise use-after-free occurs. ISO: ========================================================== iso_sock_connect:880: sk 00000000e CVSSv3.1 8.8 (HIGH) · EPSS 7th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-07
2025-10-07 16:15Z
HIGH

CVE-2023-53635 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53635

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong ct->timeout value (struct nf_conn)->timeout is an interval before the conntrack confirmed. After confirmed, it becomes a timestamp. It is observed that timeout of an unconfirmed conntrack: - Set by calling ctnetlink_change_timeout(). As a result, `nfct_time_stamp` was wrongly added to `ct->timeout` twice. - Get by calling ctnetlink_dump_timeout(). As a result, `nfct_tim CVSSv3.1 8.2 (HIGH) · EPSS 9th percentile

TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-10-07
2025-10-07 16:15Z
HIGH

CVE-2023-53630 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53630

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batch_last_index should use 'start_index' since at input to this function the batch is either empty or it has already been adjusted to cross any accesses so it will start at the point we are unmapping from. Getting this wrong causes the unmap to run over the end of the pages which corrupts pages that were neve CVSSv3.1 8.8 (HIGH) · EPSS 6th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-07
2025-10-07 16:15Z
CRIT

CVE-2023-53629 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53629

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: [ 151.760477] ================================================================== [ 151.761803] BUG: KASAN: use-after-free in dlm_midcomms_commit_mhandle+0x19d/0x4b0 [ 151.763414] Read of size 4 at addr ffff88811a980c60 by task lock_torture/13 CVSSv3.1 9.8 (CRITICAL) · EPSS 9th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-10-07
2025-10-07 14:15Z
HIGH

CVE-2025-54406 — Planet Wgr-500_firmware: Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54406

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `counts` request parameter. CVSSv3.1 8.8 (HIGH) · EPSS 91th percentile

CWECWE 78VNDPlanetTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-10-07
2025-10-07 14:15Z
HIGH

CVE-2025-54405 — Planet Wgr-500_firmware: Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54405

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `ipaddr` request parameter. CVSSv3.1 8.8 (HIGH) · EPSS 91th percentile

CWECWE 78VNDPlanetTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-10-07
2025-10-07 14:15Z
HIGH

CVE-2025-54404 — Planet Wgr-500_firmware: Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54404

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related to the `new_device_name` request parameter. CVSSv3.1 8.8 (HIGH) · EPSS 91th percentile

CWECWE 78VNDPlanetTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-10-07
2025-10-07 14:15Z
HIGH

CVE-2025-54403 — Planet Wgr-500_firmware: Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54403

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related to the `new_password` request parameter. CVSSv3.1 8.8 (HIGH) · EPSS 91th percentile

CWECWE 78VNDPlanetTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-10-07
2025-10-07 14:15Z
HIGH

CVE-2025-54402 — Planet Wgr-500_firmware: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54402

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `submit-url` and `ipaddr` request parameters combined. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 121VNDPlanetTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-07
2025-10-07 14:15Z
HIGH

CVE-2025-54401 — Planet Wgr-500_firmware: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54401

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `submit-url` request parameter. CVSSv3.1 8.8 (HIGH) · EPSS 53th percentile

CWECWE 121VNDPlanetTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-07
2025-10-07 14:15Z
HIGH

CVE-2025-54400 — Planet Wgr-500_firmware: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54400

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `counts` request parameter for composing the `"ping -c <counts> <ipaddr> 2>&1 > %s &"` string. CVSSv3.1 8.8 (HIGH) · EPSS 52th percentile

CWECWE 121VNDPlanetTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-07
2025-10-07 14:15Z
HIGH

CVE-2025-54399 — Planet Wgr-500_firmware: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54399

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `ipaddr` request parameter for composing the `"ping -c <counts> <ipaddr> 2>&1 > %s &"` string. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 121VNDPlanetTYPVulnerability
8.8
CVSS v3.1
94
Edit Score