Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 17:28Z
2025-10-06
2025-10-06 08:15Z
HIGH

CVE-2025-11326 — Tenda Ac18_firmware: Executing a manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11326

A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. CVSSv3.1 8.8 (HIGH) · EPSS 68th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-06
2025-10-06 07:15Z
HIGH

CVE-2025-11325 — Tenda Ac18_firmware: Performing a manipulation of the argument Username results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11325

A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this issue is some unknown functionality of the file /goform/fast_setting_pppoe_set. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-06
2025-10-06 07:15Z
HIGH

CVE-2025-11324 — Tenda Ac18_firmware: Such manipulation of the argument newVersion leads to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11324

A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. CVSSv3.1 8.8 (HIGH) · EPSS 56th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-06
2025-10-06 06:15Z
HIGH

CVE-2025-11323 — Utt 1250gw_firmware: This manipulation of the argument Username causes buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11323

A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 120CWECWE 119VNDUttTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-06
2025-10-06 02:15Z
HIGH

CVE-2025-50538 — Flowiseai Flowise: before 3.0.5 allows XSS via an IFRAME element when an admin views the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50538

Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log. CVSSv3.1 8.2 (HIGH) · EPSS 96th percentile

CWECWE 79VNDFlowiseaiVNDFlowiseTYPVulnerability
8.2
CVSS v3.1
95
Edit Score
2025-10-06
2025-10-06 02:15Z
HIGH

CVE-2025-29192 — Flowiseai Flowise: before 3.0.5 allows XSS via a FORM element and an INPUT element when

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-29192

Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log. CVSSv3.1 8.2 (HIGH) · EPSS 33th percentile

CWECWE 79VNDFlowiseaiVNDFlowiseTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-10-05
2025-10-05 22:15Z
HIGH

CVE-2025-11305 — Utt 840g_firmware: The manipulation of the argument txtMin2 leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11305

A vulnerability has been found in UTT HiPER 840G up to 3.1.1-190328. Affected by this issue is the function strcpy of the file /goform/formTaskEdit. The manipulation of the argument txtMin2 leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 61th percentile

CWECWE 120CWECWE 119VNDUttTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-10-05
2025-10-05 20:15Z
HIGH

CVE-2025-11302 — Belkin F9k1015_firmware: Such manipulation of the argument pinCode leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11302

A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function of the file /goform/formWpsStart. Such manipulation of the argument pinCode leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 20:15Z
HIGH

CVE-2025-11301 — Belkin F9k1015_firmware: This manipulation of the argument webpage causes buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11301

A weakness has been identified in Belkin F9K1015 1.00.10. This affects an unknown function of the file /goform/formWlanSetupWPS. This manipulation of the argument webpage causes buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 19:16Z
HIGH

CVE-2025-11300 — Belkin F9k1015_firmware: The manipulation of the argument ateFunc results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11300

A security flaw has been discovered in Belkin F9K1015 1.00.10. The impacted element is an unknown function of the file /goform/formWlanMP. The manipulation of the argument ateFunc results in buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 56th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 19:15Z
HIGH

CVE-2025-11299 — Belkin F9k1015_firmware: The manipulation of the argument pppUserName leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11299

A vulnerability was identified in Belkin F9K1015 1.00.10. The affected element is an unknown function of the file /goform/formWanTcpipSetup. The manipulation of the argument pppUserName leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 18:15Z
HIGH

CVE-2025-11297 — Belkin F9k1015_firmware: Performing a manipulation of the argument webpage results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11297

A vulnerability was found in Belkin F9K1015 1.00.10. This issue affects some unknown processing of the file /goform/formSetLanguage. Performing a manipulation of the argument webpage results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 17:15Z
HIGH

CVE-2025-11296 — Belkin F9k1015_firmware: Such manipulation of the argument pptpUserName leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11296

A vulnerability has been found in Belkin F9K1015 1.00.10. This vulnerability affects unknown code of the file /goform/formPPTPSetup. Such manipulation of the argument pptpUserName leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 17:15Z
HIGH

CVE-2025-11295 — Belkin F9k1015_firmware: This manipulation of the argument pppUserName causes buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11295

A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 16:15Z
HIGH

CVE-2025-11294 — Belkin F9k1015_firmware: The manipulation of the argument L2TPUserName results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11294

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulation of the argument L2TPUserName results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 70th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 16:15Z
HIGH

CVE-2025-11293 — Belkin F9k1015_firmware: The manipulation of the argument max_Conn leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11293

A security vulnerability has been detected in Belkin F9K1015 1.00.10. Affected by this vulnerability is an unknown functionality of the file /goform/formConnectionSetting. The manipulation of the argument max_Conn leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile

CWECWE 120CWECWE 119VNDBelkinTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-05
2025-10-05 04:15Z
CRIT

CVE-2025-61882 — Oracle Concurrent_processing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-61882in the wild

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availa CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 287VNDOracleVNDVulnerabilityTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2025-10-04
2025-10-04 16:15Z
HIGH

CVE-2023-53615 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix deletion

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53615

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix deletion race condition System crash when using debug kernel due to link list corruption. The cause of the link list corruption is due to session deletion was allowed to queue up twice. Here's the internal trace that show the same port was allowed to double queue for deletion on different cpu. 20808683956 015 qla2xxx [0000:13:00.1]-e801:4: Scheduling sess ffff93ebf9306800 for deletion 5 CVSSv3.1 8.8 (HIGH) · EPSS 1th percentile

CWECWE 362TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-04
2025-10-04 16:15Z
CRIT

CVE-2023-53600 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53600

In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to emit an icmp error in response to a nonliner skb, we get BUG: KASAN: slab-out-of-bounds in ip_compute_csum+0x134/0x220 Read of size 4 at addr ffff88811c50db00 by task iperf3/1691 CPU: 2 PID: 1691 Comm: iperf3 Not tainted 6.5.0-rc3+ #309 [..] kasan_report+0x105/0x140 ip_compute_csum+0x134/0x220 iptunnel_pmtud_build_icmp+0x554/0x1020 s CVSSv3.1 9.1 (CRITICAL) · EPSS 4th percentile

CWECWE 125TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-10-04
2025-10-04 16:15Z
HIGH

CVE-2023-53598 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Range

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53598

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Range check CHDBOFF and ERDBOFF If the value read from the CHDBOFF and ERDBOFF registers is outside the range of the MHI register space then an invalid address might be computed which later causes a kernel panic. Range check the read value to prevent a crash due to bad data from the device. CVSSv3.1 8.4 (HIGH) · EPSS 4th percentile

TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-10-04
2025-10-04 16:15Z
HIGH

CVE-2023-53589 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53589

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware n_channels If the firmware sends us a corrupted MCC response with n_channels much larger than the command response can be, we might copy far too much (uninitialized) memory and even crash if the n_channels is large enough to make it run out of the one page allocated for the FW response. Fix that by checking the lengths. Doing a < comparison would be sufficient, but CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-04
2025-10-04 16:15Z
HIGH

CVE-2023-53586 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix multiple

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53586

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix multiple LUN_RESET handling This fixes a bug where an initiator thinks a LUN_RESET has cleaned up running commands when it hasn't. The bug was added in commit 51ec502a3266 ("target: Delete tmr from list before processing"). The problem occurs when: 1. We have N I/O cmds running in the target layer spread over 2 sessions. 2. The initiator sends a LUN_RESET for each session. 3. sessio CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

CWECWE 415TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-04
2025-10-04 16:15Z
HIGH

CVE-2022-50493 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-50493

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when I/O abort times out While performing CPU hotplug, a crash with the following stack was seen: Call Trace: qla24xx_process_response_queue+0x42a/0x970 [qla2xxx] qla2x00_start_nvme_mq+0x3a2/0x4b0 [qla2xxx] qla_nvme_post_cmd+0x166/0x240 [qla2xxx] nvme_fc_start_fcp_op.part.0+0x119/0x2e0 [nvme_fc] blk_mq_dispatch_rq_list+0x17b/0x610 __blk_mq_sched_dispat CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-04
2025-10-04 08:15Z
HIGH

CVE-2025-39952 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: avoid buffer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39952

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: avoid buffer overflow in WID string configuration Fix the following copy overflow warning identified by Smatch checker. drivers/net/wireless/microchip/wilc1000/wlan_cfg.c:184 wilc_wlan_parse_response_frame() error: '__memcpy()' 'cfg->s[i]->str' copy overflow (512 vs 65537) This patch introduces size check before accessing the memory buffer. The checks are base on the WID type of r CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 787TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-04
2025-10-04 08:15Z
CRIT

CVE-2025-39948 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ice: fix Rx page

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39948

In the Linux kernel, the following vulnerability has been resolved: ice: fix Rx page leak on multi-buffer frames The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver. It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed. If the CVSSv3.1 9.8 (CRITICAL) · EPSS 3th percentile

CWECWE 401TYPVulnerability
9.8
CVSS v3.1
99
Edit Score