Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 20:28Z
2025-10-01
2025-10-01 08:15Z
HIGH

CVE-2025-39919 — Linux Linux_kernel: In case of the global wcid entry, it could even lead to corruption in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39919

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being casted to struct mt7996_sta_link using container_of. CVSSv3.1 8.8 (HIGH) · EPSS 2th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-01
2025-10-01 08:15Z
HIGH

CVE-2025-39918 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39918

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-10-01
2025-10-01 00:00Z
HIGH

WARMCOOKIE One Year Later: New Features and Fresh Insights

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs provides a one-year follow-up analysis of the WARMCOOKIE backdoor, documenting active development and infrastructure evolution since its initial disclosure in summer 2024. The malware now includes new execution handlers (PE/DLL/PowerShell), defense-evasion improvements via dynamic string banks for legitimate-looking paths, campaign ID tracking, and continued C2 infrastructure reuse with a default SSL certificate. Despite Europol's Operation Endgame disruption in May 2025, WARMCOOKIE remains actively deployed through malvertising and spam campaigns, with operators distributing variant builds via the CASTLEBOT MaaS loader.

SRFOsTACTA0005TACTA0001TACTA0002SRFNetworkTACTA0007TACTA0011TYPResearch
72
Edit Score
2025-09-30
2025-09-30 18:15Z
CRIT

CVE-2025-56513 — Nicehash Quickminer: An attacker capable of intercepting or redirecting traffic to the update url and can

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-56513

NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An attacker capable of intercepting or redirecting traffic to the update url and can hijack the update process and deliver arbitrary executables that are automatically executed, resulting in full remote code execution. This constitutes a critical supply chain attack vector. NOTE: the Supplier reports that the existence of an http://update.nicehash.com URL is a f CVSSv3.1 9.8 (CRITICAL) · EPSS 60th percentile

CWECWE 494VNDNicehashTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-30
2025-09-30 15:15Z
HIGH

CVE-2025-7779 — Local privilege escalation due to insecure XPC service configuration.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-7779

Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197, Acronis True Image OEM (macOS) before build 42571. CVSSv3.1 8.8 (HIGH)

CWECWE 269TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-30
2025-09-30 13:15Z
HIGH

CVE-2025-11152 — Mozilla Firefox: Sandbox escape due to integer overflow in the Graphics: Canvas2D component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11152

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3. CVSSv3.1 8.6 (HIGH)

CWECWE 190VNDMozillaTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-30
2025-09-30 08:18Z
HIGH

AMSI-WRITE-RAID-BYPASS — "AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

GitHub · EDR bypass / evasion·github.comGITHUB POC

A GitHub repository discloses "AMSI Write Raid," a vulnerability allowing bypass of Windows Antimalware Scan Interface (AMSI) by overwriting writable memory entries in AMSI and CLR DLLs without invoking VirtualProtect API, thereby evading EDR/AV detection. The technique exploits pre-writable memory regions in the call stack to redirect AMSI function pointers, and the author notes multiple vulnerable entries exist across the AMSI call chain.

SRFOsTACTA0005VNDMicrosoftTYPWriteupTYPExploitTYPVulnerabilitySTGDefense EvasionTECT1562.001
72
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-09-30
2025-09-30 00:00Z
HIGH

FlipSwitch: a Novel Syscall Hooking Technique

Elastic Security Labs·elastic.co

Elastic Security Labs disclosed FlipSwitch, a novel Linux kernel rootkit technique that bypasses syscall hooking defenses introduced in Linux kernel 6.9. The technique patches the compiled machine code of the x64_sys_call dispatcher by locating and overwriting call instruction offsets, enabling syscall interception while evading traditional sys_call_table-based detection. The research includes proof-of-concept code, detection signatures, and analysis of how attackers adapted to kernel hardening changes.

SRFOsTACTA0005TACTA0003OSLinuxTYPResearchSTGDefense EvasionSTGPersistenceTECT1547
82
Edit Score
2025-09-29
2025-09-29 23:15Z
CRIT

CVE-2025-59937 — Pebcak Go-mail: In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59937

go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender- or recipient address is passed to the corresponding MAIL FROM or RCPT TO commands of the SMTP client, there is a possibility of wrong address routing or even ESMTP parameter smuggling. For successful exploitation, it is required that the user's code allows for arbitrary mail address input (i. e. through a web form or si CVSSv3.1 9.1 (CRITICAL) · EPSS 44th percentile

CWECWE 88VNDPebcakTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-29
2025-09-29 23:15Z
HIGH

CVE-2025-36245 — Ibm Infosphere_information_server: InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-36245

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input. CVSSv3.1 8.8 (HIGH) · EPSS 37th percentile

CWECWE 78VNDIbmTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-29
2025-09-29 20:15Z
HIGH

CVE-2025-35030 — Mieweb Enterprise_health: Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-35030

Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08. CVSSv3.1 8.1 (HIGH) · EPSS 9th percentile

CWECWE 352VNDMedicalVNDMiewebTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-29
2025-09-29 19:15Z
HIGH

CVE-2025-41251 — VMware: NSX contains a weak password recovery mechanism vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-41251

VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk. Attack Vector: Remote, unauthenticated. Severity: Important. CVSSv3: 8.1 (High). Acknowledgments: Reported by the National Security Agency. Affected Products:VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x NSX-T 3.x VMware Cloud F CVSSv3.1 8.1 (HIGH) · EPSS 55th percentile

CWECWE 640VNDVmwareTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-29
2025-09-29 13:15Z
CRIT

CVE-2024-13150 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-13150

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fayton Software and Consulting Services fayton.Pro ERP allows SQL Injection. This issue affects fayton.Pro ERP: through 20250929. CVSSv3.1 9.8 (CRITICAL) · EPSS 11th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-29
2025-09-29 12:15Z
CRIT

CVE-2025-8868 — Chef Automate: In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8868

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. CVSSv3.1 9.8 (CRITICAL) · EPSS 98th percentile

CWECWE 89CWECWE 200VNDProgressVNDChefTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-09-29
2025-09-29 12:15Z
HIGH

CVE-2025-6724 — Chef Automate: In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-6724

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command. CVSSv3.1 8.8 (HIGH) · EPSS 28th percentile

CWECWE 89VNDProgressVNDChefTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-29
2025-09-29 08:15Z
CRIT

CVE-2025-48006 — Saison Dataspider_servista: If a specially crafted request is processed, arbitrary files on the file system where

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48006

Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is processed, arbitrary files on the file system where the server application for the product is installed may be read, or a denial-of-service (DoS) condition may occur. CVSSv3.1 9.1 (CRITICAL) · EPSS 44th percentile

CWECWE 611VNDSaisonTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-29
2025-09-29 01:15Z
HIGH

CVE-2025-11130 — This manipulation causes missing authentication.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11130

A weakness has been identified in iHongRen pptp-vpn 1.0/1.0.1 on macOS. This issue affects the function shouldAcceptNewConnection of the file HelpTool/HelperTool.m of the component XPC Service. This manipulation causes missing authentication. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.4 (HIGH) · EPSS 8th percentile

CWECWE 306CWECWE 287TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-09-28
2025-09-28 23:15Z
HIGH

CVE-2025-11123 — Tenda Ac18_firmware: This manipulation of the argument enable causes stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11123

A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-28
2025-09-28 22:15Z
HIGH

CVE-2025-11122 — Tenda Ac18_firmware: The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11122

A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 121CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-28
2025-09-28 21:15Z
HIGH

CVE-2025-11120 — Tenda Ac18_firmware: Executing manipulation can lead to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11120

A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. CVSSv3.1 8.8 (HIGH) · EPSS 89th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-09-28
2025-09-28 20:15Z
HIGH

CVE-2025-11117 — Tenda Ch22_firmware: This manipulation of the argument dips causes buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11117

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-28
2025-09-28 02:15Z
HIGH

CVE-2025-11091 — Tenda Ac21_firmware: The manipulation of the argument list results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-11091

A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be exploited. CVSSv3.1 8.8 (HIGH) · EPSS 53th percentile

CWECWE 120CWECWE 119VNDTendaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-27
2025-09-27 05:15Z
HIGH

CVE-2025-9816 — Statistics: The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9816

The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVSSv3.1 7.2 (HIGH) · EPSS 95th percentile

CWECWE 79VNDStatisticsTYPVulnerability
7.2
CVSS v3.1
89
Edit Score
2025-09-27
2025-09-27 01:15Z
HIGH

CVE-2025-59945 — Syslifters Sysreptor: This allows users to read, modify and delete pentesting projects they are not members

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59945

SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged (non-admin) users can assign the is_project_admin permission to their own user. This allows users to read, modify and delete pentesting projects they are not members of and are therefore not supposed to access. This issue has been patched in version 2025.83. CVSSv3.1 8.1 (HIGH) · EPSS 24th percentile

CWECWE 266VNDSysreptorVNDSysliftersTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-27
2025-09-27 01:15Z
HIGH

CVE-2025-59939 — Wegia Wegia: Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks in the control.php

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59939

WeGIA is a Web manager for charitable institutions. Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks in the control.php endpoint with the following parameters: nomeClasse=ProdutoControle&metodo=excluir&id_produto=[malicious command]. It is necessary to apply prepared statements methods, sanitization, and validations on theid_produto parameter. This issue has been patched in version 3.5.0. CVSSv3.1 8.8 (HIGH) · EPSS 29th percentile

CWECWE 89VNDWegiaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score