Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-17 21:48Z
2025-09-25
2025-09-25 16:15Z
MED

CVE-2025-20362 — Cisco Adaptive_security_appliance_software: This attack can cause unpatched devices to unexpectedly reload, leading to denial of service

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-20362in the wild

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software ["#fs"] section of this advisor CVSSv3.1 6.5 (MEDIUM) · EPSS 100th percentile

CWECWE 862VNDCiscoVNDUpdateTYPVulnerabilitySTAitw exploited
6.5
CVSS v3.1
100
Edit Score
2025-09-25
2025-09-25 16:15Z
CRIT

CVE-2025-20333 — Cisco Adaptive_security_appliance_software: A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-20333in the wild

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected de CVSSv3.1 9.9 (CRITICAL) · EPSS 99th percentile

CWECWE 120VNDCiscoVNDVpnTYPVulnerabilitySTAitw exploited
9.9
CVSS v3.1
100
Edit Score
2025-09-25
2025-09-25 15:16Z
CRIT

CVE-2025-59823 — Project: Code injection may be possible in Gardener Extensions for AWS providers prior to version

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59823

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP providers prior to version 1.46.0. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cl CVSSv3.1 9.9 (CRITICAL) · EPSS 42th percentile

CWECWE 94VNDProjectTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2025-09-25
2025-09-25 15:16Z
HIGH

CVE-2025-40837 — Ericsson Indoor_connect_8855_firmware: Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40837

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended. CVSSv3.1 8.8 (HIGH) · EPSS 20th percentile

CWECWE 862VNDEricssonTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-25
2025-09-25 15:16Z
CRIT

CVE-2025-40836 — Ericsson Indoor_connect_8855_firmware: Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40836

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges. CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 20VNDEricssonTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-25
2025-09-25 15:16Z
CRIT

CVE-2025-10542 — EAM: This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10542

iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients. CVSSv3.1 9.8 (CRITICAL) · EPSS 53th percentile

CWECWE 1392VNDEamTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-25
2025-09-25 14:15Z
HIGH

CVE-2025-59839 — Star-citizen Embedvideo: In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attributes to an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59839

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attributes to an HTML element, allowing for stored XSS through wikitext. This issue has been patched via commit 4e075d3. CVSSv3.1 8.6 (HIGH) · EPSS 21th percentile

CWECWE 79VNDEmbedvideoVNDStar CitizenTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-09-25
2025-09-25 14:15Z
CRIT

CVE-2025-59834 — Srmorete Adb_mcp_server: In versions 0.1.0 and prior, the MCP Server is written in a way that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59834

ADB MCP Server is a MCP (Model Context Protocol) server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. This issue has been patched via commit 041729c. CVSSv3.1 9.8 (CRITICAL) · EPSS 84th percentile

CWECWE 77CWECWE 78VNDSrmoreteVNDAdbTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-09-25
2025-09-25 14:15Z
HIGH

CVE-2025-59831 — Riceball Git-commiters: Prior to version 0.1.2, there is a command injection vulnerability in git-commiters.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-59831

git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommiters(options, callback) which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not sanitize for user input or practice se CVSSv3.1 8.8 (HIGH) · EPSS 83th percentile

CWECWE 77CWECWE 78VNDRiceballTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-09-25
2025-09-25 14:15Z
CRIT

CVE-2025-27261 — Ericsson Indoor_connect_8855_firmware: Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-27261

Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data. CVSSv3.1 9.8 (CRITICAL) · EPSS 23th percentile

CWECWE 89VNDEricssonTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-25
2025-09-25 14:15Z
HIGH

CVE-2025-10948 — The manipulation leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10948

A vulnerability has been found in MikroTik RouterOS 7. This affects the function parse_json_element of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.20.1 and 7.21beta2 mitigates this issue. You should upgrade the affected component. The vendor replied: "Our bug tracker reports that you CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 120CWECWE 119TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-25
2025-09-25 14:15Z
HIGH

CVE-2025-10467 — Neutralization: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10467

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS. This issue affects OBS (Student Affairs Information System): before v25.0401. CVSSv3.1 8.9 (HIGH) · EPSS 13th percentile

CWECWE 79TYPVulnerability
8.9
CVSS v3.1
95
Edit Score
2025-09-25
2025-09-25 13:15Z
HIGH

CVE-2025-10449 — Limitation: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saysis

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10449

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saysis Computer Systems Trade Ltd. Co. Saysis Web Portal allows Path Traversal. This issue affects Saysis Web Portal: from 3.1.9 & 3.2.0 before 3.2.1. CVSSv3.1 8.6 (HIGH) · EPSS 18th percentile

CWECWE 22TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-25
2025-09-25 11:15Z
HIGH

CVE-2025-10942 — H3C: The manipulation of the argument param leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10942

A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH) · EPSS 55th percentile

CWECWE 120CWECWE 119VNDH3cTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-25
2025-09-25 10:15Z
HIGH

CVE-2025-10438 — Path: Traversal: 'dir/../../filename' vulnerability in Yordam Information Technology Consulting Education and Electrical Systems Industry

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10438

Path Traversal: 'dir/../../filename' vulnerability in Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. Yordam Katalog allows Path Traversal. This issue affects Yordam Katalog: before 21.7. CVSSv3.1 8.6 (HIGH) · EPSS 18th percentile

CWECWE 27TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-25
2025-09-25 00:00Z
CRIT

New LockBit 5.0 Targets Windows, Linux, ESXi

Trend Micro Research·trendmicro.comin the wild

Trend Micro Research analyzed LockBit 5.0 ransomware binaries now circulating in the wild, confirming dedicated Windows, Linux, and ESXi variants with enhanced obfuscation, anti-analysis techniques, and cross-platform attack capabilities. The new version uses DLL reflection loaders, ETW patching, randomized 16-character file extensions, and includes a dedicated ESXi variant designed to encrypt entire virtualized infrastructures in single attacks. Code analysis confirms LockBit 5.0 is an evolutionary continuation of LockBit 4.0 rather than a rebrand, with preserved core functionality and incremental technical improvements.

SRFApplicationSRFOsTACTA0005SRFCloudTACTA0040VNDVmwareVNDLockbitTYPResearch
78
Edit Score
2025-09-24
2025-09-24 21:08Z
HIGH

fido-cross-device-phishing — This is a PoC for a phishing technique using FIDO cross‑device (hybrid) authentication. An attacker can run an AitM prox

GitHub · Azure / Entra tools·github.comGITHUB POC

A proof-of-concept phishing attack targeting FIDO cross-device (hybrid) authentication has been released. The attack combines an AitM proxy with spoofed OS-like QR code prompts and Bluetooth beacons to intercept WebAuthn credentials during the cross-device authentication flow, effectively bypassing FIDO2 protections by manipulating the relying party ID.

TACTA0001TACTA0006SRFIdentitySRFBrowserVNDMicrosoftVNDAzureTYPToolTYPWriteup
78
Edit Score
2025-09-24
2025-09-24 18:15Z
HIGH

CVE-2025-20352 — Cisco Ios_xe_sd-wan: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-20352in the wild

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. An authentica CVSSv3.1 7.7 (HIGH) · EPSS 99th percentile

CWECWE 121VNDCiscoVNDSimpleTYPVulnerabilitySTAitw exploited
7.7
CVSS v3.1
100
Edit Score
2025-09-24
2025-09-24 18:15Z
HIGH

CVE-2025-20315 — Network: A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-20315

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS) condition. This vulnerability is due to improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. An attacker could exploit this vulnerability by sending malformed CAPWAP packets through an affected device. A succ CVSSv3.1 8.6 (HIGH) · EPSS 38th percentile

CWECWE 805VNDNetworkTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-24
2025-09-24 18:15Z
HIGH

CVE-2025-20160 — A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-20160

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required TACACS+ shared secret is configured. A machine-in-the-middle attacker could exploit this vulnerability by intercepting and reading unencrypted TACACS+ messages or impersonating th CVSSv3.1 8.1 (HIGH) · EPSS 38th percentile

CWECWE 287TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-24
2025-09-24 17:15Z
HIGH

CVE-2025-20334 — HTTP: A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges could exploit this vulnerability by authenticating to an affected system and performing an API call with crafted input. Alternatively, an unauthenticated attacker could persuade a l CVSSv3.1 8.8 (HIGH) · EPSS 42th percentile

CWECWE 77VNDHttpTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-24
2025-09-24 17:15Z
HIGH

CVE-2025-10891 — Google Chrome: Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10891

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVSSv3.1 8.8 (HIGH) · EPSS 94th percentile

CWECWE 472VNDGoogleTYPVulnerability
8.8
CVSS v3.1
96
Edit Score
2025-09-24
2025-09-24 17:15Z
CRIT

CVE-2025-10890 — Google Chrome: Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10890

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) CVSSv3.1 9.1 (CRITICAL) · EPSS 24th percentile

CWECWE 203CWECWE 1300VNDGoogleVNDSideTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-24
2025-09-24 17:15Z
CRIT

CVE-2025-10585 — Google Chrome: Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10585in the wild

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVSSv3.1 9.8 (CRITICAL) · EPSS 92th percentile

CWECWE 843VNDGoogleVNDTypeTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2025-09-24
2025-09-24 17:15Z
HIGH

CVE-2025-10501 — Google Chrome: Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10501

Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVSSv3.1 8.8 (HIGH) · EPSS 21th percentile

CWECWE 416VNDGoogleTYPVulnerability
8.8
CVSS v3.1
94
Edit Score