Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-18 00:51Z
2025-09-17
2025-09-17 08:15Z
CRIT

CVE-2025-9242 — Watchguard Fireware: An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9242in the wild

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 787VNDWatchguardTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2025-09-17
2025-09-17 07:15Z
HIGH

CVE-2025-9216 — StoreEngine: The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9216

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import() function in all versions up to, and including, 1.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 8.8 (HIGH) · EPSS 57th percentile

CWECWE 434VNDStoreengineTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-17
2025-09-17 06:15Z
HIGH

CVE-2025-10058 — Import: The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10058

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the upload_function() function in all versions up to, and including, 7.27. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). CVSSv3.1 8.1 (HIGH) · EPSS 48th percentile

CWECWE 73VNDImportTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-17
2025-09-17 06:15Z
HIGH

CVE-2025-10057 — Import: The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10057

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.28. This is due to the write_to_customfile() function writing unfiltered PHP code to a file. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject the customFunction.php file with PHP code that can be accessed to trigger remote code execution. CVSSv3.1 8.8 (HIGH) · EPSS 53th percentile

CWECWE 94VNDImportTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 20:15Z
CRIT

CVE-2025-57631 — Tduckcloud Tduck: SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-57631

SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module CVSSv3.1 9.8 (CRITICAL) · EPSS 51th percentile

CWECWE 89VNDTduckcloudTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-16
2025-09-16 20:15Z
CRIT

CVE-2025-34186 — Ilevia Eve_x1_server_firmware: Because the binary interprets non-zero exit codes from system() as successful authentication, remote attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34186

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit codes from system() as successful authentication, remote attackers can bypass authentication and gain full access to the system. CVSSv3.1 9.8 (CRITICAL) · EPSS 74th percentile

CWECWE 287CWECWE 78VNDIleviaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-16
2025-09-16 19:15Z
CRIT

CVE-2025-56557 — Tuya Tuya: An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-56557

An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol. CVSSv3.1 9.1 (CRITICAL) · EPSS 22th percentile

CWECWE 250VNDTuyaTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-09-16
2025-09-16 17:15Z
HIGH

CVE-2023-53333 — Linux Linux_kernel: BUG: KASAN: stack-out-of-bounds in nf_conntrack_dccp_packet+0x1134/0x11c0 Read of size 4 at addr ffff000128f66e0c by task

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53333

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nf_conntrack_dccp_packet() has an unique: dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &_dh); And nothing more is 'pulled' from the packet, depending on the content. dh->dccph_doff, and/or dh->dccph_x ...) So dccp_ack_seq() is happily reading stuff past the _dh buffer. BUG: KASAN: stack-o CVSSv3.1 8.2 (HIGH) · EPSS 4th percentile

CWECWE 125TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-09-16
2025-09-16 17:15Z
HIGH

CVE-2023-53322 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53322

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due to use after free. Current code allows terminate_rport_io to exit before making sure all IOs has returned. For FCP-2 device, IO's can hang on in HW because driver has not tear down the session in FW at first sign of cable pull. When dev_loss_tmo timer pops, terminate_rport_io is called and upper layer is about to free various resources. T CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 17:15Z
HIGH

CVE-2023-53315 — Linux Linux_kernel: This descriptor which is invalid causes the wrong SKB (SKB stored in the IDR

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53315

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix SKB corruption in REO destination ring While running traffics for a long time, randomly an RX descriptor filled with value "0" from REO destination ring is received. This descriptor which is invalid causes the wrong SKB (SKB stored in the IDR lookup with buffer id "0") to be fetched which in turn causes SKB memory corruption issue and the same leads to crash after some time. Changed the s CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

CWECWE 401TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 17:15Z
HIGH

CVE-2023-53305 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53305

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2cap_le_command_rej. CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 17:15Z
CRIT

CVE-2022-50350 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-50350

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the login thread In case a malicious initiator sends some random data immediately after a login PDU; the iscsi_target_sk_data_ready() callback will schedule the login_work and, at the same time, the negotiation may end without clearing the LOGIN_FLAGS_INITIAL_PDU flag (because no additional PDU exchanges are required to complete the login). T CVSSv3.1 9.8 (CRITICAL) · EPSS 1th percentile

CWECWE 362TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-16
2025-09-16 15:15Z
HIGH

CVE-2024-13174 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-13174

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916.  NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. CVSSv3.1 8.6 (HIGH) · EPSS 11th percentile

CWECWE 89TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-16
2025-09-16 15:15Z
CRIT

CVE-2024-13149 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE -

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-13149

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arma Store Armalife allows SQL Injection. This issue affects Armalife: through 20250916.  NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. CVSSv3.1 9.8 (CRITICAL) · EPSS 11th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-16
2025-09-16 14:15Z
CRIT

CVE-2025-57119 — Phpgurukul Online_library_management_system: An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-57119

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function CVSSv3.1 9.8 (CRITICAL) · EPSS 41th percentile

CWECWE 250VNDPhpgurukulVNDOnlineTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-16
2025-09-16 13:16Z
HIGH

CVE-2025-39827 — Linux Linux_kernel: As a result, this resolves a slab-use-after-free issue reported by Syzbot.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39827

In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct rose_neigh tracks references from rose_node structures, while the 'use' field (now refcount_t) tracks references from rose_sock. This patch merges these two reference counting systems using 'use' field for proper reference management. Specificall CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 13:16Z
HIGH

CVE-2025-39826 — Linux Linux_kernel: This can lead to race conditions where a rose_neigh structure is freed while still

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39826

In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a rose_neigh structure is freed while still being referenced by other code paths. For example, when rose_neigh->use becomes zero during an ioctl operation via rose_rt_ioctl(), the structure may be removed while its timer is still active CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 13:15Z
HIGH

CVE-2025-39809 — Linux Linux_kernel: It caused stack-out-of-bounds and kernel crash: kernel: BUG: KASAN: stack-out-of-bounds in quicki2c_acpi_get_dsd_property.constprop.0+0x111/0x1b0 [intel_quicki2c]

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39809

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length The QuickI2C ACPI _DSD methods return ICRS and ISUB data with a trailing byte, making the actual length is one more byte than the structs defined. It caused stack-out-of-bounds and kernel crash: kernel: BUG: KASAN: stack-out-of-bounds in quicki2c_acpi_get_dsd_property.constprop.0+0x111/0x1b0 [intel_quicki2c] kernel: Write of size 12 at addr CVSSv3.1 8.4 (HIGH) · EPSS 4th percentile

CWECWE 787TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-09-16
2025-09-16 13:15Z
HIGH

CVE-2025-39806 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39806

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by passing in report descriptor smaller than 607 bytes. mt_report_fixup() attempts to patch byte offset 607 of the descriptor with 0x25 by first checking if byte offset 607 is 0x15 however it lacks bounds checks to verify if the descriptor is big enough before CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 125TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 13:15Z
HIGH

CVE-2025-10537 — Mozilla Firefox: Some of these bugs showed evidence of memory corruption and we presume that with

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10537

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. CVSSv3.1 8.8 (HIGH)

CWECWE 119VNDMozillaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 13:15Z
HIGH

CVE-2025-10534 — Mozilla Firefox: Spoofing issue in the Site Permissions component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10534

Spoofing issue in the Site Permissions component. This vulnerability was fixed in Firefox 143 and Thunderbird 143. CVSSv3.1 8.1 (HIGH)

CWECWE 79VNDMozillaVNDSpoofingTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-16
2025-09-16 13:15Z
HIGH

CVE-2025-10533 — Mozilla Firefox: Integer overflow in the SVG component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10533

Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. CVSSv3.1 8.8 (HIGH)

CWECWE 190VNDMozillaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 13:00Z
CRIT

State of the SaaS Security Union

Bishop Fox Labs·bishopfox.comin the wild

Bishop Fox documents two concurrent threat campaigns targeting SaaS applications: UNC6040 (ShinyHunters/Scattered Spider) conducting OAuth phishing and credential attacks against Salesforce customers for ransom, and UNC6395 (suspected nation-state APT) exploiting integration misconfigurations in Salesloft to compromise 700+ customers and pivot into downstream SaaS and AWS environments. The attacks expose critical gaps in SaaS security posture, particularly overprivileged integration accounts and lack of secrets management visibility.

SRFApplicationTACTA0001TACTA0006TACTA0007SRFCloudTACTA0008VNDSalesforceVNDAws
78
Edit Score
2025-09-16
2025-09-16 12:15Z
CRIT

CVE-2025-7744 — Dolusoft Omaspot: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-7744

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dolusoft Omaspot allows SQL Injection. This issue affects Omaspot: before 12.09.2025. CVSSv3.1 9.8 (CRITICAL) · EPSS 17th percentile

CWECWE 89VNDDolusoftTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-16
2025-09-16 12:15Z
CRIT

CVE-2025-7743 — Dolusoft Omaspot: Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-7743

Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation. This issue affects Omaspot: before 12.09.2025. CVSSv3.1 9.6 (CRITICAL)

CWECWE 319VNDCleartextVNDDolusoftTYPVulnerability
9.6
CVSS v3.1
98
Edit Score