Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-18 01:36Z
2025-09-16
2025-09-16 12:15Z
HIGH

CVE-2024-12913 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-12913

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Megatek Communication System Azora Wireless Network Management allows SQL Injection. This issue affects Azora Wireless Network Management: through 20250916.  NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. CVSSv3.1 8.8 (HIGH) · EPSS 6th percentile

CWECWE 89TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-16
2025-09-16 09:15Z
CRIT

CVE-2025-4688 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2. CVSSv3.1 9.8 (CRITICAL) · EPSS 17th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-16
2025-09-16 08:15Z
HIGH

CVE-2024-12367 — Exposure: of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vegagrup Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-12367

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vegagrup Software Vega Master allows Directory Indexing. This issue affects Vega Master: from v.1.12.35 through 20250916.  NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. CVSSv3.1 8.6 (HIGH) · EPSS 17th percentile

CWECWE 497TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-16
2025-09-16 08:15Z
HIGH

CVE-2023-53297 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53297

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balance' is triggered. CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-15
2025-09-15 22:15Z
HIGH

CVE-2025-56274 — Senior-walter Web-based_pharmacy_product_management_system: SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-56274

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions and perform sensitive operations such as adding new users. CVSSv3.1 8.1 (HIGH)

CWECWE 284VNDSenior WalterVNDSourcecodesterTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-15
2025-09-15 17:15Z
CRIT

CVE-2025-57174 — Siklu: An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-57174

An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previous versions. The rfpiped service listening on TCP port 555 which uses static AES encryption keys hardcoded in the binary. These keys are identical across all devices, allowing attackers to craft encrypted packets that execute arbitrary commands without authentication. This is a failed patch for CVE-2017-7318. This issue may affect other E CVSSv3.1 9.8 (CRITICAL) · EPSS 65th percentile

CWECWE 321VNDSikluTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-15
2025-09-15 15:15Z
HIGH

CVE-2023-53253 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Reference hid_device

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53253

In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Reference hid_device devm allocation of input_dev name Use hid_device for devm allocation of the input_dev name to avoid a use-after-free. input_unregister_device would trigger devres cleanup of all resources associated with the input_dev, free-ing the name. The name would subsequently be used in a uevent fired at the end of unregistering the input_dev. CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-09-15
2025-09-15 15:15Z
HIGH

CVE-2023-53226 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix OOB

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53226

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix OOB and integer underflow when rx packets Make sure mwifiex_process_mgmt_packet, mwifiex_process_sta_rx_packet and mwifiex_process_uap_rx_packet, mwifiex_uap_queue_bridged_pkt and mwifiex_process_rx_packet not out-of-bounds access the skb->data buffer. CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 191TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-15
2025-09-15 15:15Z
HIGH

CVE-2023-53213 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53213

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() Fix a slab-out-of-bounds read that occurs in kmemdup() called from brcmf_get_assoc_ies(). The bug could occur when assoc_info->req_len, data from a URB provided by a USB device, is bigger than the size of buffer which is defined as WL_EXTRA_BUF_MAX. Add the size check for req_len/resp_len of assoc_info. Found by a modified version of syzkall CVSSv3.1 8.1 (HIGH) · EPSS 5th percentile

CWECWE 125TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-15
2025-09-15 15:15Z
CRIT

CVE-2022-50335 — Linux Linux_kernel: It will use a uninitialized req, which will result in a bad request data

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-50335

In the Linux kernel, the following vulnerability has been resolved: 9p: set req refcount to zero to avoid uninitialized usage When a new request is allocated, the refcount will be zero if it is reused, but if the request is newly allocated from slab, it is not fully initialized before being added to idr. If the p9_read_work got a response before the refcount initiated. It will use a uninitialized req, which will result in a bad request data struct. Here is the logs from s CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 908TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-15
2025-09-15 14:15Z
HIGH

CVE-2023-53194 — Linux Linux_kernel: [ 162.459513] BUG: KASAN: use-after-free in hdr_find_e.isra.0+0x10c/0x320 [ 162.460176] Read of size 2 at

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53194

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add length check in indx_get_root This adds a length check to guarantee the retrieved index root is legit. [ 162.459513] BUG: KASAN: use-after-free in hdr_find_e.isra.0+0x10c/0x320 [ 162.460176] Read of size 2 at addr ffff8880037bca99 by task mount/243 [ 162.460851] [ 162.461252] CPU: 0 PID: 243 Comm: mount Not tainted 6.0.0-rc7 #42 [ 162.461744] Hardware name: QEMU Standard PC (i440FX + PII CVSSv3.1 8.4 (HIGH) · EPSS 5th percentile

CWECWE 416TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-09-15
2025-09-15 14:15Z
CRIT

CVE-2023-53192 — Linux Linux_kernel: Passing the 32 bit hash returned by skb_get_hash() can lead to problems related to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53192

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix nexthop hash size The nexthop code expects a 31 bit hash, such as what is returned by fib_multipath_hash() and rt6_multipath_hash(). Passing the 32 bit hash returned by skb_get_hash() can lead to problems related to the fact that 'int hash' is a negative number when the MSB is set. In the case of hash threshold nexthop groups, nexthop_select_path_hthr() will disproportionately select the first n CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 129TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-15
2025-09-15 14:15Z
HIGH

CVE-2023-53186 — Linux Linux_kernel: Later when SKB(@to) is released, it frees the page directly even though the page

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-53186

In the Linux kernel, the following vulnerability has been resolved: skbuff: Fix a race between coalescing and releasing SKBs Commit 1effe8ca4e34 ("skbuff: fix coalescing for page_pool fragment recycling") allowed coalescing to proceed with non page pool page and page pool page when @from is cloned, i.e. to->pp_recycle --> false from->pp_recycle --> true skb_cloned(from) --> true However, it actually requires skb_cloned(@from) to hold true until coalescing finishes in CVSSv3.1 8.1 (HIGH) · EPSS 1th percentile

CWECWE 362TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-15
2025-09-15 14:15Z
HIGH

CVE-2022-50241 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-50241

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntf_state entry on the s2s_cp_stateids list after inter-server copy completed. The sc_cp_list that the expired copy state was inserted on was already freed. When COPY completes, the Linux client normally sends LOCKU(lock_state x), FREE_STATEID(lock_state x) and CLOSE(op CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-15
2025-09-15 14:15Z
CRIT

CVE-2022-50235 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-50235

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READDIR Restore the previous limit on the @count argument to prevent a buffer overflow attack. CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-12
2025-09-12 18:15Z
CRIT

CVE-2025-58434 — Flowiseai Flowise: This enables any attacker to generate a reset token for arbitrary users and directly

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58434

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive information including a valid password reset `tempToken` without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO). This vulnerability applies to both the cloud servic CVSSv3.1 9.8 (CRITICAL) · EPSS 99th percentile

CWECWE 306VNDFlowiseaiVNDFlowiseTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-09-12
2025-09-12 16:15Z
CRIT

CVE-2025-55835 — Sueamcms_project Sueamcms: File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55835

File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering. CVSSv3.1 9.8 (CRITICAL) · EPSS 62th percentile

CWECWE 434VNDSueamcms ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-12
2025-09-12 08:15Z
HIGH

CVE-2025-21043 — Samsung Android: Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21043in the wild

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile

CWECWE 787VNDSamsungTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
95
Edit Score
2025-09-12
2025-09-12 08:15Z
HIGH

CVE-2025-21042 — Samsung Android: Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21042in the wild

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. CVSSv3.1 8.8 (HIGH) · EPSS 98th percentile

CWECWE 787VNDSamsungTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
100
Edit Score
2025-09-11
2025-09-11 17:15Z
HIGH

CVE-2025-39790 — Linux Linux_kernel: This works when processing completion for chained transactions, but can lead to nasty results

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39790

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between it and the host's local copy of the ring's read pointer. This works when processing completion for chained transactions, but can lead to nasty results if the device sends an event for a si CVSSv3.1 8.4 (HIGH) · EPSS 4th percentile

CWECWE 415TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-09-11
2025-09-11 17:15Z
HIGH

CVE-2025-39761 — Linux Linux_kernel: This could lead to out-of-bounds access in peer->rx_tid[].

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39761

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12k_dp_rx_peer_frag_setup(). This could lead to out-of-bounds access in peer->rx_tid[]. Hence, add a decrement operation for TID, before peer cleanup to ensures proper cleanup and prevents out-of-bounds access issues when the RX peer frag setup fails. Fou CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 125TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-11
2025-09-11 17:15Z
CRIT

CVE-2025-39758 — Linux Linux_kernel: With the recent slab allocator changes being slowly introduced into next (that disallow sendpage

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39758

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages Ever since commit c2ff29e99a76 ("siw: Inline do_tcp_sendpages()"), we have been doing this: static int siw_tcp_sendpages(struct socket *s, struct page **page, int offset, size_t size) [...] /* Calculate the number of bytes we need to push, for this page * specifically */ size_t bytes = min_t(size CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-11
2025-09-11 17:15Z
HIGH

CVE-2025-39750 — Linux Linux_kernel: Proceed to ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, which might leads to freeing unallocated TID

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39750

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Correct tid cleanup when tid setup fails Currently, if any error occurs during ath12k_dp_rx_peer_tid_setup(), the tid value is already incremented, even though the corresponding TID is not actually allocated. Proceed to ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, which might leads to freeing unallocated TID and cause potential crash or out-of-bounds access. Hence, fix by cor CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 125TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-11
2025-09-11 15:48Z
HIGH

kernel-exploits — My proof-of-concept exploits for the Linux kernel

GitHub · kernel exploits·github.comGITHUB POCCVE-2016-2384CVE-2016-9793CVE-2017-1000112CVE-2017-18344CVE-2017-6074CVE-2017-7308CVE-2025-38494CVE-2025-38495

xairy's kernel-exploits repository is a curated collection of proof-of-concept Linux kernel exploits spanning 2016–2025, covering double-free vulnerabilities, signedness issues, memory corruption, and integer underflow flaws across USB, socket, and HID subsystems. The collection includes both privilege escalation and information-leak primitives, with the most recent additions (CVE-2025-38494/38495) targeting HID core integer underflow.

SRFOsTACTA0004TACTA0005OSLinuxTYPWriteupTYPExploitSTGDefense EvasionSTGPrivesc
78
Edit Score
2025-09-11
2025-09-11 12:15Z
CRIT

CVE-2025-40690 — Phpgurukul Online_fire_reporting_system: SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40690

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'. CVSSv3.1 9.8 (CRITICAL) · EPSS 27th percentile

CWECWE 89VNDPhpgurukulTYPVulnerability
9.8
CVSS v3.1
99
Edit Score