Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-18 02:29Z
2025-09-15
2025-09-15 14:15Z
HIGH

CVE-2022-50241 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-50241

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntf_state entry on the s2s_cp_stateids list after inter-server copy completed. The sc_cp_list that the expired copy state was inserted on was already freed. When COPY completes, the Linux client normally sends LOCKU(lock_state x), FREE_STATEID(lock_state x) and CLOSE(op CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-15
2025-09-15 14:15Z
CRIT

CVE-2022-50235 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-50235

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READDIR Restore the previous limit on the @count argument to prevent a buffer overflow attack. CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-12
2025-09-12 18:15Z
CRIT

CVE-2025-58434 — Flowiseai Flowise: This enables any attacker to generate a reset token for arbitrary users and directly

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58434

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive information including a valid password reset `tempToken` without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO). This vulnerability applies to both the cloud servic CVSSv3.1 9.8 (CRITICAL) · EPSS 99th percentile

CWECWE 306VNDFlowiseaiVNDFlowiseTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-09-12
2025-09-12 16:15Z
CRIT

CVE-2025-55835 — Sueamcms_project Sueamcms: File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55835

File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering. CVSSv3.1 9.8 (CRITICAL) · EPSS 62th percentile

CWECWE 434VNDSueamcms ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-12
2025-09-12 08:15Z
HIGH

CVE-2025-21043 — Samsung Android: Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21043in the wild

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile

CWECWE 787VNDSamsungTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
95
Edit Score
2025-09-12
2025-09-12 08:15Z
HIGH

CVE-2025-21042 — Samsung Android: Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21042in the wild

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. CVSSv3.1 8.8 (HIGH) · EPSS 98th percentile

CWECWE 787VNDSamsungTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
100
Edit Score
2025-09-11
2025-09-11 17:15Z
HIGH

CVE-2025-39790 — Linux Linux_kernel: This works when processing completion for chained transactions, but can lead to nasty results

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39790

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between it and the host's local copy of the ring's read pointer. This works when processing completion for chained transactions, but can lead to nasty results if the device sends an event for a si CVSSv3.1 8.4 (HIGH) · EPSS 4th percentile

CWECWE 415TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-09-11
2025-09-11 17:15Z
HIGH

CVE-2025-39761 — Linux Linux_kernel: This could lead to out-of-bounds access in peer->rx_tid[].

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39761

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12k_dp_rx_peer_frag_setup(). This could lead to out-of-bounds access in peer->rx_tid[]. Hence, add a decrement operation for TID, before peer cleanup to ensures proper cleanup and prevents out-of-bounds access issues when the RX peer frag setup fails. Fou CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 125TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-11
2025-09-11 17:15Z
CRIT

CVE-2025-39758 — Linux Linux_kernel: With the recent slab allocator changes being slowly introduced into next (that disallow sendpage

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39758

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages Ever since commit c2ff29e99a76 ("siw: Inline do_tcp_sendpages()"), we have been doing this: static int siw_tcp_sendpages(struct socket *s, struct page **page, int offset, size_t size) [...] /* Calculate the number of bytes we need to push, for this page * specifically */ size_t bytes = min_t(size CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-11
2025-09-11 17:15Z
HIGH

CVE-2025-39750 — Linux Linux_kernel: Proceed to ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, which might leads to freeing unallocated TID

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39750

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Correct tid cleanup when tid setup fails Currently, if any error occurs during ath12k_dp_rx_peer_tid_setup(), the tid value is already incremented, even though the corresponding TID is not actually allocated. Proceed to ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, which might leads to freeing unallocated TID and cause potential crash or out-of-bounds access. Hence, fix by cor CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 125TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-11
2025-09-11 15:48Z
HIGH

kernel-exploits — My proof-of-concept exploits for the Linux kernel

GitHub · kernel exploits·github.comGITHUB POCCVE-2016-2384CVE-2016-9793CVE-2017-1000112CVE-2017-18344CVE-2017-6074CVE-2017-7308CVE-2025-38494CVE-2025-38495

xairy's kernel-exploits repository is a curated collection of proof-of-concept Linux kernel exploits spanning 2016–2025, covering double-free vulnerabilities, signedness issues, memory corruption, and integer underflow flaws across USB, socket, and HID subsystems. The collection includes both privilege escalation and information-leak primitives, with the most recent additions (CVE-2025-38494/38495) targeting HID core integer underflow.

SRFOsTACTA0004TACTA0005OSLinuxTYPWriteupTYPExploitSTGDefense EvasionSTGPrivesc
78
Edit Score
2025-09-11
2025-09-11 12:15Z
CRIT

CVE-2025-40690 — Phpgurukul Online_fire_reporting_system: SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40690

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'. CVSSv3.1 9.8 (CRITICAL) · EPSS 27th percentile

CWECWE 89VNDPhpgurukulTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-11
2025-09-11 08:15Z
CRIT

CVE-2025-8570 — BeyondCart: The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8570

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determine_current_user filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume any user’s identity. CVSSv3.1 9.8 (CRITICAL)

CWECWE 798VNDBeyondcartTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-11
2025-09-11 08:15Z
HIGH

CVE-2025-8425 — Translate: The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8425

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_import_strings() function in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enabl CVSSv3.1 8.8 (HIGH) · EPSS 21th percentile

CWECWE 862VNDTranslateTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-11
2025-09-11 00:00Z
HIGH

EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks

Trend Micro Research·trendmicro.comin the wild

Trend Micro disclosed EvilAI, an active malware campaign distributing trojans disguised as legitimate productivity and AI tools with valid digital signatures across 114+ countries. The malware uses AI-generated obfuscated JavaScript payloads delivered via Node.js, establishes persistence through scheduled tasks, enumerates security products, steals browser credentials, and maintains encrypted C&C communication. Infections have impacted manufacturing, government, and healthcare sectors with 114 confirmed cases in the first week of tracking.

SRFApplicationSRFOsTACTA0005TACTA0001TACTA0002TACTA0007TACTA0003TACTA0008
72
Edit Score
2025-09-10
2025-09-10 19:15Z
HIGH

CVE-2025-10201 — Google Chrome: Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10201

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High) CVSSv3.1 8.8 (HIGH) · EPSS 18th percentile

CWECWE 284CWECWE 346VNDGoogleVNDInappropriateTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-10
2025-09-10 19:15Z
HIGH

CVE-2025-10200 — Google Chrome: Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10200

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) CVSSv3.1 8.8 (HIGH) · EPSS 46th percentile

CWECWE 416VNDGoogleTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-10
2025-09-10 13:15Z
HIGH

CVE-2025-7718 — Resideo: The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-7718

The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to CVSSv3.1 8.8 (HIGH) · EPSS 25th percentile

CWECWE 639VNDResideoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-10
2025-09-10 13:15Z
CRIT

CVE-2025-10220 — Axxonsoft Axxon_one: Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10220

Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as Google.Protobuf, DynamicData, System.Runtime.CompilerServices.Unsafe, and others. CVSSv3.1 9.8 (CRITICAL) · EPSS 53th percentile

CWECWE 1104VNDAxxonsoftTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-10
2025-09-10 07:15Z
CRIT

CVE-2025-9943 — SQL: An SQL injection vulnerability has been identified in the "ID" attribute of the SAML

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9943

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database, if the database connection is configured to use the ODBC plugin. The vulnerability arises from insufficient escaping of single CVSSv3.1 9.1 (CRITICAL) · EPSS 34th percentile

CWECWE 89TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-09
2025-09-09 21:15Z
CRIT

CVE-2025-58462 — Opexustech Foiaxpress_public_access_link: OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58462

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 89VNDOpexustechVNDOpexusTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-09
2025-09-09 21:15Z
MED

CVE-2025-34176 — Pfsense Pfsense: In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34176

In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related strings/characters. This value is directly used in a file existence check operation. While the contents of the file cannot be read, the server reveals whether the file exists, which enables an attacker to enumerate files on the target. The attacker must be authenticated with at least "WebCfg - Services: suricata package" permissions. CVSSv3.1 4.3 (MEDIUM) · EPSS 96th percentile

CWECWE 22VNDPfsenseTYPVulnerability
4.3
CVSS v3.1
76
Edit Score
2025-09-09
2025-09-09 20:15Z
MED

CVE-2025-34175 — Pfsense Pfsense: This can result in reflected cross-site scripting if the victim is authenticated.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34175

In pfSense CE /usr/local/www/suricata/suricata_filecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated. CVSSv3.1 6.1 (MEDIUM) · EPSS 96th percentile

CWECWE 79VNDPfsenseTYPVulnerability
6.1
CVSS v3.1
85
Edit Score
2025-09-09
2025-09-09 17:16Z
CRIT

CVE-2025-58997 — Site: Cross-Site Request Forgery (CSRF) vulnerability in Frenify Mow mow allows Code Injection.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58997

Cross-Site Request Forgery (CSRF) vulnerability in Frenify Mow mow allows Code Injection.This issue affects Mow: from n/a through <= 4.10. CVSSv3.1 9.6 (CRITICAL)

CWECWE 352TYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2025-09-09
2025-09-09 17:16Z
HIGH

CVE-2025-58215 — Control: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58215

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Ziston ziston allows PHP Local File Inclusion.This issue affects Ziston: from n/a through < 1.4.5. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score