Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-18 04:19Z
2025-09-05
2025-09-05 20:15Z
HIGH

CVE-2025-9566 — There's a vulnerability in podman where an attacker may use the kube play command

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9566

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1 CVSSv3.1 8.1 (HIGH) · EPSS 17th percentile

CWECWE 22TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-05
2025-09-05 18:15Z
CRIT

CVE-2025-39726 — Linux Linux_kernel: There is hard evidence that this can lead to DMB token values being used

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39726

In the Linux kernel, the following vulnerability has been resolved: s390/ism: fix concurrency management in ism_cmd() The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM function at any point in time. Unfortunately as of today the s390/ism driver in Linux does not honor that requirement. This patch aims to rectify that. This problem was discovered based on Aliaksei's bug report which states that for certain workloads CVSSv3.1 9.8 (CRITICAL) · EPSS 1th percentile

CWECWE 362TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 18:15Z
HIGH

CVE-2025-39718 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39718

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unfortunately, virtio_vsock_skb_rx_put() uses the length from the packet header as the length argument to skb_put(), potentially resulting in SKB overflow if the host has gone wonky. Validate the length as advertised by t CVSSv3.1 8.4 (HIGH) · EPSS 4th percentile

CWECWE 787TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-09-05
2025-09-05 18:15Z
HIGH

CVE-2025-39704 — Linux Linux_kernel: Otherwise there will be buffer overflow issue when CONFIG_STACKPROTECTOR is enabled.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39704

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in send_ipi_data() Function kvm_io_bus_read() is called in function send_ipi_data(), buffer size of parameter *val should be at least 8 bytes. Since some emulation functions like loongarch_ipi_readl() and kvm_eiointc_read() will write the buffer *val with 8 bytes signed extension regardless parameter len. Otherwise there will be buffer overflow issue when CONFIG_ST CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

CWECWE 674TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-05
2025-09-05 18:15Z
CRIT

CVE-2025-39703 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39703

In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can result in a crash (kernel BUG): [ 45.390915] skbuff: skb_under_panic: text:ffffffff86f32cac len:26 put:14 head:ffff888042418000 data:ffff888042417ff4 tail:0xe end:0x180 dev:bridge_slave_1 [ 45.392559] ------------[ cut here ]------------ [ 45.392912] kernel BUG at net/core/skbuf CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 476TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 18:15Z
CRIT

CVE-2025-39702 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39702

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this. CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 203TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 18:15Z
CRIT

CVE-2025-39682 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39682

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type than what has already been processed we break out of the main processing loop. If the record has already been decrypted (which may be the case for TLS 1.3 where we don't know type until decryption) w CVSSv3.1 9.8 (CRITICAL) · EPSS 8th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-09-05
2025-09-05 18:15Z
CRIT

CVE-2025-39673 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-39673

In the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions in ppp_fill_forward_path ppp_fill_forward_path() has two race conditions: 1. The ppp->channels list can change between list_empty() and list_first_entry(), as ppp_lock() is not held. If the only channel is deleted in ppp_disconnect_channel(), list_first_entry() may access an empty head or a freed entry, and trigger a panic. 2. pch->chan can be NULL. When ppp_unregister_ch CVSSv3.1 9.8 (CRITICAL) · EPSS 1th percentile

CWECWE 362TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 18:15Z
CRIT

CVE-2025-38737 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38737

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined. CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 908TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 18:15Z
CRIT

CVE-2025-38734 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38734

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report a UAF issue: [ 16.446633] BUG: kernel NULL pointer dereference, address: 000000000000003 0 [ 16.447134] #PF: supervisor read access in kernel mod e [ 16.447516] #PF: error_code(0x0000) - not-present pag e [ 16.447878] PGD 0 P4D 0 [ 16.448063] Oops: Oops: 0000 [#1] PREEMPT SMP NOPT I [ 16.448409] CPU: 0 UID: CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 17:15Z
CRIT

CVE-2025-58628 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58628

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous miraculous allows Blind SQL Injection.This issue affects Miraculous: from n/a through < 2.0.9. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-09-05
2025-09-05 17:15Z
HIGH

CVE-2025-58214 — Control: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58214

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Indutri indutri allows PHP Local File Inclusion.This issue affects Indutri: from n/a through < 1.3.0. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-05
2025-09-05 17:15Z
HIGH

CVE-2025-58206 — Thememove Maxcoach: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58206

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through <= 3.2.5. CVSSv3.1 8.1 (HIGH)

CWECWE 98VNDThememoveTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-05
2025-09-05 17:15Z
CRIT

CVE-2025-49401 — Incorrect: Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49401

Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects smart SEO: from n/a through <= 4.0. CVSSv3.1 9.8 (CRITICAL)

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 14:16Z
HIGH

CVE-2025-58881 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58881

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through <= 8.0. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-09-05
2025-09-05 14:15Z
HIGH

CVE-2025-58833 — Site: Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58833

Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This issue affects Invelity MyGLS connect: from n/a through <= 1.1.1. CVSSv3.1 8.8 (HIGH)

CWECWE 352TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-05
2025-09-05 14:15Z
CRIT

CVE-2025-58819 — Upload: Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58819

Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Upload a Web Shell to a Web Server.This issue affects Bulk Featured Image: from n/a through <= 1.2.4. CVSSv3.1 9.1 (CRITICAL)

CWECWE 434TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-05
2025-09-05 03:15Z
HIGH

CVE-2025-9990 — WordPress: The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9990

The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portal_type parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and CVSSv3.1 8.1 (HIGH) · EPSS 52th percentile

CWECWE 98VNDWordpressTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-04
2025-09-04 19:15Z
HIGH

CVE-2025-48581 — Google Android: This could lead to local escalation of privilege with no additional execution privileges needed.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48581

In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 8.4 (HIGH) · EPSS 0th percentile

CWECWE 754VNDGoogleVNDVerifynooverlapinsessionsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-09-04
2025-09-04 16:15Z
CRIT

CVE-2025-38728 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38728

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parse_server_interfaces() (see below): BUG: KASAN: slab-out-of-bounds in parse_server_interfaces+0x14ee/0x1880 [cifs] Read of size 4 at addr ffff8881433dba98 by task mount/9827 CPU: 5 UID: 0 PID: 9827 Comm: mount Tainted: G OE 6.16.0-rc2 CVSSv3.1 9.1 (CRITICAL) · EPSS 4th percentile

CWECWE 125TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-04
2025-09-04 16:15Z
CRIT

CVE-2025-38724 — Linux Linux_kernel: That could later lead to a UAF.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38724

In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF. Fix this by getting a reference early in the case where there is an extant confirmed client. If CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-04
2025-09-04 16:15Z
CRIT

CVE-2025-38708 — Linux Linux_kernel: In handling "superseeded" writes, we forgot a kref_get, resulting in a premature drbd_destroy_device and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38708

In the Linux kernel, the following vulnerability has been resolved: drbd: add missing kref_get in handle_write_conflicts With `two-primaries` enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even if you write to the same sector simultaneously on both nodes, they end up with the identical data once the writes are completed. In handling "superseeded" writes, we forgot a kref_get, resulting in a premature drbd_destroy_device and use after CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-04
2025-09-04 16:15Z
HIGH

CVE-2025-38688 — Linux Linux_kernel: This bug would allow userspace to create a mapping that overlaps with some other

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38688

In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevent ALIGN() overflow When allocating IOVA the candidate range gets aligned to the target alignment. If the range is close to ULONG_MAX then the ALIGN() can wrap resulting in a corrupted iova. Open code the ALIGN() using get_add_overflow() to prevent this. This simplifies the checks as we don't need to check for length earlier either. Consolidate the two copies of this code under a single help CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-04
2025-09-04 13:00Z
HIGH

Demystifying 5G Security: Understanding the Registration Protocol

Bishop Fox Labs·bishopfox.com

Bishop Fox published a comprehensive technical analysis of 5G registration protocol vulnerabilities, identifying critical flaws including SUPI disclosure risks, null/weak encryption negotiation (EEA0/EIA0), replay attack susceptibility, and bidding-down attack vectors. The research demonstrates practical exploitation using Open5Gs test environments and open-source tools like 5GReplay and Sni5Gect, with recommendations for defensive configuration and continuous security testing.

SRFMobileTACTA0001SRFNetworkSRFNetwork ApplianceTACTA0043TYPResearchTYPTechniqueSTGDiscovery
72
Edit Score
2025-09-04
2025-09-04 10:42Z
HIGH

CVE-2025-2417 — Restriction: Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-2417

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass. This issue affects e-Mutabakat: from 2.02.06 before v2.02.06. CVSSv3.1 8.6 (HIGH) · EPSS 23th percentile

CWECWE 307TYPVulnerability
8.6
CVSS v3.1
93
Edit Score