Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-18 19:23Z
2025-07-15
2025-07-15 04:15Z
CRIT

CVE-2025-5394 — Alone: The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-5394

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. This makes it possible for unauthenticated attackers to upload zip files containing webshells disguised as plugins from remote locations to achieve remote code execution. CVE-2025-54019 is likely a duplicate of this. CVSSv3.1 9.8 (CRITICAL)

CWECWE 862VNDAloneTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-15
2025-07-15 04:15Z
CRIT

CVE-2025-5393 — Alone: The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-5393

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the alone_import_pack_restore_data() function in all versions up to, and including, 7.8.5. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This was partially patched CVSSv3.1 9.1 (CRITICAL)

CWECWE 73VNDAloneTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-07-13
2025-07-13 14:10Z
HIGH

collateral-damage — Kernel exploit for Xbox SystemOS using CVE-2024-30088

GitHub · kernel exploits·github.comGITHUB POCCVE-2024-30088

Collateral Damage is a public kernel exploit for Xbox One and Xbox Series consoles targeting CVE-2024-30088, enabling arbitrary code execution with SYSTEM privileges. The exploit chains a CPU side-channel vulnerability with a race condition, delivered via the Game Script UWP application, and includes staged payloads for network-based code loading. The vulnerability affects kernel versions 25398.4478, 25398.4908, and 25398.4909.

TACTA0004SRFHardwareVNDMicrosoftTYPWriteupTYPExploitSTGPrivescSTGExecutionTECT1559
76
Edit Score
2025-07-10
2025-07-10 09:15Z
HIGH

CVE-2025-38343 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38343

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities such as CVE-2020-26145. CVSSv3.1 8.3 (HIGH) · EPSS 4th percentile

TYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2025-07-10
2025-07-10 09:15Z
CRIT

CVE-2025-38325 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: add free_transport ops

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38325

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add free_transport ops in ksmbd connection free_transport function for tcp connection can be called from smbdirect. It will cause kernel oops. This patch add free_transport ops in ksmbd connection, and add each free_transports for tcp and smbdirect. CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-10
2025-07-10 08:15Z
HIGH

CVE-2025-38293 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38293

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath11k_core_halt() only reinitializes the "arvifs" list head. This will cause the list node immediately following the list head to become an invalid list node. Because the prev of that node still points to the list head "arvifs", but the next of the list head "arvifs" no longer points to that list node. When a WLAN rec CVSSv3.1 8.8 (HIGH) · EPSS 7th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-10
2025-07-10 08:15Z
HIGH

CVE-2025-38292 — Linux Linux_kernel: This might lead use-after-free error.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38292

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation accessed again which is wrong since the memory is already freed. This might lead use-after-free error. Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continu CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 125TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-07-10
2025-07-10 08:15Z
HIGH

CVE-2025-38291 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38291

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, we encounter the following kernel call trace when a firmware crash occurs. This happens because the host sends WMI commands to the firmware while it is in recovery, causing the commands to fail and resulting in the kernel call trace. Set the ATH12K_FLAG_CRASH_FLUSH and ATH12K_FLAG_RECOVERY flags when the host driver rec CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

CWECWE 670TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-10
2025-07-10 08:15Z
HIGH

CVE-2025-38290 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38290

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath12k_core_halt() only reinitializes the "arvifs" list head. This will cause the list node immediately following the list head to become an invalid list node. Because the prev of that node still points to the list head "arvifs", but the next of the list head "arvifs" no longer points to that list node. When a WLAN rec CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

CWECWE 362CWECWE 672TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-10
2025-07-10 08:15Z
HIGH

CVE-2025-38283 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38283

In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The live migration recovery operation on the destination side will access a null address value, which will cause access errors. Therefore, live migration of VMs without added VF device CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-09
2025-07-09 13:00Z
HIGH

You’re Pen Testing AI Wrong: Why Prompt Engineering Isn’t Enough

Bishop Fox Labs·bishopfox.com

Bishop Fox publishes guidance on LLM penetration testing methodology, arguing that static prompt filtering and token-based defenses are insufficient. The research emphasizes scenario-driven, conversational testing approaches that exploit context manipulation and intent-shifting, and recommends defense-in-depth architecture including sandboxing, intermediary validation, and human-in-the-loop controls for sensitive operations.

TACTA0001SRFAiTYPResearchTYPTechniqueSTGDiscoveryTECT1589EXPPrompt Injection
68
Edit Score
2025-07-09
2025-07-09 11:15Z
CRIT

CVE-2025-38264 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38264

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of any list, otherwise a malicious R2T PDU might inject a loop in request list processing. CVSSv3.1 9.8 (CRITICAL) · EPSS 3th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-09
2025-07-09 11:15Z
HIGH

CVE-2025-38253 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38253

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash in wacom_aes_battery_handler() Commit fd2a9b29dc9c ("HID: wacom: Remove AES power_supply after extended inactivity") introduced wacom_aes_battery_handler() which is scheduled as a delayed work (aes_battery_work). In wacom_remove(), aes_battery_work is not canceled. Consequently, if the device is removed while aes_battery_work is still pending, then hard crashes or "Oops: general prote CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-09
2025-07-09 11:15Z
CRIT

CVE-2025-38246 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: bnxt: properly flush XDP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38246

In the Linux kernel, the following vulnerability has been resolved: bnxt: properly flush XDP redirect lists We encountered following crash when testing a XDP_REDIRECT feature in production: [56251.579676] list_add corruption. next->prev should be prev (ffff93120dd40f30), but was ffffb301ef3a6740. (next=ffff93120dd 40f30). [56251.601413] ------------[ cut here ]------------ [56251.611357] kernel BUG at lib/list_debug.c:29! [56251.621082] Oops: invalid opcode: 0000 [#1] PREE CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-09
2025-07-09 11:15Z
HIGH

CVE-2025-38238 — Linux Linux_kernel: On send completion, this causes an attempt to free the same frame twice that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38238

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out When both the RHBA and RPA FDMI requests time out, fnic reuses a frame to send ABTS for each of them. On send completion, this causes an attempt to free the same frame twice that leads to a crash. Fix crash by allocating separate frames for RHBA and RPA, and modify ABTS logic accordingly. Tested by checking MDS for FDMI information. Tested CVSSv3.1 8.8 (HIGH) · EPSS 3th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-08
2025-07-08 19:15Z
HIGH

CVE-2025-48384 — Git-scm Git: When initializing a submodule, if the submodule path contains a trailing CR, the altered

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48384in the wild

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path CVSSv3.1 8.0 (HIGH) · EPSS 90th percentile

CWECWE 59CWECWE 436VNDAppleVNDGit ScmTYPVulnerabilitySTAitw exploited
8.0
CVSS v3.1
91
Edit Score
2025-07-08
2025-07-08 17:15Z
MED

CVE-2025-49706 — Microsoft Sharepoint_enterprise_server: Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49706in the wild

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. CVSSv3.1 6.5 (MEDIUM) · EPSS 100th percentile

CWECWE 287VNDMicrosoftTYPVulnerabilitySTAitw exploited
6.5
CVSS v3.1
100
Edit Score
2025-07-08
2025-07-08 17:15Z
HIGH

CVE-2025-49697 — Microsoft 365_apps: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49697

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVSSv3.1 8.4 (HIGH) · EPSS 70th percentile

CWECWE 122VNDMicrosoftVNDHeapTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-07-08
2025-07-08 17:15Z
HIGH

CVE-2025-49696 — Microsoft 365_apps: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49696

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVSSv3.1 8.4 (HIGH) · EPSS 74th percentile

CWECWE 125CWECWE 122VNDMicrosoftTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-07-08
2025-07-08 17:15Z
HIGH

CVE-2025-49695 — Microsoft 365_apps: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49695

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVSSv3.1 8.4 (HIGH) · EPSS 74th percentile

CWECWE 416VNDMicrosoftTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-07-07
2025-07-07 15:15Z
HIGH

CVE-2025-5987 — Libssh Libssh: If an attacker manages to exhaust the heap space, this error is not detected

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-5987

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidential CVSSv3.1 8.1 (HIGH) · EPSS 70th percentile

CWECWE 393VNDLibsshTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-07-06
2025-07-06 18:58Z
CRIT

CVE-2025-32023 — PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"

GitHub · recent CVE PoCs·github.comGITHUB POCCVE-2025-32023

CVE-2025-32023 is a critical integer overflow in Redis HyperLogLog sparse encoding iteration that allows out-of-bounds heap/stack writes. The vulnerability affects Redis versions 2.8 through 8.0.2 and has been patched in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. A public PoC and full RCE exploit chain leveraging heap corruption and fake module object injection is available.

SRFApplicationTACTA0002VNDRedisTYPWriteupTYPExploitTYPVulnerabilitySTGExecutionSTGImpact
92
Edit Score
2025-07-04
2025-07-04 14:15Z
HIGH

CVE-2025-38216 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38216

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 ("iommu/vt-d: Add support for static identity domain") changed the context entry setup during domain attachment from a set-and-check policy to a clear-and-reset approach. This inadvertently introduced a regression affecting PCI aliased devices behind PCIe-to-PCI bridges. Specifically, keyboard and touchpad stopped working CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-04
2025-07-04 14:15Z
CRIT

CVE-2025-38211 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38211

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac31e15 ("iw_cm: free cm_id resources on the last deref") simplified cm_id resource management by freeing cm_id once all references to the cm_id were removed. The references are removed either upon completion of iw_cm event handlers or when the application destroys the cm_id. This commit introduced the use-after-free condi CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-04
2025-07-04 14:15Z
CRIT

CVE-2025-38209 — Linux Linux_kernel: Later on, the timeout handler accesses the admin_tag_set field and causes the BUG KASAN

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38209

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: remove tag set when second admin queue config fails Commit 104d0e2f6222 ("nvme-fabrics: reset admin connection for secure concatenation") modified nvme_tcp_setup_ctrl() to call nvme_tcp_configure_admin_queue() twice. The first call prepares for DH-CHAP negotitation, and the second call is required for secure concatenation. However, this change triggered BUG KASAN slab-use-after- free in blk_mq_que CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score