Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-20 04:59Z
2025-09-11
2025-09-11 14:15Z
CRIT

CVE-2025-27466 — Xen Xen: A NULL pointer dereference in the updating of the reference TSC area.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-27466

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference TSC area. This is CVE-2025-27466. 2. A NULL pointer dereference by assuming the SIM page is mapped when a synthetic timer message has to be delivered. This is CVE CVSSv3.1 9.8 (CRITICAL) · EPSS 39th percentile

CWECWE 395VNDXenVNDCnaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-11
2025-09-11 12:15Z
CRIT

CVE-2025-40690 — Phpgurukul Online_fire_reporting_system: SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-40690

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'. CVSSv3.1 9.8 (CRITICAL) · EPSS 27th percentile

CWECWE 89VNDPhpgurukulTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-11
2025-09-11 09:15Z
CRIT

CVE-2025-58321 — Deltaww Dialink: Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58321

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability. CVSSv3.1 10.0 (CRITICAL) · EPSS 69th percentile

CWECWE 22VNDDeltaVNDDeltawwTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-09-11
2025-09-11 08:15Z
CRIT

CVE-2025-8570 — BeyondCart: The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8570

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determine_current_user filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume any user’s identity. CVSSv3.1 9.8 (CRITICAL)

CWECWE 798VNDBeyondcartTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-11
2025-09-11 08:15Z
HIGH

CVE-2025-8425 — Translate: The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8425

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_import_strings() function in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enabl CVSSv3.1 8.8 (HIGH) · EPSS 21th percentile

CWECWE 862VNDTranslateTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-11
2025-09-11 00:00Z
HIGH

EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks

Trend Micro Research·trendmicro.comin the wild

Trend Micro disclosed EvilAI, an active malware campaign distributing trojans disguised as legitimate productivity and AI tools with valid digital signatures across 114+ countries. The malware uses AI-generated obfuscated JavaScript payloads delivered via Node.js, establishes persistence through scheduled tasks, enumerates security products, steals browser credentials, and maintains encrypted C&C communication. Infections have impacted manufacturing, government, and healthcare sectors with 114 confirmed cases in the first week of tracking.

SRFApplicationSRFOsTACTA0005TACTA0001TACTA0002TACTA0007TACTA0003TACTA0008
72
Edit Score
2025-09-10
2025-09-10 19:15Z
HIGH

CVE-2025-10201 — Google Chrome: Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10201

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High) CVSSv3.1 8.8 (HIGH) · EPSS 18th percentile

CWECWE 284CWECWE 346VNDGoogleVNDInappropriateTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-09-10
2025-09-10 19:15Z
HIGH

CVE-2025-10200 — Google Chrome: Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10200

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) CVSSv3.1 8.8 (HIGH) · EPSS 46th percentile

CWECWE 416VNDGoogleTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-10
2025-09-10 13:15Z
HIGH

CVE-2025-7718 — Resideo: The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-7718

The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to CVSSv3.1 8.8 (HIGH) · EPSS 25th percentile

CWECWE 639VNDResideoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-10
2025-09-10 13:15Z
CRIT

CVE-2025-10220 — Axxonsoft Axxon_one: Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10220

Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as Google.Protobuf, DynamicData, System.Runtime.CompilerServices.Unsafe, and others. CVSSv3.1 9.8 (CRITICAL) · EPSS 53th percentile

CWECWE 1104VNDAxxonsoftTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-10
2025-09-10 07:15Z
CRIT

CVE-2025-9943 — SQL: An SQL injection vulnerability has been identified in the "ID" attribute of the SAML

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9943

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database, if the database connection is configured to use the ODBC plugin. The vulnerability arises from insufficient escaping of single CVSSv3.1 9.1 (CRITICAL) · EPSS 34th percentile

CWECWE 89TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-09
2025-09-09 23:15Z
HIGH

CVE-2025-58750 — Rathena Rathena: Versions prior to commit 0cc348b are missing a bound check in `chclif_parse_moveCharSlot` that can

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58750

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in `chclif_parse_moveCharSlot` that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b. CVSSv3.1 8.2 (HIGH) · EPSS 21th percentile

CWECWE 125CWECWE 787CWECWE 119VNDRathenaTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-09-09
2025-09-09 23:15Z
CRIT

CVE-2025-58448 — Rathena Rathena: Versions prior to commit 0d89ae0 have a SQL Injection in the PartyBooking component via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58448

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0d89ae0 have a SQL Injection in the PartyBooking component via `WorldName` parameter. Commit 0d89ae0 fixes the issue. CVSSv3.1 9.1 (CRITICAL) · EPSS 28th percentile

CWECWE 89VNDRathenaTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-09
2025-09-09 23:15Z
CRIT

CVE-2025-58447 — Rathena Rathena: Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58447

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted `CA_SSO_LOGIN_REQ` with an oversized token length. This leads to immediate denial of service (crash) and it is possible to achieve remote code execution via heap corruption. Commit 2f5248b fixes the issue. CVSSv3.1 9.8 (CRITICAL) · EPSS 58th percentile

CWECWE 787CWECWE 122VNDRathenaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-09
2025-09-09 21:15Z
HIGH

CVE-2025-58763 — Tautulli Tautulli: A command injection vulnerability in Tautulli v2.15.3 and prior allows attackers with administrative privileges

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58763

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. A command injection vulnerability in Tautulli v2.15.3 and prior allows attackers with administrative privileges to obtain remote code execution on the application server. This vulnerability requires the application to have been cloned from GitHub and installed manually. When Tautulli is cloned directly from GitHub and installed manually, the application manages updates and versioning through calls CVSSv3.1 8.0 (HIGH) · EPSS 76th percentile

CWECWE 78VNDTautulliTYPVulnerability
8.0
CVSS v3.1
91
Edit Score
2025-09-09
2025-09-09 21:15Z
CRIT

CVE-2025-58462 — Opexustech Foiaxpress_public_access_link: OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58462

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 89VNDOpexustechVNDOpexusTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-09
2025-09-09 21:15Z
MED

CVE-2025-34176 — Pfsense Pfsense: In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34176

In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related strings/characters. This value is directly used in a file existence check operation. While the contents of the file cannot be read, the server reveals whether the file exists, which enables an attacker to enumerate files on the target. The attacker must be authenticated with at least "WebCfg - Services: suricata package" permissions. CVSSv3.1 4.3 (MEDIUM) · EPSS 96th percentile

CWECWE 22VNDPfsenseTYPVulnerability
4.3
CVSS v3.1
76
Edit Score
2025-09-09
2025-09-09 20:15Z
CRIT

CVE-2025-58762 — Tautulli Tautulli: This leads to remote code execution when combined with the `Script` notification agent.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58762

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. In Tautulli v2.15.3 and earlier, an attacker with administrative access can use the `pms_image_proxy` endpoint to write arbitrary python scripts into the application filesystem. This leads to remote code execution when combined with the `Script` notification agent. If an attacker with administrative access changes the URL of the PMS to a server they control, they can then abuse the `pms_image_proxy CVSSv3.1 9.1 (CRITICAL) · EPSS 56th percentile

CWECWE 73VNDTautulliTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-09
2025-09-09 20:15Z
HIGH

CVE-2025-58761 — Tautulli Tautulli: The `real_pms_image_proxy` endpoint in Tautulli v2.15.3 and prior is vulnerable to path traversal, allowing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58761

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `real_pms_image_proxy` endpoint in Tautulli v2.15.3 and prior is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. The `real_pms_image_proxy` is used to fetch an image directly from the backing Plex Media Server. The image to be fetched is specified through an `img` URL parameter, which can either be a URL or a fil CVSSv3.1 8.6 (HIGH) · EPSS 52th percentile

CWECWE 27VNDTautulliTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-09
2025-09-09 20:15Z
HIGH

CVE-2025-58760 — Tautulli Tautulli: The `/image` API endpoint in Tautulli v2.15.3 and earlier is vulnerable to path traversal

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58760

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `/image` API endpoint in Tautulli v2.15.3 and earlier is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. In Tautulli, the `/image` API endpoint is used to serve static images from the application's data directory to users. This endpoint can be accessed without authentication, and its intended purpose is for serve CVSSv3.1 8.6 (HIGH) · EPSS 50th percentile

CWECWE 23VNDTautulliTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-09
2025-09-09 20:15Z
HIGH

CVE-2025-58180 — Octoprint Octoprint: versions up until and including 1.11.2 contain a vulnerability that allows an authenticated

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58180

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an authenticated attacker to upload a file under a specially crafted filename that will allow arbitrary command execution if said filename becomes included in a command defined in a system event handler and said event gets triggered. If no event handlers executing system commands with uploaded filenames as parameters hav CVSSv3.1 8.8 (HIGH) · EPSS 98th percentile

CWECWE 78VNDOctoprintTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2025-09-09
2025-09-09 20:15Z
MED

CVE-2025-34175 — Pfsense Pfsense: This can result in reflected cross-site scripting if the victim is authenticated.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-34175

In pfSense CE /usr/local/www/suricata/suricata_filecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated. CVSSv3.1 6.1 (MEDIUM) · EPSS 96th percentile

CWECWE 79VNDPfsenseTYPVulnerability
6.1
CVSS v3.1
85
Edit Score
2025-09-09
2025-09-09 19:15Z
CRIT

CVE-2025-55730 — XWiki: Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55730

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the confluence paste code macro allows remote code execution for any user who can edit any page. The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 has a fix for the issue. CVSSv3.1 10.0 (CRITICAL) · EPSS 53th percentile

CWECWE 116VNDXwikiTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-09-09
2025-09-09 19:15Z
CRIT

CVE-2025-55729 — XWiki: Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55729

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type in the ConfluenceLayoutSection macro allows remote code execution for any user who can edit any page The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 has a fix for the issue. CVSSv3.1 10.0 (CRITICAL) · EPSS 53th percentile

CWECWE 116VNDXwikiTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-09-09
2025-09-09 19:15Z
CRIT

CVE-2025-55728 — Xwiki Pro_macros: Starting in version 1.0 and prior to version 1.26.5, missing escaping of the classes

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55728

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the classes parameter in the panel macro allows remote code execution for any user who can edit any page The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 contains a patch for the issue. CVSSv3.1 10.0 (CRITICAL) · EPSS 56th percentile

CWECWE 94CWECWE 95VNDXwikiTYPVulnerability
10.0
CVSS v3.1
100
Edit Score