Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-20 07:40Z
2025-09-05
2025-09-05 18:15Z
CRIT

CVE-2025-38734 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38734

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report a UAF issue: [ 16.446633] BUG: kernel NULL pointer dereference, address: 000000000000003 0 [ 16.447134] #PF: supervisor read access in kernel mod e [ 16.447516] #PF: error_code(0x0000) - not-present pag e [ 16.447878] PGD 0 P4D 0 [ 16.448063] Oops: Oops: 0000 [#1] PREEMPT SMP NOPT I [ 16.448409] CPU: 0 UID: CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 17:15Z
CRIT

CVE-2025-58628 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58628

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous miraculous allows Blind SQL Injection.This issue affects Miraculous: from n/a through < 2.0.9. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-09-05
2025-09-05 17:15Z
HIGH

CVE-2025-58214 — Control: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58214

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Indutri indutri allows PHP Local File Inclusion.This issue affects Indutri: from n/a through < 1.3.0. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-05
2025-09-05 17:15Z
HIGH

CVE-2025-58206 — Thememove Maxcoach: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58206

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through <= 3.2.5. CVSSv3.1 8.1 (HIGH)

CWECWE 98VNDThememoveTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-05
2025-09-05 17:15Z
CRIT

CVE-2025-49401 — Incorrect: Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49401

Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects smart SEO: from n/a through <= 4.0. CVSSv3.1 9.8 (CRITICAL)

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-05
2025-09-05 14:16Z
HIGH

CVE-2025-58881 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58881

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through <= 8.0. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-09-05
2025-09-05 14:15Z
HIGH

CVE-2025-58833 — Site: Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58833

Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This issue affects Invelity MyGLS connect: from n/a through <= 1.1.1. CVSSv3.1 8.8 (HIGH)

CWECWE 352TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-09-05
2025-09-05 14:15Z
CRIT

CVE-2025-58819 — Upload: Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58819

Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Upload a Web Shell to a Web Server.This issue affects Bulk Featured Image: from n/a through <= 1.2.4. CVSSv3.1 9.1 (CRITICAL)

CWECWE 434TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-05
2025-09-05 03:15Z
HIGH

CVE-2025-9990 — WordPress: The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9990

The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portal_type parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and CVSSv3.1 8.1 (HIGH) · EPSS 52th percentile

CWECWE 98VNDWordpressTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-09-04
2025-09-04 23:15Z
CRIT

CVE-2025-55241 — Microsoft Entra_id: Azure Entra ID Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55241

Azure Entra ID Elevation of Privilege Vulnerability CVSSv3.1 10.0 (CRITICAL) · EPSS 76th percentile

CWECWE 287VNDMicrosoftVNDAzureTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-09-04
2025-09-04 23:15Z
CRIT

CVE-2025-55190 — Argoproj Argo_cd: Any token with project get permissions is also vulnerable, including global permissions such as

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55190

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials (usernames, passwords) through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability does not CVSSv3.1 9.9 (CRITICAL) · EPSS 93th percentile

CWECWE 200VNDArgoVNDArgoprojTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2025-09-04
2025-09-04 23:15Z
CRIT

CVE-2025-54914 — Microsoft Azure_networking: Azure Networking Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54914

Azure Networking Elevation of Privilege Vulnerability CVSSv3.1 10.0 (CRITICAL) · EPSS 84th percentile

CWECWE 284VNDMicrosoftVNDAzureTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-09-04
2025-09-04 19:15Z
HIGH

CVE-2025-48581 — Google Android: This could lead to local escalation of privilege with no additional execution privileges needed.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-48581

In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 8.4 (HIGH) · EPSS 0th percentile

CWECWE 754VNDGoogleVNDVerifynooverlapinsessionsTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-09-04
2025-09-04 16:15Z
CRIT

CVE-2025-38728 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38728

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parse_server_interfaces() (see below): BUG: KASAN: slab-out-of-bounds in parse_server_interfaces+0x14ee/0x1880 [cifs] Read of size 4 at addr ffff8881433dba98 by task mount/9827 CPU: 5 UID: 0 PID: 9827 Comm: mount Tainted: G OE 6.16.0-rc2 CVSSv3.1 9.1 (CRITICAL) · EPSS 4th percentile

CWECWE 125TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-09-04
2025-09-04 16:15Z
CRIT

CVE-2025-38724 — Linux Linux_kernel: That could later lead to a UAF.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38724

In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF. Fix this by getting a reference early in the case where there is an extant confirmed client. If CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-04
2025-09-04 16:15Z
CRIT

CVE-2025-38708 — Linux Linux_kernel: In handling "superseeded" writes, we forgot a kref_get, resulting in a premature drbd_destroy_device and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38708

In the Linux kernel, the following vulnerability has been resolved: drbd: add missing kref_get in handle_write_conflicts With `two-primaries` enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even if you write to the same sector simultaneously on both nodes, they end up with the identical data once the writes are completed. In handling "superseeded" writes, we forgot a kref_get, resulting in a premature drbd_destroy_device and use after CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-09-04
2025-09-04 16:15Z
HIGH

CVE-2025-38688 — Linux Linux_kernel: This bug would allow userspace to create a mapping that overlaps with some other

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38688

In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevent ALIGN() overflow When allocating IOVA the candidate range gets aligned to the target alignment. If the range is close to ULONG_MAX then the ALIGN() can wrap resulting in a corrupted iova. Open code the ALIGN() using get_add_overflow() to prevent this. This simplifies the checks as we don't need to check for length earlier either. Consolidate the two copies of this code under a single help CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-09-04
2025-09-04 16:15Z
HIGH

CVE-2025-23256 — NVIDIA: BlueField contains a vulnerability in the management interface, where an attacker with local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-23256

NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering. CVSSv3.1 8.7 (HIGH) · EPSS 4th percentile

CWECWE 863VNDNvidiaTYPVulnerability
8.7
CVSS v3.1
94
Edit Score
2025-09-04
2025-09-04 13:00Z
HIGH

Demystifying 5G Security: Understanding the Registration Protocol

Bishop Fox Labs·bishopfox.com

Bishop Fox published a comprehensive technical analysis of 5G registration protocol vulnerabilities, identifying critical flaws including SUPI disclosure risks, null/weak encryption negotiation (EEA0/EIA0), replay attack susceptibility, and bidding-down attack vectors. The research demonstrates practical exploitation using Open5Gs test environments and open-source tools like 5GReplay and Sni5Gect, with recommendations for defensive configuration and continuous security testing.

SRFMobileTACTA0001SRFNetworkSRFNetwork ApplianceTACTA0043TYPResearchTYPTechniqueSTGDiscovery
72
Edit Score
2025-09-04
2025-09-04 10:42Z
HIGH

CVE-2025-2417 — Restriction: Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-2417

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass. This issue affects e-Mutabakat: from 2.02.06 before v2.02.06. CVSSv3.1 8.6 (HIGH) · EPSS 23th percentile

CWECWE 307TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-04
2025-09-04 10:42Z
HIGH

CVE-2025-2411 — Restriction: Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypass.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-2411

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypass. This issue affects TaskPano: from s1.06.04 before v1.06.06. CVSSv3.1 8.6 (HIGH) · EPSS 23th percentile

CWECWE 307TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-09-04
2025-09-04 00:00Z
HIGH

An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps

Trend Micro Research·trendmicro.com

Trend Micro analyzed the AMOS (Atomic macOS Stealer) campaign targeting macOS users via trojanized 'cracked' software downloads and Terminal command injection. The malware steals credentials, browser data, cryptocurrency wallets, Telegram chats, VPN profiles, and keychain items, with attackers using rotating domains to evade detection. macOS Sequoia's Gatekeeper blocks the .dmg delivery method, but the Terminal-based installation vector remains effective.

SRFApplicationSRFOsTACTA0005TACTA0001TACTA0002TACTA0006TACTA0003TACTA0009
72
Edit Score
2025-09-04
2025-09-04 00:00Z
MED

Investigating a Mysteriously Malformed Authenticode Signature

Elastic Security Labs·elastic.co

Elastic Security Labs reverse-engineered an undocumented Windows Authenticode signature validation failure triggered by heuristic marker detection in imagehlp.dll. The research reveals Microsoft's 2012-era hardcoded list of archive/installer magic bytes (ZIP, RAR, ALZip, etc.) scanned within PE signature blocks to detect potential malicious data embedding; a false positive collision with the EGGA marker caused validation failures despite no actual compromise. The workaround involves re-signing with the /rmc (relaxed marker check) flag, but the core finding exposes a decade-old detection mechanism with zero public documentation.

SRFOsTACTA0005OSWindowsSWSigntoolVNDMicrosoftTYPResearchTECT1027
68
Edit Score
2025-09-03
2025-09-03 20:15Z
CRIT

CVE-2025-53690 — Sitecore Experience_commerce: Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-53690in the wild

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0. CVSSv3.1 9.0 (CRITICAL) · EPSS 99th percentile

CWECWE 502VNDSitecoreTYPVulnerabilitySTAitw exploited
9.0
CVSS v3.1
100
Edit Score
2025-09-03
2025-09-03 17:15Z
HIGH

CVE-2025-9866 — Google Chrome: Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9866

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) CVSSv3.1 8.8 (HIGH) · EPSS 30th percentile

CWECWE 693VNDGoogleVNDInappropriateTYPVulnerability
8.8
CVSS v3.1
94
Edit Score