Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-20 20:47Z
2025-08-06
2025-08-06 16:15Z
HIGH

CVE-2025-53786 — Microsoft Exchange_server: On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-53786

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security implications tied to the guidance and configuration steps outlined in the April announcement. Microsoft is issuing CVE-2025-53786 to document a vulnerability that CVSSv3.1 8.0 (HIGH) · EPSS 69th percentile

CWECWE 287VNDMicrosoftVNDAprilTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2025-08-06
2025-08-06 13:00Z
INFO

Next-Level Fingerprinting: Tools, Logic, and Tactics

Bishop Fox Labs·bishopfox.com

Bishop Fox published research on improving fingerprinting capabilities for asset identification and vulnerability discovery. The work combines signature normalization across multiple tools (Nmap, Recog, Wappalyzer, Nuclei), AI-assisted signature generation, and performance optimizations tested against 180GB/day of internet banner data to create a more cohesive fingerprinting framework.

SRFApplicationSRFNetworkSRFWebTACTA0043TYPResearchTYPToolSTGDiscoverySTGRecon
68
Edit Score
2025-08-06
2025-08-06 03:15Z
HIGH

CVE-2025-8420 — WordPress: Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8420

Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as a function name. This makes it possible for unauthenticated attackers to execute code on the server, however, parameters can not be passed to the functions called CVSSv3.1 8.1 (HIGH)

CWECWE 95VNDWordpressTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-08-05
2025-08-05 20:15Z
INFO

CVE-2013-10068 — Foxit: Reader Plugin version 2.2.1.530, bundled with Foxit Reader 5.4.4.11281, contains a stack-based buffer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2013-10068

Foxit Reader Plugin version 2.2.1.530, bundled with Foxit Reader 5.4.4.11281, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module. When a PDF file is loaded from a remote host, an overly long query string in the URL can overflow a buffer, allowing remote attackers to execute arbitrary code. EPSS 98th percentile

CWECWE 121VNDFoxitTYPVulnerability
68
Edit Score
2025-08-05
2025-08-05 20:15Z
INFO

CVE-2012-10032 — Maxthon3: versions prior to 3.3 are vulnerable to cross context scripting (XCS) via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2012-10032

Maxthon3 versions prior to 3.3 are vulnerable to cross context scripting (XCS) via the about:history page. The browser’s trusted zone improperly handles injected script content, allowing attackers to execute arbitrary JavaScript in a privileged context. This flaw enables modification of browser configuration and execution of arbitrary code through Maxthon’s exposed DOM APIs, including maxthon.program.Program.launch() and maxthon.io.writeDataURL(). Exploitation requires user i EPSS 98th percentile

CWECWE 94CWECWE 79VNDMaxthon3TYPVulnerability
65
Edit Score
2025-08-05
2025-08-05 20:15Z
INFO

CVE-2012-10027 — Property: A remote attacker can upload arbitrary PHP files to a temporary directory without authentication

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2012-10027

WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script. A remote attacker can upload arbitrary PHP files to a temporary directory without authentication, leading to remote code execution. EPSS 99th percentile

CWECWE 434VNDPropertyTYPVulnerability
72
Edit Score
2025-08-05
2025-08-05 20:15Z
INFO

CVE-2012-10024 — XBMC: version 11, including builds up to the 2012-11-04 nightly release, contains a path

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2012-10024

XBMC version 11, including builds up to the 2012-11-04 nightly release, contains a path traversal vulnerability in its embedded HTTP server. When accessed via HTTP Basic Authentication, the server fails to properly sanitize URI input, allowing authenticated users to request files outside the intended document root. An attacker can exploit this flaw to read arbitrary files from the host filesystem, including sensitive configuration or credential files. EPSS 98th percentile

CWECWE 22VNDXbmcTYPVulnerability
65
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-08-04
2025-08-04 21:15Z
CRIT

CVE-2025-50341 — Boolean: A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50341

A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation. CVSSv3.1 9.8 (CRITICAL) · EPSS 36th percentile

CWECWE 89VNDBooleanTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-08-04
2025-08-04 19:15Z
CRIT

CVE-2025-52239 — Zkea Zkeacms: An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-52239

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file. CVSSv3.1 9.8 (CRITICAL) · EPSS 38th percentile

CWECWE 434VNDZkeaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-08-04
2025-08-04 18:15Z
CRIT

CVE-2025-51390 — Totolink N600r_firmware: N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection vulnerability via the pin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-51390

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function. CVSSv3.1 9.8 (CRITICAL) · EPSS 80th percentile

CWECWE 78VNDTotolinkTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2025-08-04
2025-08-04 17:15Z
MED

CVE-2025-8518 — Vvveb Vvveb: The manipulation leads to code injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8518

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The name of the patch is f684f3e374d04db715730fc4796e102f5ebcacb2. It is recommend CVSSv3.1 4.7 (MEDIUM) · EPSS 95th percentile

CWECWE 94CWECWE 74VNDVvvebTYPVulnerability
4.7
CVSS v3.1
79
Edit Score
2025-08-04
2025-08-04 15:58Z
CRIT

Oops Safari, I think You Spilled Something!

Exodus Intel·blog.exodusintel.comCVE-2024-44308

Exodus Intelligence disclosed CVE-2024-44308, a use-of-uninitialized-variable vulnerability in WebKit's DFG compiler affecting Safari on macOS and iOS. The bug exists in TypedArray index storage code and was patched by Apple in November 2024; when alive, it enabled renderer RCE when chained with PAC and APRR bypasses on Apple Silicon. This writeup provides detailed technical analysis of the DFG IR, root-cause debugging, and exploitation methodology for achieving arbitrary read/write through stack layout control.

SRFOsTACTA0005TACTA0002SRFBrowserVNDAppleVNDWebkitTYPWriteupTYPExploit
78
Edit Score
2025-08-04
2025-08-04 15:15Z
HIGH

CVE-2025-44643 — Certain: An attacker with network access could exploit this to gain unauthorized control over the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-44643

Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting of the password property in the ripd.conf configuration file sets a hardcoded weak password, posing a security risk. An attacker with network access could exploit this to gain unauthorized control over the routing daemon, potentially altering network routes or intercepting traffic. CVSSv3.1 8.6 (HIGH) · EPSS 16th percentile

CWECWE 798CWECWE 276VNDCertainTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-08-04
2025-08-04 07:15Z
HIGH

CVE-2025-20701 — Airoha: This could lead to remote escalation of privilege with no additional execution privileges needed.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-20701

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 8.8 (HIGH) · EPSS 87th percentile

CWECWE 863VNDAirohaTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2025-08-02
2025-08-02 08:15Z
HIGH

CVE-2025-6754 — SEO: The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-6754

The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks in both the seo_metrics_handle_connect_button_click() AJAX handler and the seo_metrics_handle_custom_endpoint() function in all versions up to, and including, 1.0.15. Because the AJAX action only verifies a nonce, without checking the caller’s capabilities, a subscriber-level user can retrieve the token and then access the custom endpoint to obtain full administrator CVSSv3.1 8.8 (HIGH)

CWECWE 862VNDSeoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-08-01
2025-08-01 21:15Z
HIGH

CVE-2013-10050 — Dlink Dir-300_firmware: An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2013-10050

An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_vct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid credentials to inject arbitrary shell commands. Exploitation enables full device compromise, including spawning a telnet daemon and establishing a root shell. The vulnerability is CVSSv3.1 8.8 (HIGH) · EPSS 99th percentile

CWECWE 78VNDDlinkTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2025-08-01
2025-08-01 17:15Z
CRIT

CVE-2025-45150 — X-d_lab Langchain-chatglm-webui: Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-45150

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request. CVSSv3.1 9.8 (CRITICAL) · EPSS 43th percentile

CWECWE 732VNDLangchainVNDX D LabTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-31
2025-07-31 20:15Z
HIGH

CVE-2025-50572 — Archer: 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50572

Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file with compatible applications. NOTE: the Supplier does not accept this as a valid vulnerability report against their product. CVSSv3.1 8.8 (HIGH) · EPSS 35th percentile

CWECWE 1236VNDArcherTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-31
2025-07-31 16:15Z
HIGH

CVE-2025-50850 — Cs-cart Cs-cart: An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50850

An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and passwords (brute-force attack) to gain unauthorized access to vendor accounts. The absence of any blocking mechanism makes the login endpoint susceptible to automated attacks. CVSSv3.1 8.6 (HIGH) · EPSS 14th percentile

CWECWE 284CWECWE 804VNDCs CartTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2025-07-31
2025-07-31 15:15Z
HIGH

CVE-2025-50849 — Cart: CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference (IDOR).

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50849

CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference (IDOR). The user profile functionality allows enabling or disabling stickers through a parameter (company_id) sent in the request. However, this operation is not properly validated on the server side. An authenticated user can manipulate the request to target other users' accounts and toggle the sticker setting by modifying the company_id or other object identifiers. CVSSv3.1 8.0 (HIGH) · EPSS 16th percentile

CWECWE 639VNDCartTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2025-07-30
2025-07-30 18:24Z
HIGH

NullGate — Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.

GitHub · EDR bypass / evasion·github.comGITHUB POC

NullGate is a C++ library that abstracts indirect syscall invocation using FreshyCalls with dynamic syscall number retrieval, coupled with a novel Windows Defender memory-scan evasion technique. The evasion method allocates memory with PAGE_NOACCESS, creates suspended threads, writes shellcode post-suspension, then resumes execution—avoiding detection during the critical memory-scan window. The library includes compile-time string obfuscation via FNV1 hashing and XOR encryption with per-build randomized keys.

SRFOsTACTA0005TACTA0002VNDMicrosoftTYPTechniqueTYPToolSTGDefense EvasionSTGExecution
76
Edit Score
2025-07-30
2025-07-30 17:15Z
HIGH

CVE-2025-45620 — Averusa Ptc310uv2_firmware: An issue in Aver PTC310UV2 v.0.1.0000.59 allows a remote attacker to obtain sensitive information

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-45620

An issue in Aver PTC310UV2 v.0.1.0000.59 allows a remote attacker to obtain sensitive information via a crafted request CVSSv3.1 8.1 (HIGH) · EPSS 55th percentile

CWECWE 200VNDAverVNDAverusaTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-07-30
2025-07-30 00:15Z
HIGH

CVE-2025-31277 — Apple Safari: Processing maliciously crafted web content may lead to memory corruption.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-31277

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption. CVSSv3.1 8.8 (HIGH)

CWECWE 120CWECWE 119VNDAppleTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-29
2025-07-29 05:15Z
CRIT

CVE-2025-8264 — Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8264

Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modify or delete sensitive data from a linked third-party database. **Note:** This vulnerability affects Z-Push installations that utilize the IMAP backend and have the IMAP_FROM_SQL_QUE CVSSv3.1 9.0 (CRITICAL) · EPSS 30th percentile

CWECWE 89TYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2025-07-29
2025-07-29 00:00Z
HIGH

Gunra Ransomware Group Unveils Efficient Linux Variant

Trend Micro Research·trendmicro.comin the wild

Trend Micro disclosed technical analysis of Gunra ransomware's new Linux variant, first observed in April 2025. The variant features configurable multi-threaded encryption (up to 100 threads), partial file encryption, and hybrid RSA/ChaCha20 encryption with optional separate keystore storage. The group has claimed 14 victims across multiple sectors and geographies since emergence.

SRFOsTACTA0005TACTA0002VNDTrend MicroTYPResearchTYPThreat IntelSTGExecutionSTGImpact
72
Edit Score