Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through <= 8.0. CVSSv3.1 8.5 (HIGH)
Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This issue affects Invelity MyGLS connect: from n/a through <= 1.1.1. CVSSv3.1 8.8 (HIGH)
Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Upload a Web Shell to a Web Server.This issue affects Bulk Featured Image: from n/a through <= 1.2.4. CVSSv3.1 9.1 (CRITICAL)
The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portal_type parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and CVSSv3.1 8.1 (HIGH) · EPSS 52th percentile
Azure Entra ID Elevation of Privilege Vulnerability CVSSv3.1 10.0 (CRITICAL) · EPSS 76th percentile
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials (usernames, passwords) through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability does not CVSSv3.1 9.9 (CRITICAL) · EPSS 93th percentile
Azure Networking Elevation of Privilege Vulnerability CVSSv3.1 10.0 (CRITICAL) · EPSS 84th percentile
In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVSSv3.1 8.4 (HIGH) · EPSS 0th percentile
In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parse_server_interfaces() (see below): BUG: KASAN: slab-out-of-bounds in parse_server_interfaces+0x14ee/0x1880 [cifs] Read of size 4 at addr ffff8881433dba98 by task mount/9827 CPU: 5 UID: 0 PID: 9827 Comm: mount Tainted: G OE 6.16.0-rc2 CVSSv3.1 9.1 (CRITICAL) · EPSS 4th percentile
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF. Fix this by getting a reference early in the case where there is an extant confirmed client. If CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile
In the Linux kernel, the following vulnerability has been resolved: drbd: add missing kref_get in handle_write_conflicts With `two-primaries` enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even if you write to the same sector simultaneously on both nodes, they end up with the identical data once the writes are completed. In handling "superseeded" writes, we forgot a kref_get, resulting in a premature drbd_destroy_device and use after CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile
In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevent ALIGN() overflow When allocating IOVA the candidate range gets aligned to the target alignment. If the range is close to ULONG_MAX then the ALIGN() can wrap resulting in a corrupted iova. Open code the ALIGN() using get_add_overflow() to prevent this. This simplifies the checks as we don't need to check for length earlier either. Consolidate the two copies of this code under a single help CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile
NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering. CVSSv3.1 8.7 (HIGH) · EPSS 4th percentile
Bishop Fox published a comprehensive technical analysis of 5G registration protocol vulnerabilities, identifying critical flaws including SUPI disclosure risks, null/weak encryption negotiation (EEA0/EIA0), replay attack susceptibility, and bidding-down attack vectors. The research demonstrates practical exploitation using Open5Gs test environments and open-source tools like 5GReplay and Sni5Gect, with recommendations for defensive configuration and continuous security testing.
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass. This issue affects e-Mutabakat: from 2.02.06 before v2.02.06. CVSSv3.1 8.6 (HIGH) · EPSS 23th percentile
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypass. This issue affects TaskPano: from s1.06.04 before v1.06.06. CVSSv3.1 8.6 (HIGH) · EPSS 23th percentile
Trend Micro analyzed the AMOS (Atomic macOS Stealer) campaign targeting macOS users via trojanized 'cracked' software downloads and Terminal command injection. The malware steals credentials, browser data, cryptocurrency wallets, Telegram chats, VPN profiles, and keychain items, with attackers using rotating domains to evade detection. macOS Sequoia's Gatekeeper blocks the .dmg delivery method, but the Terminal-based installation vector remains effective.
Elastic Security Labs reverse-engineered an undocumented Windows Authenticode signature validation failure triggered by heuristic marker detection in imagehlp.dll. The research reveals Microsoft's 2012-era hardcoded list of archive/installer magic bytes (ZIP, RAR, ALZip, etc.) scanned within PE signature blocks to detect potential malicious data embedding; a false positive collision with the EGGA marker caused validation failures despite no actual compromise. The workaround involves re-signing with the /rmc (relaxed marker check) flag, but the core finding exposes a decade-old detection mechanism with zero public documentation.
Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0. CVSSv3.1 9.0 (CRITICAL) · EPSS 99th percentile
Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) CVSSv3.1 8.8 (HIGH) · EPSS 30th percentile
phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter. CVSSv3.1 8.8 (HIGH)
phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation. CVSSv3.1 9.1 (CRITICAL)
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter. CVSSv3.1 8.1 (HIGH)
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypass. This issue affects LimonDesk: from s1.02.14 before v1.02.17. CVSSv3.1 8.6 (HIGH) · EPSS 23th percentile
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4. CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile