Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-21 15:10Z
2025-08-19
2025-08-19 17:15Z
CRIT

CVE-2025-38560 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38560

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation An SNP cache coherency vulnerability requires a cache line eviction mitigation when validating memory after a page state change to private. The specific mitigation is to touch the first and last byte of each 4K page that is being validated. There is no need to perform the mitigation when performing a page state change to shared and rescinding validatio CVSSv3.1 9.3 (CRITICAL) · EPSS 6th percentile

TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-08-19
2025-08-19 14:15Z
CRIT

CVE-2025-50567 — Saurus: This leads to injection of user-controlled SQL statements, potentially leading to arbitrary PHP code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-50567

Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the deprecated /e (eval) modifier to interpolate SQL query parameters. This leads to injection of user-controlled SQL statements, potentially leading to arbitrary PHP code execution. CVSSv3.1 10.0 (CRITICAL) · EPSS 49th percentile

CWECWE 89CWECWE 94VNDSaurusTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-08-16
2025-08-16 14:15Z
CRIT

CVE-2023-4515 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-4515

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands. CVSSv3.1 9.1 (CRITICAL) · EPSS 4th percentile

TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-08-16
2025-08-16 14:15Z
HIGH

CVE-2023-4130 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-4130

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request from client. ksmbd find next smb2_ea_info using ->NextEntryOffset of current smb2_ea_info. ksmbd need to validate buffer length Before accessing the next ea. ksmbd should check buffer length using buf_len, not next variable. next is the start offset of current ea CVSSv3.1 8.1 (HIGH) · EPSS 14th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-08-16
2025-08-16 14:15Z
CRIT

CVE-2023-3867 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-3867

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first payload in the smb2_sess_setup(). CVSSv3.1 9.1 (CRITICAL) · EPSS 87th percentile

CWECWE 125TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-08-16
2025-08-16 14:15Z
HIGH

CVE-2023-3866 — Linux Linux_kernel: If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-3866

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error. CVSSv3.1 7.5 (HIGH) · EPSS 97th percentile

CWECWE 476TYPVulnerability
7.5
CVSS v3.1
92
Edit Score
2025-08-16
2025-08-16 14:15Z
HIGH

CVE-2023-3865 — Linux Linux_kernel: If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-3865

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write. CVSSv3.1 8.1 (HIGH) · EPSS 29th percentile

CWECWE 125TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-08-16
2025-08-16 14:15Z
CRIT

CVE-2023-32249 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: not allow guest

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-32249

In the Linux kernel, the following vulnerability has been resolved: ksmbd: not allow guest user on multichannel This patch return STATUS_NOT_SUPPORTED if binding session is guest. CVSSv3.1 9.1 (CRITICAL) · EPSS 6th percentile

TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-08-16
2025-08-16 12:15Z
CRIT

CVE-2025-38552 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution is similar. Use a separate flag to track the condition 'socket state prevent any additional subflow creation' protected by the fallback lock. The socket fallback makes such flag tr CVSSv3.1 9.4 (CRITICAL) · EPSS 5th percentile

TYPVulnerability
9.4
CVSS v3.1
97
Edit Score
2025-08-16
2025-08-16 12:15Z
CRIT

CVE-2025-38533 — Linux Linux_kernel: This could lead to undefined behavior, including DMA errors or use-after-free, if the uninitialized

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38533

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix the using of Rx buffer DMA The wx_rx_buffer structure contained two DMA address fields: 'dma' and 'page_dma'. However, only 'page_dma' was actually initialized and used to program the Rx descriptor. But 'dma' was uninitialized and used in some paths. This could lead to undefined behavior, including DMA errors or use-after-free, if the uninitialized 'dma' was used. Althrough such error has n CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-08-16
2025-08-16 12:15Z
CRIT

CVE-2025-38527 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38527

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structure when unmounting: cifs_oplock_break() _cifsFileInfo_put(cfile) cifsFileInfo_put_final() cifs_sb_deactive() [last ref, start releasing sb] kill_sb() kill_anon_super() generic_shutdown_ CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-08-16
2025-08-16 11:15Z
HIGH

CVE-2025-38512 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38512

In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks in mesh networks This patch is a mitigation to prevent the A-MSDU spoofing vulnerability for mesh networks. The initial update to the IEEE 802.11 standard, in response to the FragAttacks, missed this case (CVE-2025-27558). It can be considered a variant of CVE-2020-24588 but for mesh networks. This patch tries to detect if a standard MSDU was turned into an A-MSDU by an adversa CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-08-16
2025-08-16 11:15Z
HIGH

CVE-2025-38511 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38511

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might leave some stale data that could either point to some other VFs allocations or even to the PF pages. Explicitly clear all new LMTT page to avoid the risk that a malicious VF would CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-08-16
2025-08-16 07:15Z
CRIT

CVE-2025-8898 — Taxi: The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8898

The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0. This is due to the plugin not properly validating a user's capabilities prior to updating a plugin setting or their identity prior to updating their details like email address. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and le CVSSv3.1 9.8 (CRITICAL)

CWECWE 862VNDTaxiTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-08-16
2025-08-16 04:16Z
CRIT

CVE-2025-7441 — StoryChief: The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-7441

The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API endpoint that does not have sufficient filetype validation. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 9.8 (CRITICAL)

CWECWE 434VNDStorychiefTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-08-16
2025-08-16 04:15Z
HIGH

CVE-2025-6079 — School: The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-6079

The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the homework.php file in all versions up to, and including, 93.2.0. This makes it possible for authenticated attackers, with Student-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVE-2025-31100 is potentially a duplicate of this. CVSSv3.1 8.8 (HIGH)

CWECWE 434VNDSchoolTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-08-15
2025-08-15 16:15Z
HIGH

CVE-2025-49897 — Incorrect: Privilege Assignment vulnerability in gopiplus School Management school-management allows Privilege Escalation.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-49897

Incorrect Privilege Assignment vulnerability in gopiplus School Management school-management allows Privilege Escalation.This issue affects School Management: from n/a through <= 93.2.0. CVSSv3.1 8.8 (HIGH)

CWECWE 266TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-08-15
2025-08-15 13:00Z
INFO

Vulnerability Discovery with LLM-Powered Patch Diffing

Bishop Fox Labs·bishopfox.com

Bishop Fox published research on using LLM-powered patch diffing to accelerate vulnerability discovery by automating the analysis of binary diffs. Testing across four high-impact CVEs (CVSS 9.4+) showed Claude Sonnet 3.7 achieved 66% success rate in ranking vulnerable functions within Top 25 results, with variable performance depending on vulnerability class and advisory clarity.

SRFApplicationTACTA0043VNDAnthropicTYPResearchTYPToolSTGReconTECT1526
72
Edit Score
2025-08-14
2025-08-14 19:15Z
HIGH

CVE-2025-55708 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-55708

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through <= 10.2.4. CVSSv3.1 8.5 (HIGH)

CWECWE 89TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2025-08-14
2025-08-14 19:15Z
HIGH

CVE-2025-53587 — Site: Cross-Site Request Forgery (CSRF) vulnerability in ApusTheme Findgo findgo allows Cross Site Request Forgery.This

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-53587

Cross-Site Request Forgery (CSRF) vulnerability in ApusTheme Findgo findgo allows Cross Site Request Forgery.This issue affects Findgo: from n/a through <= 1.3.57. CVSSv3.1 8.8 (HIGH)

CWECWE 352TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-08-14
2025-08-14 19:15Z
HIGH

CVE-2025-52797 — Site: Cross-Site Request Forgery (CSRF) vulnerability in josepsitjar StoryMap wp-storymap allows SQL Injection.This issue affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-52797

Cross-Site Request Forgery (CSRF) vulnerability in josepsitjar StoryMap wp-storymap allows SQL Injection.This issue affects StoryMap: from n/a through <= 2.1. CVSSv3.1 8.2 (HIGH)

CWECWE 352TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-08-14
2025-08-14 15:15Z
HIGH

CVE-2025-8875 — N-able N-central: Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8875in the wild

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1. CVSSv3.1 7.8 (HIGH) · EPSS 76th percentile

CWECWE 502VNDN AbleTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
90
Edit Score
2025-08-14
2025-08-14 11:15Z
CRIT

CVE-2025-54707 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54707

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows SQL Injection.This issue affects MDTF: from n/a through <= 1.3.3.7. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2025-08-14
2025-08-14 11:15Z
HIGH

CVE-2025-54701 — Thememove Unicamp: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54701

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp allows PHP Local File Inclusion.This issue affects Unicamp: from n/a through <= 2.6.3. CVSSv3.1 8.1 (HIGH)

CWECWE 98VNDThememoveTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-08-14
2025-08-14 11:15Z
HIGH

CVE-2025-54700 — Thememove Makeaholic: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54700

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Makeaholic makeaholic allows PHP Local File Inclusion.This issue affects Makeaholic: from n/a through <= 1.8.4. CVSSv3.1 8.1 (HIGH)

CWECWE 98VNDThememoveTYPVulnerability
8.1
CVSS v3.1
91
Edit Score