Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-23 03:08Z
2025-02-27
2025-02-27 21:15Z
CRIT

CVE-2024-51138 — Draytek Vigor3912_firmware: and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912 4.3.6.1 and earlier

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-51138

Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912 4.3.6.1 and earlier; Vigor3910 4.4.3.1 and earlier a stack-based buffer overflow vulnerability has been identified in the URL parsing functionality of the TR069 STUN server. This CVSSv3.1 9.8 (CRITICAL) · EPSS 63th percentile

CWECWE 121VNDDraytekTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-02-27
2025-02-27 21:15Z
HIGH

CVE-2024-41340 — Draytek Vigor165_firmware: An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-41340

An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 allows attackers to upload crafted APP Enforcement modules, leading to arbitrary code execution. CVSSv3.1 8.4 (HIGH) · EPSS 12th percentile

CWECWE 434VNDDraytekTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-02-27
2025-02-27 21:15Z
HIGH

CVE-2024-41339 — Draytek Vigor165_firmware: An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-41339

An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 allows attackers to upload a crafted kernel module, al CVSSv3.1 8.8 (HIGH) · EPSS 45th percentile

CWECWE 434VNDDraytekVNDCgiTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-02-27
2025-02-27 21:15Z
HIGH

CVE-2024-41334 — Draytek Vigor166_firmware: devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-41334

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 were discovered to not utilize certificate verification, allowing attackers to upload crafted APPE modules from non- CVSSv3.1 8.8 (HIGH) · EPSS 28th percentile

CWECWE 295VNDDraytekTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-02-27
2025-02-27 20:16Z
CRIT

CVE-2025-21805 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit()

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21805

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit() call A warning is triggered when repeatedly connecting and disconnecting the rnbd: list_add corruption. prev->next should be next (ffff88800b13e480), but was ffff88801ecd1338. (prev=ffff88801ecd1340). WARNING: CPU: 1 PID: 36562 at lib/list_debug.c:32 __list_add_valid_or_report+0x7f/0xa0 Workqueue: ib_cm cm_work_handler [ib_cm] RIP: 0010:__list_add_valid_or_report+0x7f/0xa CVSSv3.1 9.8 (CRITICAL) · EPSS 8th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-02-27
2025-02-27 15:15Z
CRIT

CVE-2024-13148 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-13148

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yukseloglu Filter B2B Login Platform allows SQL Injection. This issue affects B2B Login Platform: before 16.01.2025. CVSSv3.1 9.8 (CRITICAL) · EPSS 34th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-02-27
2025-02-27 14:15Z
HIGH

CVE-2024-9334 — Use: of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024. CVSSv3.1 8.2 (HIGH) · EPSS 15th percentile

CWECWE 798CWECWE 921TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-02-27
2025-02-27 08:15Z
HIGH

CVE-2025-1717 — Pluginly Login_me_now: The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-1717

The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. This is due to insecure authentication based on an arbitrary transient name in the 'AutoLogin::listen()' function. This makes it possible for unauthenticated attackers to log in an existing user on the site, even an administrator. Note: this vulnerability requires using a transient name and value from another software, so the plugin is not inherently vulnerabl CVSSv3.1 8.1 (HIGH)

CWECWE 288CWECWE 306VNDPluginlyVNDLoginTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-02-27
2025-02-27 03:15Z
CRIT

CVE-2025-21796 — Linux Linux_kernel: However, acl_access will still retain a pointer pointing to the released posix_acl, which will

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21796

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl_access and acl_default will be released simultaneously. However, acl_access will still retain a pointer pointing to the released posix_acl, which will trigger a WARNING in nfs3svc_release_getacl like this: ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 26 PID: 3199 at lib/ref CVSSv3.1 9.8 (CRITICAL) · EPSS 14th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-02-27
2025-02-27 03:15Z
HIGH

CVE-2025-21766 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21766

In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection in __ip_rt_update_pmtu() __ip_rt_update_pmtu() must use RCU protection to make sure the net structure it reads does not disappear. CVSSv3.1 8.1 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-02-27
2025-02-27 03:15Z
HIGH

CVE-2025-21765 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21765

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection to make sure the net structure it reads does not disappear. CVSSv3.1 8.1 (HIGH) · EPSS 12th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-02-27
2025-02-27 03:15Z
HIGH

CVE-2025-21762 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21762

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF. CVSSv3.1 8.1 (HIGH) · EPSS 15th percentile

CWECWE 416TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-02-27
2025-02-27 03:15Z
HIGH

CVE-2025-21760 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21760

In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF. CVSSv3.1 8.1 (HIGH) · EPSS 95th percentile

CWECWE 416TYPVulnerability
8.1
CVSS v3.1
93
Edit Score
2025-02-27
2025-02-27 03:15Z
MED

CVE-2025-21758 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21758

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU protection to mld_newpack() mld_newpack() can be called without RTNL or RCU being held. Note that we no longer can use sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep. Instead use alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection. CVSSv3.1 5.5 (MEDIUM) · EPSS 96th percentile

TYPVulnerability
5.5
CVSS v3.1
81
Edit Score
2025-02-27
2025-02-27 03:15Z
CRIT

CVE-2025-21748 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21748

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow. CVSSv3.1 9.8 (CRITICAL) · EPSS 11th percentile

CWECWE 190TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-02-27
2025-02-27 03:15Z
HIGH

CVE-2025-21735 — Linux Linux_kernel: If it's more than 127, then it results in memory corruption in the caller

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21735

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate(). CVSSv3.1 8.8 (HIGH) · EPSS 14th percentile

CWECWE 787TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-02-27
2025-02-27 03:15Z
CRIT

CVE-2024-58006 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-58006

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() In commit 4284c88fff0e ("PCI: designware-ep: Allow pci_epc_set_bar() update inbound map address") set_bar() was modified to support dynamically changing the backing physical address of a BAR that was already configured. This means that set_bar() can be called twice, without ever calling clear_bar() (as calling clear_bar() would clear the BA CVSSv3.1 9.6 (CRITICAL)

TYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2025-02-27
2025-02-27 02:15Z
HIGH

CVE-2025-21710 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21710

In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of extreme memory squeeze Testing with iperf3 using the "pasta" protocol splicer has revealed a problem in the way tcp handles window advertising in extreme memory squeeze situations. Under memory pressure, a socket endpoint may temporarily advertise a zero-sized window, but this is not stored as part of the socket data. The reasoning behind this is that it is considered a temporary s CVSSv3.1 8.2 (HIGH) · EPSS 4th percentile

CWECWE 667TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-02-27
2025-02-27 02:15Z
CRIT

CVE-2025-21707 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-21707

In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsing is not enough to ensure a consistent status, and the MPTCP code has to additionally clear some bitfiled depending on the actually parsed suboption. The above schema is fragile, CVSSv3.1 9.8 (CRITICAL) · EPSS 10th percentile

CWECWE 908TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-02-27
2025-02-27 02:15Z
HIGH

CVE-2024-57999 — Linux Linux_kernel: This results in negative value when setting the bitmap.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-57999

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW Power Hypervisor can possibily allocate MMIO window intersecting with Dynamic DMA Window (DDW) range, which is over 32-bit addressing. These MMIO pages needs to be marked as reserved so that IOMMU doesn't map DMA buffers in this range. The current code is not marking these pages correctly which is resulting in LPAR to OOPS while booting. The CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-02-27
2025-02-27 02:15Z
HIGH

CVE-2024-57997 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-57997

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn->chan_survey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn->chan_survey, ensuring proper initialization and preventing the use of uninitialized values when there are no frames on the channel. CVSSv3.1 8.8 (HIGH)

CWECWE 908TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-02-27
2025-02-27 02:15Z
HIGH

CVE-2024-57995 — Linux Linux_kernel: Subsequently, there is a check involving arvif, which will result in a read-after-free scenario.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-57995

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() In ath12k_mac_assign_vif_to_vdev(), if arvif is created on a different radio, it gets deleted from that radio through a call to ath12k_mac_unassign_link_vif(). This action frees the arvif pointer. Subsequently, there is a check involving arvif, which will result in a read-after-free scenario. Fix this by moving this check after ar CVSSv3.1 8.8 (HIGH)

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-02-27
2025-02-27 02:15Z
HIGH

CVE-2024-57973 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-57973

In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this. CVSSv3.1 8.1 (HIGH) · EPSS 14th percentile

CWECWE 190TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2025-02-27
2025-02-27 00:00Z
HIGH

Linux Detection Engineering - The Grand Finale on Linux Persistence

Elastic Security Labs·elastic.co

Elastic Security Labs publishes the final installment of a five-part Linux persistence detection engineering series, focusing on advanced and obscure bootloader and initramfs-based persistence techniques (T1542). The article details GRUB bootloader manipulation and initramfs modification attacks, demonstrates practical exploitation using PANIX (a custom persistence tool), and provides detection rules, hunting queries (ES|QL/OSQuery), and remediation guidance.

SRFOsTACTA0005TACTA0003OSLinuxTYPResearchTYPToolSTGDefense EvasionSTGPersistence
78
Edit Score
2025-02-26
2025-02-26 15:15Z
CRIT

CVE-2025-25790 — Foxcms Foxcms: An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-25790

An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading a crafted Zip file. CVSSv3.1 9.8 (CRITICAL) · EPSS 58th percentile

CWECWE 434VNDFoxcmsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score