Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-24 13:44Z
2024-08-22
2024-08-22 04:15Z
HIGH

CVE-2022-48941 — Linux Linux_kernel: This results in the VF potentially removing its DMA memory before the PF has

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-48941

In the Linux kernel, the following vulnerability has been resolved: ice: fix concurrent reset and removal of VFs Commit c503e63200c6 ("ice: Stop processing VF messages during teardown") introduced a driver state flag, ICE_VF_DEINIT_IN_PROGRESS, which is intended to prevent some issues with concurrently handling messages from VFs while tearing down the VFs. This change was motivated by crashes caused while tearing down and bringing up VFs in rapid succession. It turns out CVSSv3.1 8.8 (HIGH) · EPSS 6th percentile

CWECWE 362TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-22
2024-08-22 02:15Z
HIGH

CVE-2022-48919 — Linux Linux_kernel: [Thu Feb 10 12:59:06 2022] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x32/0x60 [Thu Feb 10 12:59:06

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-48919

In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails during cifs_smb3_do_mount() we call deactivate_locked_super() which eventually will call delayed_free() which will free the context. In this situation we should not proceed to enter the out: section in cifs_smb3_do_mount() and free the same resources a second time. [Thu Feb 10 12:59:06 2022] BUG: KASAN: use-after-free CVSSv3.1 8.8 (HIGH) · EPSS 13th percentile

CWECWE 415TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-21
2024-08-21 21:15Z
CRIT

CVE-2024-6386 — Wpml Wpml: The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6386

The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. CVSSv3.1 9.9 (CRITICAL)

CWECWE 94CWECWE 1336VNDWpmlTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2024-08-21
2024-08-21 14:15Z
CRIT

CVE-2024-28000 — Litespeedtech Litespeed_cache: Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-28000

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1. CVSSv3.1 9.8 (CRITICAL)

CWECWE 266VNDLitespeedtechTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-08-21
2024-08-21 07:15Z
HIGH

CVE-2023-52910 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: iommu/iova: Fix alloc iova

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52910

In the Linux kernel, the following vulnerability has been resolved: iommu/iova: Fix alloc iova overflows issue In __alloc_and_insert_iova_range, there is an issue that retry_pfn overflows. The value of iovad->anchor.pfn_hi is ~0UL, then when iovad->cached_node is iovad->anchor, curr_iova->pfn_hi + 1 will overflow. As a result, if the retry logic is executed, low_pfn is updated to 0, and then new_pfn < low_pfn returns false to make the allocation successful. This issue occu CVSSv3.1 8.8 (HIGH) · EPSS 15th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-21
2024-08-21 07:15Z
HIGH

CVE-2022-48871 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-48871

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates memory for RX FIFO (port->rx_fifo) based on default RX FIFO depth, e.g. 16. Later during serial startup the qcom_geni_serial_port_setup() updates the RX FIFO depth (port->rx_fifo_depth) to match real device capabilities, e.g. to 32. The RX UART handle code will read "port->rx_fifo_depth" number of words into " CVSSv3.1 8.8 (HIGH) · EPSS 16th percentile

CWECWE 125TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-21
2024-08-21 06:15Z
HIGH

CVE-2024-6508 — An insufficient entropy vulnerability was found in the Openshift Console.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6508

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery (CSRF) attack if the state parameter is used inefficiently. This flaw allows logging into the victim’s current application account using a third-party account without any restrictions. CVSSv3.1 8.0 (HIGH) · EPSS 45th percentile

CWECWE 331TYPVulnerability
8.0
CVSS v3.1
90
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-08-21
2024-08-21 01:15Z
HIGH

CVE-2024-43881 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: change DMA

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43881

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: change DMA direction while mapping reinjected packets For fragmented packets, ath12k reassembles each fragment as a normal packet and then reinjects it into HW ring. In this case, the DMA direction should be DMA_TO_DEVICE, not DMA_FROM_DEVICE. Otherwise, an invalid payload may be reinjected into the HW and subsequently delivered to the host. Given that arbitrary memory can be allocated to the CVSSv3.1 8.8 (HIGH)

CWECWE 668TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-21
2024-08-21 01:15Z
HIGH

CVE-2024-43878 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix input error

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43878

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix input error path memory access When there is a misconfiguration of input state slow path KASAN report error. Fix this error. west login: [ 52.987278] eth1: renamed from veth11 [ 53.078814] eth1: renamed from veth21 [ 53.181355] eth1: renamed from veth31 [ 54.921702] ================================================================== [ 54.922602] BUG: KASAN: wild-memory-access in xfrmi_rcv CVSSv3.1 8.1 (HIGH)

CWECWE 125TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-08-21
2024-08-21 00:15Z
CRIT

CVE-2024-43864 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43864

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry update leaks of modify header context The cited commit allocates a new modify header to replace the old one when updating CT entry. But if failed to allocate a new one, eg. exceed the max number firmware can support, modify header will be an error pointer that will trigger a panic when deallocating it. And the old modify header point is copied to old attr. When the old attr is freed, CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-08-21
2024-08-21 00:00Z
HIGH

Linux Detection Engineering - A primer on persistence mechanisms

Elastic Security Labs·elastic.co

Elastic Security Labs publishes a comprehensive detection engineering primer on Linux persistence mechanisms, covering cron, at, systemd services, and systemd timers mapped to MITRE ATT&CK T1053 and T1543. The article includes practical setup instructions using PANIX (a custom Linux persistence tool), detection rules, ES|QL hunting queries, and OSQuery techniques for identifying persistence artifacts.

SRFOsTACTA0003OSLinuxSWPanixTYPResearchSTGPersistenceTECT1053TECT1543
78
Edit Score
2024-08-19
2024-08-19 20:15Z
CRIT

CVE-2024-43354 — Deserialization: of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43354

Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2. CVSSv3.1 9.8 (CRITICAL) · EPSS 44th percentile

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-08-19
2024-08-19 18:15Z
CRIT

CVE-2024-43252 — Deserialization: of Untrusted Data vulnerability in Crew HRM Crew HRM hr-management.This issue affects Crew

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43252

Deserialization of Untrusted Data vulnerability in Crew HRM Crew HRM hr-management.This issue affects Crew HRM: from n/a through <= 1.1.1. CVSSv3.1 9.0 (CRITICAL)

CWECWE 502TYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2024-08-19
2024-08-19 18:15Z
CRIT

CVE-2024-43242 — Wpindeed Ultimate_membership_pro: Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43242

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7. CVSSv3.1 9.0 (CRITICAL) · EPSS 68th percentile

CWECWE 502VNDWpindeedTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2024-08-19
2024-08-19 17:15Z
CRIT

CVE-2024-43240 — Wpindeed Ultimate_membership_pro: Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43240

Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7. CVSSv3.1 9.4 (CRITICAL)

CWECWE 287VNDWpindeedTYPVulnerability
9.4
CVSS v3.1
97
Edit Score
2024-08-17
2024-08-17 10:15Z
HIGH

CVE-2024-43848 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix TTLM

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43848

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix TTLM teardown work The worker calculates the wrong sdata pointer, so if it ever runs, it'll crash. Fix that. CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-17
2024-08-17 10:15Z
HIGH

CVE-2024-43847 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-43847

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring and the reo reinject ring share the same ring mask index. When the driver receives an interrupt for the reo reinject ring, the monitor ring is also processed, leading to invalid memory access. Since monitor support is not yet enabled in ath12k, the ring mask for the monitor ring should be removed. Tested-on: QCN927 CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-17
2024-08-17 09:15Z
HIGH

CVE-2024-42318 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: landlock: Don't lose track

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-42318

In the Linux kernel, the following vulnerability has been resolved: landlock: Don't lose track of restrictions on cred_transfer When a process' cred struct is replaced, this _almost_ always invokes the cred_prepare LSM hook; but in one special case (when KEYCTL_SESSION_TO_PARENT updates the parent's credentials), the cred_transfer LSM hook is used instead. Landlock only implements the cred_prepare hook, not cred_transfer, so KEYCTL_SESSION_TO_PARENT causes all information CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-17
2024-08-17 09:15Z
HIGH

CVE-2024-42287 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-42287

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing NPIV and FW reset, BUG: kernel NULL pointer dereference, address: 000000000000001c #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 1 PREEMPT_RT SMP NOPTI RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0 RSP: 0018:ffffc90026f47b88 EFLAGS: 00010246 RAX: 00000000 CVSSv3.1 8.8 (HIGH)

CWECWE 476TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-08-17
2024-08-17 09:15Z
CRIT

CVE-2024-42285 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-42285

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows: conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler; rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-08-17
2024-08-17 09:15Z
CRIT

CVE-2024-42284 — Linux Linux_kernel: Otherwise, a buffer overflow access can occur in tipc_media_addr_printf().

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-42284

In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP media address. CVSSv3.1 9.1 (CRITICAL)

CWECWE 754TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-08-16
2024-08-16 19:15Z
CRIT

CVE-2024-42850 — Silverpeas Silverpeas: An issue in the password change function of Silverpeas v6.4.2 and lower allows for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-42850

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements. CVSSv3.1 9.8 (CRITICAL) · EPSS 71th percentile

CWECWE 521VNDSilverpeasTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-08-15
2024-08-15 00:00Z
HIGH

Beyond the wail: deconstructing the BANSHEE infostealer

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs published a technical deconstruction of BANSHEE Stealer, a macOS-native infostealer malware reportedly developed by Russian threat actors and sold for $3,000/month on underground forums. The malware targets system information, browser credentials (9 browsers + ~100 extensions), cryptocurrency wallets, and keychain data across both x86_64 and ARM64 architectures, using basic evasion (debugger/VM detection, language checks) and credential phishing via fake system dialogs.

SRFApplicationTACTA0006TACTA0009SRFBrowserOSMacosTYPResearchTYPVulnerabilitySTGExfil
72
Edit Score
2024-08-13
2024-08-13 19:15Z
CRIT

CVE-2024-7593 — Ivanti Virtual_traffic_manager: Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-7593in the wild

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel. CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 287CWECWE 303VNDIvantiTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2024-08-13
2024-08-13 14:15Z
CRIT

CVE-2024-41623 — D3dsecurity D8801_firmware: An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-41623

An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload CVSSv3.1 9.8 (CRITICAL) · EPSS 47th percentile

CWECWE 94VNDD3dsecurityVNDD3dTYPVulnerability
9.8
CVSS v3.1
99
Edit Score