Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 00:23Z
2024-05-23
2024-05-23 07:15Z
HIGH

CVE-2024-36013 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-36013

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to prevent chan from early freeing. Also make the l2cap_connect() return type void. Nothing is using the returned value but it is ugly to return a potentially freed pointer. Making it void will help with backports because earlier kernels did use the return value. Now the compile will break for kernels where this patch is CVSSv3.1 8.8 (HIGH) · EPSS 37th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-23
2024-05-23 05:15Z
HIGH

CVE-2024-4662 — Oxygen: The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4662

The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.8.2 via post metadata. This is due to the plugin storing custom data in post metadata without an underscore prefix. This makes it possible for lower privileged users, such as contributors, to inject arbitrary PHP code via the WordPress user interface and gain elevated privileges. CVSSv3.1 8.8 (HIGH) · EPSS 92th percentile

CWECWE 94VNDOxygenTYPVulnerability
8.8
CVSS v3.1
96
Edit Score
2024-05-22
2024-05-22 09:15Z
HIGH

CVE-2024-5031 — Caseproof Memberpress: The Memberpress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5031

The Memberpress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.11.29 via the 'mepr-user-file' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. CVSSv3.1 8.5 (HIGH) · EPSS 66th percentile

CWECWE 918VNDCaseproofVNDMemberpressTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2024-05-22
2024-05-22 09:15Z
CRIT

CVE-2024-3495 — Country: The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3495

The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ‘cnt’ and 'sid' parameters in versions up to, and including, 2.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 89VNDCountryTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-05-22
2024-05-22 09:15Z
CRIT

CVE-2021-47496 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix flipped sign

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47496

In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix flipped sign in tls_err_abort() calls sk->sk_err appears to expect a positive value, a convention that ktls doesn't always follow and that leads to memory corruption in other code. For instance, [kworker] tls_encrypt_done(..., err=<negative error from crypto request>) tls_err_abort(.., err) sk->sk_err = err; [task] splice_from_pipe_feed ... tls_sw_d CVSSv3.1 9.8 (CRITICAL) · EPSS 12th percentile

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-22
2024-05-22 09:15Z
CRIT

CVE-2021-47478 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47478

In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it. CVSSv3.1 9.1 (CRITICAL) · EPSS 14th percentile

CWECWE 125TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-05-22
2024-05-22 08:15Z
CRIT

CVE-2024-5147 — Wpzoom Wpzoom_elementor_addons: The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Local

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5147

The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.37 via the 'grid_style' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “saf CVSSv3.1 9.8 (CRITICAL) · EPSS 73th percentile

CWECWE 22VNDWpzoomTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-05-22
2024-05-22 07:15Z
HIGH

CVE-2024-2088 — Nextscripts Social_networks_auto_poster: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2088

The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.3 via the 'nxs_getExpSettings' function. This makes it possible for authenticated attackers, with subscriber access and above, to extract sensitive data including social network API keys and secrets. CVSSv3.1 8.5 (HIGH) · EPSS 63th percentile

CWECWE 202VNDNextscriptsTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2024-05-22
2024-05-22 07:15Z
HIGH

CVE-2021-47450 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix host

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47450

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix host stage-2 PGD refcount The KVM page-table library refcounts the pages of concatenated stage-2 PGDs individually. However, when running KVM in protected mode, the host's stage-2 PGD is currently managed by EL2 as a single high-order compound page, which can cause the refcount of the tail pages to reach 0 when they shouldn't, hence corrupting the page-table. Fix this by introducing a new h CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-22
2024-05-22 07:15Z
HIGH

CVE-2021-47433 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix abort logic

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47433

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix abort logic in btrfs_replace_file_extents Error injection testing uncovered a case where we'd end up with a corrupt file system with a missing extent in the middle of a file. This occurs because the if statement to decide if we should abort is wrong. The only way we would abort in this case is if we got a ret != -EOPNOTSUPP and we called from the file clone code. However the prealloc code uses CVSSv3.1 8.1 (HIGH) · EPSS 17th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-05-22
2024-05-22 06:15Z
CRIT

CVE-2024-4443 — Businessdirectoryplugin Business_directory: The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4443

The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract s CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 89VNDBusinessdirectorypluginVNDBusinessTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-05-22
2024-05-22 00:15Z
HIGH

CVE-2024-3518 — Davidlingren Media_library_assistant: The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3518

The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access or higher, to append additional SQL queries into already existing queries that can be used to extract sensitive information from CVSSv3.1 8.8 (HIGH) · EPSS 78th percentile

CWECWE 89VNDDavidlingrenVNDMediaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-22
2024-05-22 00:00Z
HIGH

Invisible miners: unveiling GHOSTENGINE’s crypto mining operations

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs identified REF4578 (GHOSTENGINE), a sophisticated intrusion set deploying modular malware to disable EDRs via vulnerable drivers (Avast aswArPots.sys, IObit IObitUnlockers.sys), establish persistence through scheduled tasks and phantom DLLs, and execute XMRig Monero miners. The campaign demonstrates extensive redundancy and contingency mechanisms, including a PowerShell backdoor (backup.png), EDR termination modules (kill.png, smartsscreen.exe), and cleanup routines to remove prior infections.

SRFApplicationSRFOsTACTA0005TACTA0001SRFNetworkTACTA0007TACTA0003TACTA0011
78
Edit Score
2024-05-21
2024-05-21 16:15Z
HIGH

CVE-2023-52846 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52846

In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() The prp_fill_rct() function can fail. In that situation, it frees the skb and returns NULL. Meanwhile on the success path, it returns the original skb. So it's straight forward to fix bug by using the returned value. CVSSv3.1 8.8 (HIGH) · EPSS 16th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-21
2024-05-21 16:15Z
HIGH

CVE-2023-52829 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52829

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() reg_cap.phy_id is extracted from WMI event and could be an unexpected value in case some errors happen. As a result out-of-bound write may occur to soc->hal_reg_cap. Fix it by validating reg_cap.phy_id before using it. This is found during code review. Compile tested only. CVSSv3.1 8.4 (HIGH) · EPSS 17th percentile

CWECWE 787TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2024-05-21
2024-05-21 16:15Z
HIGH

CVE-2023-52801 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52801

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF. CVSSv3.1 8.8 (HIGH) · EPSS 57th percentile

CWECWE 284TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-21
2024-05-21 16:15Z
HIGH

CVE-2023-52798 — Linux Linux_kernel: Mark the code in question as an RCU read-side critical section to avoid any

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52798

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU but the DFS radar event handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only. CVSSv3.1 8.8 (HIGH) · EPSS 59th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-21
2024-05-21 16:15Z
HIGH

CVE-2023-52790 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix out-of-bounds TLB

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52790

In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC Limit the free list length to the size of the IO TLB. Transient pool can be smaller than IO_TLB_SEGSIZE, but the free list is initialized with the assumption that the total number of slots is a multiple of IO_TLB_SEGSIZE. As a result, swiotlb_area_find_slots() may allocate slots past the end of a transient IO TLB buffer. CVSSv3.1 8.8 (HIGH) · EPSS 11th percentile

CWECWE 787TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-21
2024-05-21 16:15Z
HIGH

CVE-2023-52776 — Linux Linux_kernel: Mark the code in question as RCU read-side critical sections to avoid any potential

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52776

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dfs-radar and temperature event locking The ath12k active pdevs are protected by RCU but the DFS-radar and temperature event handling code calling ath12k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as RCU read-side critical sections to avoid any potential use-after-free issues. Note that the temperature event handler looks like a plac CVSSv3.1 8.8 (HIGH) · EPSS 50th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-21
2024-05-21 16:15Z
HIGH

CVE-2023-52775 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52775

In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange error as shown below. "Error: Protocol error, got "\xe2" as reply type byte" Finally, we found that the retrieved error data was as follows: 0xE2 0xD4 0xC3 0xD9 0x04 0x00 0x2C 0x20 0xA6 0x56 0x00 0x16 0x3E 0x0C 0xCB 0x CVSSv3.1 8.2 (HIGH) · EPSS 16th percentile

CWECWE 787TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2024-05-21
2024-05-21 16:15Z
HIGH

CVE-2023-52769 — Linux Linux_kernel: Mark the code in question as an RCU read-side critical section to avoid any

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52769

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix htt mlo-offset event locking The ath12k active pdevs are protected by RCU but the htt mlo-offset event handling code calling ath12k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only. CVSSv3.1 8.8 (HIGH) · EPSS 15th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-21
2024-05-21 16:15Z
CRIT

CVE-2023-52755 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52755

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size. CVSSv3.1 9.8 (CRITICAL) · EPSS 98th percentile

CWECWE 787TYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-05-21
2024-05-21 16:15Z
CRIT

CVE-2023-52741 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52741

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata->read_into_pages() When the network status is unstable, use-after-free may occur when read data from the server. BUG: KASAN: use-after-free in readpages_fill_pages+0x14c/0x7e0 Call Trace: <TASK> dump_stack_lvl+0x38/0x4c print_report+0x16f/0x4a6 kasan_report+0xb7/0x130 readpages_fill_pages+0x14c/0x7e0 cifs_readv_receive+0x46d/0xa40 cifs_demultiplex CVSSv3.1 9.8 (CRITICAL) · EPSS 17th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-21
2024-05-21 16:15Z
CRIT

CVE-2023-52732 — Linux Linux_kernel: And we shouldn't continue IOs and metadatas access to MDS, which may corrupt or

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52732

In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupted snap trace When received corrupted snap trace we don't know what exactly has happened in MDS side. And we shouldn't continue IOs and metadatas access to MDS, which may corrupt or get incorrect contents. This patch will just block all the further IO/MDS requests immediately and then evict the kclient itself. The reason why we still need to evict the kcli CVSSv3.1 9.8 (CRITICAL) · EPSS 11th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-21
2024-05-21 15:15Z
CRIT

CVE-2021-47427 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix iscsi_task

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47427

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix iscsi_task use after free Commit d39df158518c ("scsi: iscsi: Have abort handler get ref to conn") added iscsi_get_conn()/iscsi_put_conn() calls during abort handling but then also changed the handling of the case where we detect an already completed task where we now end up doing a goto to the common put/cleanup code. This results in a iscsi_task use after free, because the common cleanup c CVSSv3.1 9.8 (CRITICAL) · EPSS 12th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score