Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 03:23Z
2024-05-14
2024-05-14 15:39Z
CRIT

CVE-2024-3070 — Last: The Last Viewed Posts by WPBeginner plugin for WordPress is vulnerable to PHP Object

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3070

The Last Viewed Posts by WPBeginner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input from the LastViewedPosts Cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitr CVSSv3.1 9.8 (CRITICAL) · EPSS 86th percentile

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-05-14
2024-05-14 15:39Z
HIGH

CVE-2024-3055 — Unlimited-elements Unlimited_elements_for_elementor: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3055

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.102 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access or higher, to append additional SQL queries into already existing queries that CVSSv3.1 8.8 (HIGH) · EPSS 62th percentile

CWECWE 89VNDUnlimited ElementsVNDUnlimitedTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-14
2024-05-14 15:12Z
HIGH

CVE-2024-27398 — Fedoraproject Fedora: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-27398

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout When the sco connection is established and then, the sco socket is releasing, timeout_work will be scheduled to judge whether the sco disconnection is timeout. The sock will be deallocated later, but it is dereferenced again in sco_sock_timeout. As a result, the use-after-free bugs will happen. The root cause is shown below: Cleanup Thread CVSSv3.1 8.0 (HIGH)

CWECWE 416VNDFedoraprojectTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2024-05-10
2024-05-10 00:00Z
HIGH

Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Four

Elastic Security Labs·elastic.co

Elastic Security Labs publishes the fourth and final part of a deep-dive analysis of REMCOS RAT v4.9.3, focusing on detection and hunting methodologies. The article provides Elastic Defend detection signatures, KQL and ES|QL queries for identifying REMCOS persistence mechanisms (Run key injection, UAC bypass via ICMLuaUtil), information collection (keylogging via SetWindowsHookEx, screenshot exfiltration, audio recording), and C2 communications. Includes YARA rule, sample hashes, and C2 infrastructure indicators.

SRFApplicationTACTA0005TACTA0006TACTA0003TACTA0011TACTA0009OSWindowsSWRemcos
72
Edit Score
2024-05-08
2024-05-08 03:15Z
CRIT

CVE-2024-4393 — Social: The Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4393

The Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2. This is due to insufficient verification on the OpenID server being supplied during the social login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. CVSSv3.1 9.8 (CRITICAL) · EPSS 32th percentile

CWECWE 288VNDSocialTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-07
2024-05-07 15:15Z
CRIT

CVE-2024-33120 — Roothub Roothub: v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-33120

Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file. CVSSv3.1 9.8 (CRITICAL) · EPSS 51th percentile

CWECWE 434VNDRoothubTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-07
2024-05-07 09:15Z
CRIT

CVE-2024-4346 — Startklar: The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4346

The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible. CVSSv3.1 9.1 (CRITICAL) · EPSS 96th percentile

CWECWE 22VNDStartklarTYPVulnerability
9.1
CVSS v3.1
100
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-05-07
2024-05-07 09:15Z
CRIT

CVE-2024-4345 — Startklar: The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4345

The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process' function in the 'startklarDropZoneUploadProcess' class in versions up to, and including, 1.7.13. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 9.8 (CRITICAL) · EPSS 95th percentile

CWECWE 434VNDStartklarTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-05-07
2024-05-07 06:15Z
CRIT

CVE-2024-4186 — Edwiser: The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4186

The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verification_key' default value is empty, and the not empty check is missing in the 'eb_user_email_verify' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. This can only be exploited if the 'Email Verificat CVSSv3.1 9.8 (CRITICAL) · EPSS 67th percentile

CWECWE 288VNDEdwiserTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-06
2024-05-06 20:15Z
HIGH

CVE-2024-33599 — Gnu Glibc: nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-33599

nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary. CVSSv3.1 8.1 (HIGH) · EPSS 75th percentile

CWECWE 121VNDGnuVNDNetappTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-05-04
2024-05-04 04:15Z
HIGH

CVE-2024-3240 — ConvertPlug: The ConvertPlug plugin for WordPress is vulnerable to PHP Object Injection in all versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3240

The ConvertPlug plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.25 via deserialization of untrusted input from the 'settings_encoded' attribute of the 'smile_info_bar' shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the targ CVSSv3.1 8.8 (HIGH) · EPSS 72th percentile

CWECWE 502VNDConvertplugTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-03
2024-05-03 16:15Z
CRIT

CVE-2022-48697 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-48697

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests nvme/004: BUG: KASAN: user-memory-access in blk_mq_complete_request_remote+0xac/0x350 Read of size 4 at addr 0000607bd1835943 by task kworker/13:1/460 Workqueue: nvmet-wq nvme_loop_execute_work [nvme_loop] Call Trace: show_stack+0x52/0x58 dump_stack_lvl+0x49/0x5e print_report.cold+0x36/0x1e2 kasan_report+0xb9/0 CVSSv3.1 9.8 (CRITICAL) · EPSS 14th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-03
2024-05-03 15:15Z
CRIT

CVE-2022-48686 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-48686

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted. CVSSv3.1 9.8 (CRITICAL) · EPSS 17th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-03
2024-05-03 15:15Z
CRIT

CVE-2022-48673 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-48673

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error state, all RX WR would be completed with WC in IB_WC_WR_FLUSH_ERR status. Current implementation does not wait for it is done, but destroy the QP and free the link group directly. So there is a risk that accessing the freed memory in tasklet context. Here is a crash example: BUG: unable to handle page fault for CVSSv3.1 9.8 (CRITICAL) · EPSS 11th percentile

CWECWE 755TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-03
2024-05-03 03:16Z
MED

CVE-2023-50224 — Tp-link Tl-wr841n_firmware: TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-50224in the wild

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability CVSSv3.1 6.5 (MEDIUM) · EPSS 97th percentile

CWECWE 290VNDTp LinkVNDLinkTYPVulnerabilitySTAitw exploited
6.5
CVSS v3.1
88
Edit Score
2024-05-03
2024-05-03 00:00Z
HIGH

Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Three

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs publishes part three of a deep-dive analysis of REMCOS RAT, detailing the malware's configuration structure (45 of 56 fields recovered), C2 command set (74 of 78 commands reversed), and operational capabilities including keylogging, screenshot/audio capture, password theft via Nirsoft binaries, UAC bypass, and persistence mechanisms. The researchers also released a configuration extractor tool ('conf-tool') that can unpack, modify, and repack REMCOS samples for lab analysis and C2 emulation.

SRFOsTACTA0005TACTA0011TACTA0009SWRemcosTYPResearchTYPThreat IntelSTGDefense Evasion
72
Edit Score
2024-05-02
2024-05-02 19:15Z
HIGH

CVE-2024-34394 — libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-34394

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution. CVSSv3.1 8.1 (HIGH) · EPSS 61th percentile

CWECWE 843TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-05-02
2024-05-02 19:15Z
HIGH

CVE-2024-34393 — libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-34393

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and 64-bit systems), data leak, infinite loop and remote code execution (on 32-bit systems with the XML_PARSE_HUGE flag enabled). CVSSv3.1 8.1 (HIGH) · EPSS 60th percentile

CWECWE 843TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-05-02
2024-05-02 19:15Z
HIGH

CVE-2024-33396 — An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-33396

An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. NOTE: Then maintainer states that the behavior is intended design and notes that the researcher advisory does not provide evidence of arbitrary code execution. CVSSv3.1 8.4 (HIGH)

CWECWE 284TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-4033 — One: The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4033

The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the aiovg_create_attachment_from_external_image_url function in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers, with contributor access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 8.8 (HIGH) · EPSS 93th percentile

CWECWE 434VNDOneTYPVulnerability
8.8
CVSS v3.1
97
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-3895 — Androidbubbles Wp_datepicker: The WP Datepicker plugin for WordPress is vulnerable to unauthorized modification of data due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3895

The WP Datepicker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdp_add_new_datepicker_ajax() function in all versions up to, and including, 2.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options that can be used for privilege escalation. This was partially patched in 2.0.9 and 2.1.0, and fully patched in 2.1.1. CVSSv3.1 8.8 (HIGH) · EPSS 51th percentile

CWECWE 862VNDAndroidbubblesVNDDatepickerTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-3849 — Click: The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3849

The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.35. This makes it possible for authenticated attackers, with contributor access or above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be u CVSSv3.1 8.8 (HIGH) · EPSS 68th percentile

CWECWE 98VNDClickTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-02
2024-05-02 17:15Z
CRIT

CVE-2024-3729 — Dynamiapps Frontend_admin: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to improper missing encryption

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3729

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'fea_encrypt' function in all versions up to, and including, 3.19.4. This makes it possible for unauthenticated attackers to manipulate the user processing forms, which can be used to add and edit administrator user for privilege escalation, or to automatically log in users for authentication bypass, or manipulate the post processing form that can be u CVSSv3.1 9.8 (CRITICAL) · EPSS 68th percentile

CWECWE 754CWECWE 636VNDDynamiappsVNDFrontendTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-3500 — Wpmet Elementskit: The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3500

The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in c CVSSv3.1 8.8 (HIGH) · EPSS 77th percentile

CWECWE 98VNDWpmetVNDElementskitTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-05-02
2024-05-02 17:15Z
HIGH

CVE-2024-3499 — Wpmet Elements_kit_elementor_addons: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3499

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generate_navigation_markup function of the Onepage Scroll module. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, o CVSSv3.1 8.8 (HIGH) · EPSS 82th percentile

CWECWE 98VNDWpmetVNDElementskitTYPVulnerability
8.8
CVSS v3.1
94
Edit Score