FediSecfeeds

##

CVE-2025-14524
(5.3 MEDIUM)

EPSS: 0.03%

updated 2026-01-09T21:32:41

2 posts

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

cR0w@infosec.exchange at 2026-01-08T15:22:45.000Z ##

ZOMG curl CVEs.

#vulnerabilityresearch #vulnerability #cybersecurity #infosec

##

harrysintonen@infosec.exchange at 2026-01-07T07:51:27.000Z ##

#curl 8.18.0 has been released. This release fixes 2 medium and 4 low level vulnerabilities:
- CVE-2025-13034: No QUIC certificate pinning with GnuTLS https://curl.se/docs/CVE-2025-13034.html
- CVE-2025-14017: broken TLS options for threaded LDAPS https://curl.se/docs/CVE-2025-14017.html
- CVE-2025-14524: bearer token leak on cross-protocol redirect https://curl.se/docs/CVE-2025-14524.html
- CVE-2025-14819: OpenSSL partial chain store policy bypass https://curl.se/docs/CVE-2025-14819.html
- CVE-2025-15079: libssh global knownhost override https://curl.se/docs/CVE-2025-15079.html
- CVE-2025-15224: libssh key passphrase bypass without agent set https://curl.se/docs/CVE-2025-15224.html

I discovered the last 2 vulnerabilities.

Download curl 8.18.0 from https://curl.se/download.html

##

CVE-2025-66848
(9.8 CRITICAL)

EPSS: 0.40%

updated 2026-01-09T21:31:34

1 posts

JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and earlier), and ER2 (4.5.1.r4518 and earlier) contain an unauthorized remote command execution vulnerability.

cR0w@infosec.exchange at 2026-01-05T16:30:42.000Z ##

sev:CRIT RCE in JD Cloud NAS Routers

https://www.notion.so/JD-Cloud-Unauth-RCE-2d22b76e8e0c802c975bf186b208d0c2

https://nvd.nist.gov/vuln/detail/CVE-2025-66848

https://www.cve.org/CVERecord?id=CVE-2025-70974

##

CVE-2025-70974
(10.0 CRITICAL)

EPSS: 0.06%

updated 2026-01-09T19:33:18

1 posts

Fastjson before 1.2.48 mishandles autoType because, when an `@type` key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an attacker-supplied payload located elsewhere in that JSON document. This was exploited in the wild in 2023 thro

cR0w@infosec.exchange at 2026-01-09T19:46:49.000Z ##

Perfect 10 in Fastjson. 🥳

It's funny that it appears to be a challenging enough bug that it bypassed at least two previous fixes.

Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an attacker-supplied payload located elsewhere in that JSON document. This was exploited in the wild in 2023 through 2025. NOTE: this issue exists because of an incomplete fix for CVE-2017-18349. Also, a later bypass is covered by CVE-2022-25845.

##

CVE-2025-70161(CVSS UNKNOWN)

EPSS: 0.24%

updated 2026-01-09T18:31:43

1 posts

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing arbitrary code execution.

cR0w@infosec.exchange at 2026-01-09T16:52:52.000Z ##

RUCKUS

https://www.cve.org/CVERecord?id=CVE-2025-69425

https://www.cve.org/CVERecord?id=CVE-2025-69426

EDIMAX

https://www.cve.org/CVERecord?id=CVE-2025-70161

https://www.cve.org/CVERecord?id=CVE-2025-69425

##

CVE-2025-69426(CVSS UNKNOWN)

EPSS: 0.04%

updated 2026-01-09T18:31:43

1 posts

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating system user account within an initialization script. The SSH service is network-accessible without IP-based restrictions. Although the configuration disables SCP and pseudo-TTY allocation, an attacker can authenticate using the hardcoded credentials and establish SSH local port fo

cR0w@infosec.exchange at 2026-01-09T16:52:52.000Z ##

RUCKUS

https://www.cve.org/CVERecord?id=CVE-2025-69426

EDIMAX

https://www.cve.org/CVERecord?id=CVE-2025-70161

https://www.cve.org/CVERecord?id=CVE-2025-69425

##

CVE-2025-69425(CVSS UNKNOWN)

EPSS: 0.10%

updated 2026-01-09T18:31:43

1 posts

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2004 running with root privileges. Authentication to this service relies on a hardcoded Time-based One-Time Password (TOTP) secret and an embedded static token. An attacker who extracts these credentials from the appliance or a compromised device can generate valid authentication

cR0w@infosec.exchange at 2026-01-09T16:52:52.000Z ##

RUCKUS

https://www.cve.org/CVERecord?id=CVE-2025-69426

EDIMAX

https://www.cve.org/CVERecord?id=CVE-2025-70161

https://github.com/Afnaan-Ahmed/CVE-2025-14598

##

CVE-2025-14598
(9.8 CRITICAL)

EPSS: 0.03%

updated 2026-01-09T18:31:36

1 posts

BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database.

1 repos

FunctionalProgramming@activitypub.awakari.com at 2026-01-09T12:14:06.000Z ## CVE-2025-14598BeeS Software Solutions BET Portal contains an SQL injection vu... BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected si...

Origin | Interest | Match ##

CVE-2025-64093
(10.0 CRITICAL)

EPSS: 0.22%

updated 2026-01-09T18:31:35

1 posts

Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-64091
(8.6 HIGH)

EPSS: 0.04%

updated 2026-01-09T18:31:35

1 posts

This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of the device.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-64092
(7.5 HIGH)

EPSS: 0.06%

updated 2026-01-09T18:15:50.450000

1 posts

This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-64090
(10.0 CRITICAL)

EPSS: 0.06%

updated 2026-01-09T18:15:49.873000

1 posts

This vulnerability allows authenticated attackers to execute commands via the hostname of the device.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

https://www.cve.org/CVERecord?id=CVE-2025-67004

##

CVE-2025-67004
(0 None)

EPSS: 0.02%

updated 2026-01-09T17:15:53.030000

1 posts

An Information Disclosure vulnerability in CouchCMS 2.4 allow an Admin user to read arbitrary files via traversing directories back after back. It can Disclosure the source code or any other confidential information if weaponize accordingly.

cR0w@infosec.exchange at 2026-01-09T16:58:47.000Z ##

../ in CouchCMS.

##

CVE-2025-46645
(6.5 MEDIUM)

EPSS: 0.45%

updated 2026-01-09T17:15:52.720000

1 posts

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, LTS 2023 release versions 7.10.1.0 through 7.10.1.70, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

CVE-2025-15035
(0 None)

EPSS: 0.03%

updated 2026-01-09T17:15:51.823000

1 posts

Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 (vpn modules) allows an authenticated adjacent attacker to delete arbitrary server file, leading to possible loss of critical system files and service interruption or degraded functionality.This issue affects Archer AXE75 v1.6: ≤ build 20250107.

cR0w@infosec.exchange at 2026-01-09T17:25:56.000Z ##

TP-Link

https://www.cve.org/CVERecord?id=CVE-2025-15035

##

CVE-2026-22081(CVSS UNKNOWN)

EPSS: 0.06%

updated 2026-01-09T12:32:33

1 posts

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the missing HTTPOnly flag for session cookies associated with the web-based administrative interface. A remote at-tacker could exploit this vulnerability by capturing session cookies transmitted over an insecure HTTP connection. Successful exploitation of this vulnerability could all

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

https://www.cve.org/CVERecord?id=CVE-2025-7072

##

CVE-2025-7072(CVSS UNKNOWN)

EPSS: 0.12%

updated 2026-01-09T12:32:33

1 posts

The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker could use to execute commands with root privileges. This vulnerability has been fixed in firmware version: 1.00.67 for CG3000TC and 1.00.27 for CG3000T.

cR0w@infosec.exchange at 2026-01-09T14:02:58.000Z ##

Hardcoded creds in KAON routers but it doesn't say what those creds are.

##

CVE-2026-22079(CVSS UNKNOWN)

EPSS: 0.03%

updated 2026-01-09T12:32:32

1 posts

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the credentials transmitt

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2026-22080(CVSS UNKNOWN)

EPSS: 0.03%

updated 2026-01-09T12:32:32

1 posts

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the transmission of credentials encoded using reversible Base64 encoding through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the Base64-encoded credentials. Successful exploitat

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

https://cert.pl/en/posts/2026/01/CVE-2025-66049/

##

CVE-2025-66049(CVSS UNKNOWN)

EPSS: 0.07%

updated 2026-01-09T12:32:32

1 posts

Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed, potentially compromising user privacy and security. The vendor has not replied to the CNA. Possibly all fir

cR0w@infosec.exchange at 2026-01-09T14:01:19.000Z ##

Four CVEs in Vivotek cameras but no PoCs.

##

CVE-2026-22082
(0 None)

EPSS: 0.18%

updated 2026-01-09T12:15:54.403000

1 posts

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the use of login credentials as the session ID through its web-based administrative interface. A remote attacker could exploit this vulnerability by intercepting network traffic and capturing the session ID during insecure transmission. Successful exploitation of this vulnerability

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

https://access.redhat.com/security/cve/CVE-2025-69195

##

CVE-2025-69195
(7.6 HIGH)

EPSS: 0.08%

updated 2026-01-09T09:31:24

1 posts

A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted URL, which, upon user interaction with wget2, can lead to memory corruption. This can cause the applic

cR0w@infosec.exchange at 2026-01-09T14:10:48.000Z ##

DoS ( and maybe more? :crow_plead: ) in wget2.

##

CVE-2025-69194
(8.8 HIGH)

EPSS: 0.03%

updated 2026-01-09T08:15:57.980000

1 posts

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.

1 repos

https://github.com/secdongle/POC_CVE-2025-69194

cR0w@infosec.exchange at 2026-01-09T14:11:40.000Z ##

And a ../ :brdScream:

https://access.redhat.com/security/cve/CVE-2025-69194

##

CVE-2026-0732
(6.3 MEDIUM)

EPSS: 0.43%

updated 2026-01-09T00:30:34

1 posts

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgrade_filter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

https://access.redhat.com/security/cve/CVE-2025-14025

##

CVE-2025-14025
(8.6 HIGH)

EPSS: 0.06%

updated 2026-01-09T00:30:28

1 posts

A flaw was found in Ansible Automation Platform (AAP). Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Gateway level for Gateway-specific operations. However, this vulnerability allows read-only tokens to perform write operations on backend services (e.g., Controller, Hub, EDA). If this flaw were exploited, an attacker‘s capabilities would only be limited by role based access contro

cR0w@infosec.exchange at 2026-01-08T15:16:38.000Z ##

A flaw was found in Ansible Automation Platform (AAP). Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Gateway level for Gateway-specific operations. However, this vulnerability allows read-only tokens to perform write operations on backend services (e.g., Controller, Hub, EDA). If this flaw were exploited, an attacker‘s capabilities would only be limited by role based access controls (RBAC).

##

CVE-2026-0731
(5.3 MEDIUM)

EPSS: 0.13%

updated 2026-01-08T23:15:44.117000

1 posts

A vulnerability has been found in TOTOLINK WA1200 5.9c.2914. The impacted element is an unknown function of the file cstecgi.cgi of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

https://www.endorlabs.com/learn/cve-2025-12543-host-header-validation-bypass-in-undertow

##

CVE-2025-12543
(9.6 CRITICAL)

EPSS: 0.13%

updated 2026-01-08T23:15:42.690000

2 posts

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user session

raptor@infosec.exchange at 2026-01-09T20:42:54.000Z ##

CVE-2025-12543: Host Header Validation Bypass in #Undertow

##

cR0w@infosec.exchange at 2026-01-07T16:56:51.000Z ##

https://access.redhat.com/security/cve/cve-2025-12543

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.

##

CVE-2025-59468
(9.0 None)

EPSS: 0.22%

updated 2026-01-08T21:31:39

2 posts

This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter.

cR0w@infosec.exchange at 2026-01-08T16:43:57.000Z ##

CVEs are now published for this.

https://github.com/FPokerFace/Security-Advisory/tree/main/CVE-2025-50334

##

DarkWebInformer@infosec.exchange at 2026-01-07T16:07:10.000Z ##

🚨 Multiple Veeam CVEs Identified: Critical Flaws Allow RCE and High-Privilege Actions

CVE-2025-55125:

A flaw that allows a Backup or Tape Operator to achieve remote code execution (RCE) as root by crafting a malicious backup configuration file.

▪️Severity: High
▪️CVSS v3.1: 7.2
▪️Source: Discovered during internal testing

CVE-2025-59468:

A vulnerability enabling a Backup Administrator to execute remote code as the postgres user by supplying a malicious password parameter.

▪️Severity: Medium
▪️CVSS v3.1: 6.7
▪️Source: Discovered during internal testing

CVE-2025-59469

A security issue that allows a Backup or Tape Operator to write arbitrary files with root privileges.

▪️Severity: High
▪️CVSS v3.1: 7.2
▪️Source: Discovered during internal testing

CVE-2025-59470

A vulnerability that permits a Backup or Tape Operator to achieve remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.

▪️CVSS Severity: Critical
▪️CVSS v3.1: 9.0
▪️Source: Discovered during internal testing

Veeam: https://www.veeam.com/kb4738
Blog format: https://darkwebinformer.com/multiple-veeam-cves-identified-critical-flaws-allow-rce-and-high-privilege-actions/

##

CVE-2025-50334
(7.5 HIGH)

EPSS: 0.12%

updated 2026-01-08T21:31:39

1 posts

An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component

cR0w@infosec.exchange at 2026-01-08T16:42:05.000Z ##

DoS in Technitium DNS server.

##

CVE-2025-52691
(10.0 CRITICAL)

EPSS: 10.87%

updated 2026-01-08T21:31:33

5 posts

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

https://github.com/sajjadsiam/CVE-2025-52691-poc

10 repos

https://github.com/hilwa24/CVE-2025-52691

https://github.com/yt2w/CVE-2025-52691

https://github.com/DeathShotXD/CVE-2025-52691-APT-PoC

https://github.com/rxerium/CVE-2025-52691

https://github.com/Ashwesker/Ashwesker-CVE-2025-52691

https://github.com/nxgn-kd01/smartermail-cve-scanner

https://github.com/watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691

https://github.com/you-ssef9/CVE-2025-52691

https://github.com/SuJing-cy/CVE-2025-2025-52691-SmarterMail-Exp

campuscodi@mastodon.social at 2026-01-11T14:44:17.000Z ##

watchTowr has published a technical analysis of a CVSS 10 pre-auth RCE vulnerability in SmartTool's SmarterMail business email platform.

The vulnerability (CVE-2025-52691) was silently patched in Oct and publicly disclosed only a few months later in Dec

https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/

##

campuscodi@mastodon.social at 2026-01-11T14:44:17.000Z ##

watchTowr has published a technical analysis of a CVSS 10 pre-auth RCE vulnerability in SmartTool's SmarterMail business email platform.

The vulnerability (CVE-2025-52691) was silently patched in Oct and publicly disclosed only a few months later in Dec

https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/

##

_r_netsec@infosec.exchange at 2026-01-08T18:43:06.000Z ##

Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691) - watchTowr Labs https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/

##

AAKL@infosec.exchange at 2026-01-08T18:39:17.000Z ##

New.

WatchTower: Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691) https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/ #infosec #threatresearch #vulnerability

##

cR0w@infosec.exchange at 2026-01-08T18:37:45.000Z ##

Get your popcorn, it's time for another watchTowr Labs post. This one is a pre-auth RCE in SmarterMail. :blobcatpopcorn:

https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/

##

CVE-2025-65518
(7.5 HIGH)

EPSS: 0.02%

updated 2026-01-08T21:30:40

1 posts

Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition. The vulnerability exists in the get_password.php endpoint, where a crafted request containing a malicious payload can cause the affected web interface to continuously reload, rendering the service unavailable to legitimate users. An attacker can exploit this issue remotely without authentication, r

1 repos

https://github.com/Jainil-89/CVE-2025-65518

cR0w@infosec.exchange at 2026-01-08T18:58:46.000Z ##

DoS in Plesk.

https://github.com/Jainil-89/CVE-2025-65518/blob/main/cve.md

##

CVE-2025-13151
(7.5 HIGH)

EPSS: 0.04%

updated 2026-01-08T21:30:33

1 posts

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

cR0w@infosec.exchange at 2026-01-07T21:34:43.000Z ##

Reset the "Days since ASN1 vuln" sign to 0.

https://www.cve.org/CVERecord?id=CVE-2025-13151

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

##

CVE-2026-21858
(10.0 CRITICAL)

EPSS: 0.03%

updated 2026-01-08T20:15:45.453000

11 posts

n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise dependi

https://github.com/Chocapikk/CVE-2026-21858

3 repos

https://github.com/eduardorossi84/CVE-2026-21858-POC

https://github.com/Ashwesker/Ashwesker-CVE-2026-21858

cyberveille@mastobot.ping.moi at 2026-01-12T01:00:04.000Z ##

📢 CVE-2026-21858 : RCE non authentifiée critique dans n8n (maj 1.121.0 requise)
📝 Source : Cyera Research Labs (blog de recherche, 7 janvier 2026).
📖 cyberveille : https://cyberveille.ch/posts/2026-01-10-cve-2026-21858-rce-non-authentifiee-critique-dans-n8n-maj-1-121-0-requise/
🌐 source : https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858
#CVE_2026_21858 #IOC #Cyberveille

##

zeldman@front-end.social at 2026-01-09T17:16:01.000Z ##

Tell your friends.

The vulnerability, tracked as CVE-2026-21858 (CVSS score: 10.0), has been codenamed Ni8mare by Cyera Research Labs. Security researcher Dor Attias discovered and reported it on November 9, 2025.

https://thehackernews.com/2026/01/critical-n8n-vulnerability-cvss-100.html

##

hrbrmstr@mastodon.social at 2026-01-09T12:31:34.000Z ##

this was some great and necessary debunking of the ridiculous attempt at a "look how cool we are” CVE assignment.

between this and the "it's actually not a real vuln from an internet-perspective" for the recent daft D-Link CVE assignment, the cyber part of 2026 is off to a really horrible start.

https://horizon3.ai/attack-research/attack-blogs/the-ni8mare-test-n8n-rce-under-the-microscope-cve-2026-21858/

##

AAKL@infosec.exchange at 2026-01-08T17:33:15.000Z ##

New.

Picus: Ni8mare: n8n CVE-2026-21858 Remote Code Execution Vulnerability Explained https://www.picussecurity.com/resource/blog/ni8mare-n8n-cve-2026-21858-remote-code-execution-vulnerability-explained #threatresearch #infosec

##

jbhall56@infosec.exchange at 2026-01-08T13:41:46.000Z ##

Tracked as CVE-2026-21858 (CVSS score 10), the bug enables remote code execution without authentication. https://www.securityweek.com/critical-vulnerability-exposes-n8n-instances-to-takeover-attacks/

##

benzogaga33@mamot.fr at 2026-01-08T10:40:02.000Z ##

Ni8mare – CVE-2026-21858 : cette faille critique permet de pirater les serveurs n8n https://www.it-connect.fr/ni8mare-cve-2026-21858-faille-critique-n8n/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #n8n

##

Dam_ned@mamot.fr at 2026-01-08T09:08:16.000Z ##

qui c'est qui se servait de #n8n ici ? on a un petit #CVE à niveau 10 là https://github.com/Chocapikk/CVE-2026-21858 #iagenIsHell

##

beyondmachines1@infosec.exchange at 2026-01-08T08:01:43.000Z ##

Critical Ni8mare flaw in n8n allows unauthenticated remote takeover

n8n patched a critical vulnerability (CVE-2026-21858) that allows unauthenticated attackers to steal server files and gain full remote code execution. The flaw exploits a logic error in webhook and file upload handling to bypass authentication and compromise sensitive automation credentials.

**If you are using n8n, this is urgent. If possible, try to isolate all n8n instances from the internet and accessible from trusted networks only. Then update to version 1.121.0 ASAP. If you can't patch, block webhooks and file uploads from any access from untrusted networks and the internet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-ni8mare-flaw-in-n8n-allows-unauthenticated-remote-takeover-4-x-4-z-8/gD2P6Ple2L

##

r3pek@r3pek.org at 2026-01-07T21:33:12.000Z ##

Say hello to #Ni8mare, the first named vulnerability of 2026.

https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858

#cve-2026-21858

##

cR0w@infosec.exchange at 2026-01-07T16:00:06.000Z ##

RE: https://infosec.exchange/@cR0w/115849435087390469

LMFAO another one. 🥳

https://github.com/n8n-io/n8n/security/advisories/GHSA-v4pr-fm98-w9pg

https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858

https://www.cve.org/CVERecord?id=CVE-2026-21858 ( not yet published )

##

_r_netsec@infosec.exchange at 2026-01-07T15:58:07.000Z ##

Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858) https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858

##

CVE-2017-20212
(6.2 MEDIUM)

EPSS: 0.19%

updated 2026-01-08T19:15:53.680000

1 posts

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverified input parameters. Attackers can exploit the /var/www/data/controllers/api/xml.php readFile() function to access local system files without authentication.

cR0w@infosec.exchange at 2026-01-07T23:26:02.000Z ##

Old FLIR CVEs just published.

##

CVE-2025-5965
(7.2 HIGH)

EPSS: 0.15%

updated 2026-01-08T18:31:36

1 posts

In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.This issue affects Infra Monitoring: from 25.10.0 before 25.10

cR0w@infosec.exchange at 2026-01-05T15:03:05.000Z ##

Centreon

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15026

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15029

sev:HIGH - https://www.cve.org/CVERecord?id=CVE-2025-5965

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12511

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12513

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12519

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-13056

##

CVE-2025-12513
(6.8 MEDIUM)

EPSS: 0.02%

updated 2026-01-08T18:31:36

1 posts

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts configuration form modules) allows Stored XSS to users with high privileges. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.

cR0w@infosec.exchange at 2026-01-05T15:03:05.000Z ##

Centreon

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15026

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15029

sev:HIGH - https://www.cve.org/CVERecord?id=CVE-2025-5965

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12511

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12513

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12519

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-13056

##

CVE-2025-13056
(6.8 MEDIUM)

EPSS: 0.02%

updated 2026-01-08T18:31:36

1 posts

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Administration ACL menu configuration modules) allows Stored XSS to users with high privileges. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.

cR0w@infosec.exchange at 2026-01-05T15:03:05.000Z ##

Centreon

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15026

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15029

sev:HIGH - https://www.cve.org/CVERecord?id=CVE-2025-5965

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12511

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12513

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12519

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-13056

##

CVE-2025-15029
(9.8 CRITICAL)

EPSS: 0.03%

updated 2026-01-08T18:31:36

1 posts

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

cR0w@infosec.exchange at 2026-01-05T15:03:05.000Z ##

Centreon

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15026

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15029

sev:HIGH - https://www.cve.org/CVERecord?id=CVE-2025-5965

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12511

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12513

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12519

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-13056

##

CVE-2025-55125
(7.8 HIGH)

EPSS: 0.06%

updated 2026-01-08T18:30:56

2 posts

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.

cR0w@infosec.exchange at 2026-01-08T16:43:57.000Z ##

CVEs are now published for this.

https://github.com/b1gchoi/CVE-2025-59470

##

DarkWebInformer@infosec.exchange at 2026-01-07T16:07:10.000Z ##

🚨 Multiple Veeam CVEs Identified: Critical Flaws Allow RCE and High-Privilege Actions

CVE-2025-55125:

A flaw that allows a Backup or Tape Operator to achieve remote code execution (RCE) as root by crafting a malicious backup configuration file.

▪️Severity: High
▪️CVSS v3.1: 7.2
▪️Source: Discovered during internal testing

CVE-2025-59468:

A vulnerability enabling a Backup Administrator to execute remote code as the postgres user by supplying a malicious password parameter.

▪️Severity: Medium
▪️CVSS v3.1: 6.7
▪️Source: Discovered during internal testing

CVE-2025-59469

A security issue that allows a Backup or Tape Operator to write arbitrary files with root privileges.

▪️Severity: High
▪️CVSS v3.1: 7.2
▪️Source: Discovered during internal testing

CVE-2025-59470

A vulnerability that permits a Backup or Tape Operator to achieve remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.

▪️CVSS Severity: Critical
▪️CVSS v3.1: 9.0
▪️Source: Discovered during internal testing

Veeam: https://www.veeam.com/kb4738
Blog format: https://darkwebinformer.com/multiple-veeam-cves-identified-critical-flaws-allow-rce-and-high-privilege-actions/

##

CVE-2025-59470
(9.0 None)

EPSS: 0.22%

updated 2026-01-08T18:30:56

6 posts

This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.

1 repos

cR0w@infosec.exchange at 2026-01-08T16:43:57.000Z ##

CVEs are now published for this.

https://www.cve.org/CVERecord?id=CVE-2025-67089

##

beyondmachines1@infosec.exchange at 2026-01-08T09:01:43.000Z ##

Veeam Patches Critical Remote Code Execution Flaw in Backup & Replication v13

Veeam patched multiple vulnerabilities in Backup & Replication version 13, including a critical RCE flaw (CVE-2025-59470) that allows privileged operators to execute commands as the database user. These flaws are high-value targets for ransomware groups seeking to disable recovery options during attacks.

**If you are using Veeam Backup & Replication version 13, make sure all backup systems are isolated from the internet and accessible from trusted networks only. Limit the number of users with Backup or Tape Operator roles and update to version 13.0.1.1071 as soon as possible.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/veeam-patches-critical-remote-code-execution-flaw-in-backup-replication-v13-f-f-r-b-m/gD2P6Ple2L

##

DarkWebInformer@infosec.exchange at 2026-01-07T16:07:10.000Z ##

🚨 Multiple Veeam CVEs Identified: Critical Flaws Allow RCE and High-Privilege Actions

CVE-2025-55125:

A flaw that allows a Backup or Tape Operator to achieve remote code execution (RCE) as root by crafting a malicious backup configuration file.

▪️Severity: High
▪️CVSS v3.1: 7.2
▪️Source: Discovered during internal testing

CVE-2025-59468:

A vulnerability enabling a Backup Administrator to execute remote code as the postgres user by supplying a malicious password parameter.

▪️Severity: Medium
▪️CVSS v3.1: 6.7
▪️Source: Discovered during internal testing

CVE-2025-59469

A security issue that allows a Backup or Tape Operator to write arbitrary files with root privileges.

▪️Severity: High
▪️CVSS v3.1: 7.2
▪️Source: Discovered during internal testing

CVE-2025-59470

A vulnerability that permits a Backup or Tape Operator to achieve remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.

▪️CVSS Severity: Critical
▪️CVSS v3.1: 9.0
▪️Source: Discovered during internal testing

Veeam: https://www.veeam.com/kb4738
Blog format: https://darkwebinformer.com/multiple-veeam-cves-identified-critical-flaws-allow-rce-and-high-privilege-actions/

##

jbhall56@infosec.exchange at 2026-01-07T13:58:39.000Z ##

Tracked as CVE-2025-59470, this RCE security flaw affects Veeam Backup & Replication 13.0.1.180 and all earlier version 13 builds. https://www.bleepingcomputer.com/news/security/new-veeam-vulnerabilities-expose-backup-servers-to-rce-attacks/

##

PostgreSQL@activitypub.awakari.com at 2026-01-07T11:31:04.000Z ## Veeam resolves CVSS 9.0 RCE flaw and other security issues Veeam patched a critical RCE flaw in Backup & Replication, CVE-2025-59470, rated CVSS 9.0, along with other vulnerabilities. Veeam rel...

#Breaking #News #Security #Hacking #hacking #news #information #security #news #IT #Information

Origin | Interest | Match ##

PostgreSQL@activitypub.awakari.com at 2026-01-07T10:46:41.000Z ## ⚠️ Veeam fixed a critical Backup & Replication flaw enabling remote code execution as the postgres user. CVE-2025-59470 can be abused by authenticated Backup or Tape Operators via crafted p...

Origin | Interest | Match ##

CVE-2025-67091
(6.5 MEDIUM)

EPSS: 0.01%

updated 2026-01-08T18:30:56

1 posts

An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call. The script is executed with root privileges when triggered via the LuCI web interface or authenticated API calls to manage packages. The vulnerable code uses shell redirection to create a lock file in the world-wr

cR0w@infosec.exchange at 2026-01-08T15:58:14.000Z ##

GL-iNet

https://www.cve.org/CVERecord?id=CVE-2025-67090

https://www.cve.org/CVERecord?id=CVE-2025-67091

cc: @Dio9sys @da_667 @Viss

https://www.cve.org/CVERecord?id=CVE-2025-67089

##

CVE-2025-67090
(5.1 MEDIUM)

EPSS: 0.03%

updated 2026-01-08T18:30:56

1 posts

The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix available in version 4.8.2 GL.Inet AX1800 Version 4.6.4 & 4.6.8 lacks rate limiting or account lockout mechanisms on the authentication endpoint (`/cgi-bin/luci`). An unauthenticated attacker on the local network can perform unlimited password attempts against the admin interface.

cR0w@infosec.exchange at 2026-01-08T15:58:14.000Z ##

GL-iNet

https://www.cve.org/CVERecord?id=CVE-2025-67090

https://www.cve.org/CVERecord?id=CVE-2025-67091

cc: @Dio9sys @da_667 @Viss

https://www.cve.org/CVERecord?id=CVE-2026-0625

##

CVE-2026-0625(CVSS UNKNOWN)

EPSS: 0.43%

updated 2026-01-08T18:30:33

3 posts

Multiple D-Link DSL gateway devices contain a command injection vulnerability in the dnscfg.cgi endpoint due to improper sanitization of user-supplied DNS configuration parameters. An unauthenticated remote attacker can inject and execute arbitrary shell commands, resulting in remote code execution. The affected endpoint is also associated with unauthenticated DNS modification (“DNSChanger”) behav

jbhall56@infosec.exchange at 2026-01-07T13:50:08.000Z ##

Tracked as CVE-2026-0625 (CVSS score of 9.3), the security defect exists because the dnscfg.cgi library does not properly sanitize user-supplied DNS configuration parameters. https://www.securityweek.com/hackers-exploit-zero-day-in-discontinued-d-link-devices/

##

beyondmachines1@infosec.exchange at 2026-01-07T10:01:16.000Z ##

Critical RCE Vulnerability Exploited in Legacy D-Link DSL Routers

D-Link legacy DSL are actively exploited using a vulnerability, CVE-2026-0625, which allows unauthenticated remote code execution and DNS hijacking.

**If you are using D-Link routers, check this advisory whether you are using any of the vulnerable devices. If yes, make sure the devices are isolated from the internet, reset to complex password and force trusted upstream DNS servers. Plan a very quick replacement for these devices, they are exploitable and won't be getting patches.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/critical-rce-vulnerability-exploited-in-legacy-d-link-dsl-routers-j-2-i-i-g/gD2P6Ple2L

##

cR0w@infosec.exchange at 2026-01-05T21:28:34.000Z ##

First D-Link of 2026 :dumpster_fire_gif:

##

CVE-2026-21881
(9.1 CRITICAL)

EPSS: 0.07%

updated 2026-01-08T18:15:59.500000

1 posts

Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below is vulnerable to a critical authentication bypass when REVERSE_PROXY_AUTH is enabled. The application blindly trusts HTTP headers for user authentication without verifying the request originated from a trusted reverse proxy. An attacker can impersonate any user, including administrators, by simply send

beyondmachines1@infosec.exchange at 2026-01-09T10:01:43.000Z ##

Kanboard patches critical authentication bypass and information disclosure flaws

Kanboard version 1.2.49 fixes a critical authentication bypass (CVE-2026-21881) and two other flaws that allow attackers to impersonate users, enumerate LDAP data, and perform open redirects. The most severe vulnerability allows full administrative access by spoofing HTTP headers when reverse proxy authentication is enabled.

**If possible, ensure your Kanboard instance is isolated from the internet and accessible only via a trusted network or VPN. Then plan a quick patch. If you use reverse proxy authentication, prioritize configuring your web server to strip all identity headers from external requests, since that's the most dangerous attack vector.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/kanboard-patches-critical-authentication-bypass-and-information-disclosure-flaws-d-m-l-8-h/gD2P6Ple2L

##

CVE-2025-59469
(9.0 CRITICAL)

EPSS: 0.04%

updated 2026-01-08T18:15:58.570000

2 posts

This vulnerability allows a Backup or Tape Operator to write files as root.

cR0w@infosec.exchange at 2026-01-08T16:43:57.000Z ##

CVEs are now published for this.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59157/

##

DarkWebInformer@infosec.exchange at 2026-01-07T16:07:10.000Z ##

🚨 Multiple Veeam CVEs Identified: Critical Flaws Allow RCE and High-Privilege Actions

CVE-2025-55125:

A flaw that allows a Backup or Tape Operator to achieve remote code execution (RCE) as root by crafting a malicious backup configuration file.

▪️Severity: High
▪️CVSS v3.1: 7.2
▪️Source: Discovered during internal testing

CVE-2025-59468:

A vulnerability enabling a Backup Administrator to execute remote code as the postgres user by supplying a malicious password parameter.

▪️Severity: Medium
▪️CVSS v3.1: 6.7
▪️Source: Discovered during internal testing

CVE-2025-59469

A security issue that allows a Backup or Tape Operator to write arbitrary files with root privileges.

▪️Severity: High
▪️CVSS v3.1: 7.2
▪️Source: Discovered during internal testing

CVE-2025-59470

A vulnerability that permits a Backup or Tape Operator to achieve remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.

▪️CVSS Severity: Critical
▪️CVSS v3.1: 9.0
▪️Source: Discovered during internal testing

Veeam: https://www.veeam.com/kb4738
Blog format: https://darkwebinformer.com/multiple-veeam-cves-identified-critical-flaws-allow-rce-and-high-privilege-actions/

##

CVE-2025-59157
(9.9 CRITICAL)

EPSS: 0.22%

updated 2026-01-08T18:09:49.800000

1 posts

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.420.7, the Git Repository field during project creation is vulnerable to command injection. User input is not properly sanitized, allowing attackers to inject arbitrary shell commands that execute on the underlying server during the deployment workflow. A regular member u

thehackerwire@mastodon.social at 2026-01-05T18:21:36.000Z ##

🔴 CVE-2025-59157 - Critical (9.9)

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.420.7, the Git Repository field during project creation is vulnerable to command injection. User input is not properly ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

##

CVE-2025-67303
(7.5 HIGH)

EPSS: 0.05%

updated 2026-01-08T18:09:49.800000

1 posts

An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface

1 repos

https://github.com/joker-xiaoyan/CVE-2025-67303

cR0w@infosec.exchange at 2026-01-05T16:04:12.000Z ##

This might be one to keep an eye on.

https://www.cve.org/CVERecord?id=CVE-2025-67303

An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface

##

CVE-2025-12511
(6.8 MEDIUM)

EPSS: 0.02%

updated 2026-01-08T18:09:49.800000

1 posts

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (DSM extenstio configuration modules) allows Stored XSS to user with elevated privileges. This issue affects Infra Monitoring: from 25.10.0 before 25.10.1, from 24.10.0 before 24.10.4, from 24.04.0 before 24.04.8.

cR0w@infosec.exchange at 2026-01-05T15:03:05.000Z ##

Centreon

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15026

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15029

sev:HIGH - https://www.cve.org/CVERecord?id=CVE-2025-5965

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12511

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12513

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12519

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-13056

##

CVE-2025-12519
(5.3 MEDIUM)

EPSS: 0.01%

updated 2026-01-08T18:09:49.800000

1 posts

Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows Accessing Functionality Not Properly Constrained by ACLs, resulting in Information Disclosure like downtime or acknowledgement configurations. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.

cR0w@infosec.exchange at 2026-01-05T15:03:05.000Z ##

Centreon

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15026

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15029

sev:HIGH - https://www.cve.org/CVERecord?id=CVE-2025-5965

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12511

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12513

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12519

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-13056

##

CVE-2025-15026
(9.8 CRITICAL)

EPSS: 0.04%

updated 2026-01-08T18:09:49.800000

1 posts

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

cR0w@infosec.exchange at 2026-01-05T15:03:05.000Z ##

Centreon

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15026

sev:CRIT - https://www.cve.org/CVERecord?id=CVE-2025-15029

sev:HIGH - https://www.cve.org/CVERecord?id=CVE-2025-5965

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12511

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12513

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-12519

sev:MED - https://www.cve.org/CVERecord?id=CVE-2025-13056

##

CVE-2025-68428
(0 None)

EPSS: 0.08%

updated 2026-01-08T18:09:23.230000

4 posts

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsanitized paths to the loadFile method, a user can retrieve file contents of arbitrary files in the local file system the node process is running in. The file contents

1 repos

https://github.com/12nio/CVE-2025-68428_PoC

cyberveille@mastobot.ping.moi at 2026-01-12T01:30:04.000Z ##

📢 CVE-2025-68428 : faille critique dans jsPDF (Node.js) permettant la lecture de fichiers locaux, corrigée en 4.0.0
📝 Selon IT-Connect (08/01/2026), une vulnérabilité critique CVE-2025-68428 affecte...
📖 cyberveille : https://cyberveille.ch/posts/2026-01-10-cve-2025-68428-faille-critique-dans-jspdf-node-js-permettant-la-lecture-de-fichiers-locaux-corrigee-en-4-0-0/
🌐 source : https://www.it-connect.fr/faille-critique-jspdf-cve-2025-68428/
#CVE_2025_68428 #Node_js #Cyberveille

##

DarkWebInformer@infosec.exchange at 2026-01-11T02:00:20.000Z ##

❗️CVE-2025-68428: Critical Path Traversal in jsPDF

GitHub: https://github.com/12nio/CVE-2025-68428_PoC

CVSS: 9.2
CVE Published: January 5th, 2026
Exploit Published: January 8th, 2026

News source: https://www.bleepingcomputer.com/news/security/critical-jspdf-flaw-lets-hackers-steal-secrets-via-generated-pdfs/

##

benzogaga33@mamot.fr at 2026-01-09T10:40:03.000Z ##

Cette faille critique dans jsPDF (CVE-2025-68428) peut exposer les données de votre serveur https://www.it-connect.fr/faille-critique-jspdf-cve-2025-68428/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

beyondmachines1@infosec.exchange at 2026-01-07T09:01:17.000Z ##

Critical path traversal flaw reported in jsPDF library

jsPDF version 4.0.0 patches a critical path traversal vulnerability (CVE-2025-68428) that allows attackers to extract sensitive server files by embedding them into generated PDFs. The flaw affects Node.js environments where user-supplied paths are passed to methods like loadFile or addImage.

**If you are using jsPDF, review this advisory and your use case. Ideally, update to version 4.0.0 and use the Node.js --permission flag to limit which files the process can read. Also, as a normal best practice, always sanitize and validate user input before passing it to libraries.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-path-traversal-flaw-reported-in-jspdf-library-a-5-v-c-c/gD2P6Ple2L

##

CVE-2020-36925
(9.8 CRITICAL)

EPSS: 0.52%

updated 2026-01-08T18:09:23.230000

2 posts

Arteco Web Client DVR/NVR contains a session hijacking vulnerability with insufficient session ID complexity that allows remote attackers to bypass authentication. Attackers can brute force session IDs within a specific numeric range to obtain valid sessions and access live camera streams without authorization.

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

https://www.cve.org/CVERecord?id=CVE-2026-0641

##

CVE-2025-14997
(7.2 HIGH)

EPSS: 0.46%

updated 2026-01-08T18:09:23.230000

1 posts

The BuddyPress Xprofile Custom Field Types plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_field' function in all versions up to, and including, 1.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code executio

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

CVE-2026-0641
(6.3 MEDIUM)

EPSS: 3.17%

updated 2026-01-08T18:09:23.230000

2 posts

A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

cR0w@infosec.exchange at 2026-01-06T19:32:47.000Z ##

TOTOLINK

https://www.cve.org/CVERecord?id=CVE-2025-15471

##

CVE-2025-15471
(9.8 CRITICAL)

EPSS: 0.15%

updated 2026-01-08T18:09:23.230000

3 posts

A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file /goformX/formFSrvX. The manipulation of the argument SZCMD results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

beyondmachines1@infosec.exchange at 2026-01-08T10:01:43.000Z ##

Unpatched command Injection flaw reported in Trendnet TEW-713RE extenders

Trendnet TEW-713RE range extenders are reportd to have a critical command injection flaw (CVE-2025-15471) that allows unauthenticated attackers to gain root access. The flaw is not patched and the company has not responded to disclosure attempts.

**If you are using TEW-713RE range extenders, make sure they are isolated from the internet and accessible from trusted networks only. Since Trendnet has not released a fix, plan a replacement with supported hardware.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/unpatched-command-injection-flaw-reported-in-trendnet-tew-713re-extenders-i-2-q-8-w/gD2P6Ple2L

##

AAKL@infosec.exchange at 2026-01-07T17:15:33.000Z ##

This was updated yesterday.

EUVD: Critical TRENDnet vulnerability, also known as CVE-2025-15471 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206251

New:

Critical: Blood Bank Management System 1.0 vulnerability CVE-2025-63525 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-200000 #infosec

##

cR0w@infosec.exchange at 2026-01-06T21:54:37.000Z ##

TRENDnet

https://www.nokia.com/we-are-nokia/security/product-security-advisory/CVE-2025-0980/

##

CVE-2025-0980
(6.4 MEDIUM)

EPSS: 0.01%

updated 2026-01-08T18:09:23.230000

1 posts

Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials.

cR0w@infosec.exchange at 2026-01-07T14:17:58.000Z ##

No PoC but this one could be interesting to watch.

Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials.

##

CVE-2020-36907
(7.5 HIGH)

EPSS: 0.38%

updated 2026-01-08T18:09:23.230000

1 posts

Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36909
(6.5 MEDIUM)

EPSS: 0.03%

updated 2026-01-08T18:09:23.230000

1 posts

SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to read, write, and delete files using the edit_config_files CGI script. Attackers can manipulate POST request parameters in /cgi-bin/cgix/edit_config_files to access and modify files outside the intended /etc/config/ directory.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36918
(4.3 MEDIUM)

EPSS: 0.02%

updated 2026-01-08T18:09:23.230000

1 posts

iDS6 DSSPro Digital Signage System 6.2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can craft malicious web pages to trick logged-in administrators into adding unauthorized users by exploiting the lack of CSRF protections.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36922
(7.5 HIGH)

EPSS: 0.08%

updated 2026-01-08T18:09:23.230000

1 posts

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36923
(9.8 CRITICAL)

EPSS: 0.07%

updated 2026-01-08T18:09:23.230000

1 posts

Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36915
(7.5 HIGH)

EPSS: 0.04%

updated 2026-01-08T18:09:23.230000

1 posts

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36924
(7.5 HIGH)

EPSS: 0.06%

updated 2026-01-08T18:09:23.230000

1 posts

Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter. Attackers can exploit this vulnerability to hijack user sessions, execute cross-site scripting code, and modify display content by manipulating the input material type.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

https://www.cve.org/CVERecord?id=CVE-2025-6225

##

CVE-2025-6225
(0 None)

EPSS: 0.89%

updated 2026-01-08T18:08:54.147000

2 posts

Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9.40.02

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

cR0w@infosec.exchange at 2026-01-07T14:21:20.000Z ##

Kieback&Peter

https://github.com/fevar54/CVE-2026-0628-POC

##

CVE-2026-0628
(8.8 HIGH)

EPSS: 0.02%

updated 2026-01-08T18:08:54.147000

2 posts

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)

1 repos

beyondmachines1@infosec.exchange at 2026-01-08T12:01:43.000Z ##

Google patches high-risk WebView flaw in first 2026 Chrome update

Google released Chrome 143.0.7499.192/193 to fix a high-risk vulnerability (CVE-2026-0628) in the WebView component that could allow malicious extensions to inject scripts into privileged pages.

**If you are using Google Chrome or other Chromium-based browsers (Edge, Brave, Vivaldi, Opera...) patch your browser ASAP. No critical flaws in this update, but don't wait for the flaw to become actively exploited. Update now, it's trivial and all your tabs reopen after the update.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/google-patches-high-risk-webview-flaw-in-first-2026-chrome-update-8-y-o-a-0/gD2P6Ple2L

##

technadu@infosec.exchange at 2026-01-07T11:42:45.000Z ##

Google has patched a high-severity Chrome WebView vulnerability tracked as CVE-2026-0628, caused by insufficient policy enforcement in the tag component.

The flaw could allow attackers to bypass security controls in applications embedding WebView, increasing risk across desktop and mobile ecosystems.

Full Article :
https://www.technadu.com/google-patches-high-severity-chrome-webview-flaw-cve-2026-0628-in-the-tag-component/617762/

#ChromeSecurity #WebView #CVE2026 #Infosec #ApplicationSecurity

##

CVE-2025-69222
(9.1 CRITICAL)

EPSS: 0.09%

updated 2026-01-08T18:08:54.147000

1 posts

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery (SSRF) vulnerability due to missing restrictions of the Actions feature in the default configuration. LibreChat enables users to configure agents with predefined instructions and actions that can interact with remote services via OpenAPI specifications, supporting various HTTP methods

LLMs@activitypub.awakari.com at 2026-01-07T22:54:23.000Z ## CVE-2025-69222 - LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions CVE ID : CVE-2025-69222 Published : Jan. 7, 2026, 9:17 p.m. | 1 hour, 10 minutes ago Descriptio...

Origin | Interest | Match ##

CVE-2026-22540
(0 None)

EPSS: 0.04%

updated 2026-01-08T18:08:54.147000

1 posts

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

cR0w@infosec.exchange at 2026-01-07T14:33:11.000Z ##

DoS via ARP flood. In 2026. And this is the kind of shit people are putting on the Internet and connecting to home and industrial networks.

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly, the denial of service (DoS) results in a restart of the charger functionalities.

https://www.cve.org/CVERecord?id=CVE-2026-22540

##

CVE-2026-21877
(9.9 CRITICAL)

EPSS: 0.05%

updated 2026-01-08T18:08:18.457000

6 posts

n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in version 1.121.3. Administrators can reduce exposure by disabling the Git node and limiting access for untrusted u

1 repos

https://github.com/Ashwesker/Ashwesker-CVE-2026-21877

beyondmachines1@infosec.exchange at 2026-01-09T16:01:43.000Z ##

Another critical RCE flaw reported in n8n automation platform

n8n patched another critical remote code execution vulnerability, CVE-2026-21877, which allows authenticated users to bypass sandboxes and take full control of automation servers. Over 100,000 instances are potentially exposed.

**Make sure all automation servers are isolated from the internet and accessible from trusted networks only. Update n8n to version 1.121.3 immediately and restrict workflow creation rights to a small group of trusted administrators to prevent unauthorized code execution.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/another-critical-rce-flaw-reported-in-n8n-automation-platform-m-8-g-u-s/gD2P6Ple2L

##

christopherkunz@chaos.social at 2026-01-09T12:00:20.000Z ##

Uh... how is https://github.com/n8n-io/n8n/security/advisories/GHSA-v364-rw7m-3263 (CVE-2026-21877) a 10.0 with PR:L? That is not possible, either it's a 9.9 or it has PR:N.

##

Hackread@mstdn.social at 2026-01-08T20:09:35.000Z ##

n8n users need to update immediately after a CVSS 10.0 (CVE-2026-21877) authenticated remote code execution flaw was found that could let an attacker take over the system. Update to version 1.121.3 or higher and restrict privileges now.

Read: https://hackread.com/n8n-users-patch-full-system-takeover-vulnerability/

#n8n #Cybersecurity #Vulnerability #Infosec

##

decio@infosec.exchange at 2026-01-08T11:29:24.000Z ##

"Une seconde faille critique RCE affecte n8n – CVE-2026-21877 : comment se protéger ?"
👇
https://www.it-connect.fr/n8n-cve-2026-21877-faille-critique-rce/

Pas mal d'instances pas à jour et exposées aussi sur les réseaux EU et CH selon Onyphe
👇
https://bsky.app/profile/onyphe.io/post/3mbvqc665zc2w

Infos
👇
https://cve.circl.lu/vuln/CVE-2026-21877

💬
⬇️
https://infosec.pub/post/40204482

#CyberVeille #n8n

##

benzogaga33@mamot.fr at 2026-01-07T16:40:02.000Z ##

Une seconde faille critique RCE affecte n8n – CVE-2026-21877 : comment se protéger ? https://www.it-connect.fr/n8n-cve-2026-21877-faille-critique-rce/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #n8n

##

cR0w@infosec.exchange at 2026-01-06T17:54:53.000Z ##

Another perfect 10 in n8n? LMFAO. 🥳

https://github.com/n8n-io/n8n/security/advisories/GHSA-v364-rw7m-3263

Edit to add the link to the CVE. It's not published at this time though.

https://www.cve.org/CVERecord?id=CVE-2026-21877

##

CVE-2025-62224
(5.5 MEDIUM)

EPSS: 0.06%

updated 2026-01-08T18:08:18.457000

2 posts

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network.

AAKL@infosec.exchange at 2026-01-08T17:31:11.000Z ##

Microsoft posted an update to its security guide yesterday:

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62224 #Microsoft #vulnerability #Android #Chromium #Edge

##

Android@activitypub.awakari.com at 2026-01-07T08:00:00.000Z ## CVE-2025-62224 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized at...

#CVE

Origin | Interest | Match ##

CVE-2025-67089
(8.1 HIGH)

EPSS: 0.23%

updated 2026-01-08T18:08:18.457000

1 posts

A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges

cR0w@infosec.exchange at 2026-01-08T15:58:14.000Z ##

GL-iNet

https://www.cve.org/CVERecord?id=CVE-2025-67089

https://www.cve.org/CVERecord?id=CVE-2025-67090

https://www.cve.org/CVERecord?id=CVE-2025-67091

cc: @Dio9sys @da_667 @Viss

https://www.cve.org/CVERecord?id=CVE-2025-15346

##

CVE-2025-15346
(0 None)

EPSS: 0.06%

updated 2026-01-08T18:08:18.457000

1 posts

A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced. Because the WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT flag was not included, the behavior effectively matched CERT_OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client

cR0w@infosec.exchange at 2026-01-08T15:31:23.000Z ##

No awoo for you.

A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced. Because the WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT flag was not included, the behavior effectively matched CERT_OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client certificate was provided. This results in improper authentication, allowing attackers to bypass mutual TLS (mTLS) client authentication by omitting a client certificate during the TLS handshake. The issue affects versions up to and including 5.8.2.

##

CVE-2025-14819
(5.3 MEDIUM)

EPSS: 0.03%

updated 2026-01-08T18:08:18.457000

2 posts

When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.

cR0w@infosec.exchange at 2026-01-08T15:22:45.000Z ##

ZOMG curl CVEs.

#vulnerabilityresearch #vulnerability #cybersecurity #infosec

##

harrysintonen@infosec.exchange at 2026-01-07T07:51:27.000Z ##

#curl 8.18.0 has been released. This release fixes 2 medium and 4 low level vulnerabilities:
- CVE-2025-13034: No QUIC certificate pinning with GnuTLS https://curl.se/docs/CVE-2025-13034.html
- CVE-2025-14017: broken TLS options for threaded LDAPS https://curl.se/docs/CVE-2025-14017.html
- CVE-2025-14524: bearer token leak on cross-protocol redirect https://curl.se/docs/CVE-2025-14524.html
- CVE-2025-14819: OpenSSL partial chain store policy bypass https://curl.se/docs/CVE-2025-14819.html
- CVE-2025-15079: libssh global knownhost override https://curl.se/docs/CVE-2025-15079.html
- CVE-2025-15224: libssh key passphrase bypass without agent set https://curl.se/docs/CVE-2025-15224.html

I discovered the last 2 vulnerabilities.

Download curl 8.18.0 from https://curl.se/download.html

##

CVE-2025-15224
(3.1 LOW)

EPSS: 0.05%

updated 2026-01-08T18:08:18.457000

2 posts

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.

cR0w@infosec.exchange at 2026-01-08T15:22:45.000Z ##

ZOMG curl CVEs.

#vulnerabilityresearch #vulnerability #cybersecurity #infosec

##

harrysintonen@infosec.exchange at 2026-01-07T07:51:27.000Z ##

#curl 8.18.0 has been released. This release fixes 2 medium and 4 low level vulnerabilities:
- CVE-2025-13034: No QUIC certificate pinning with GnuTLS https://curl.se/docs/CVE-2025-13034.html
- CVE-2025-14017: broken TLS options for threaded LDAPS https://curl.se/docs/CVE-2025-14017.html
- CVE-2025-14524: bearer token leak on cross-protocol redirect https://curl.se/docs/CVE-2025-14524.html
- CVE-2025-14819: OpenSSL partial chain store policy bypass https://curl.se/docs/CVE-2025-14819.html
- CVE-2025-15079: libssh global knownhost override https://curl.se/docs/CVE-2025-15079.html
- CVE-2025-15224: libssh key passphrase bypass without agent set https://curl.se/docs/CVE-2025-15224.html

I discovered the last 2 vulnerabilities.

Download curl 8.18.0 from https://curl.se/download.html

##

CVE-2025-69260
(7.5 HIGH)

EPSS: 0.09%

updated 2026-01-08T18:08:18.457000

1 posts

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.

AAKL@infosec.exchange at 2026-01-07T16:58:30.000Z ##

Tenable Research Advisories have a new entry:

Critical: CVE-2025-69258; CVE-2025-69259 and CVE-2025-69260: Trend Micro Apex Central Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-01 @tenable #vulnerability #infosec

##

CVE-2025-69259
(7.5 HIGH)

EPSS: 0.09%

updated 2026-01-08T18:08:18.457000

1 posts

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability..

AAKL@infosec.exchange at 2026-01-07T16:58:30.000Z ##

Tenable Research Advisories have a new entry:

Critical: CVE-2025-69258; CVE-2025-69259 and CVE-2025-69260: Trend Micro Apex Central Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-01 @tenable #vulnerability #infosec

##

CVE-2025-15079
(5.3 MEDIUM)

EPSS: 0.03%

updated 2026-01-08T15:32:30

2 posts

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

cR0w@infosec.exchange at 2026-01-08T15:22:45.000Z ##

ZOMG curl CVEs.

#vulnerabilityresearch #vulnerability #cybersecurity #infosec

##

harrysintonen@infosec.exchange at 2026-01-07T07:51:27.000Z ##

#curl 8.18.0 has been released. This release fixes 2 medium and 4 low level vulnerabilities:
- CVE-2025-13034: No QUIC certificate pinning with GnuTLS https://curl.se/docs/CVE-2025-13034.html
- CVE-2025-14017: broken TLS options for threaded LDAPS https://curl.se/docs/CVE-2025-14017.html
- CVE-2025-14524: bearer token leak on cross-protocol redirect https://curl.se/docs/CVE-2025-14524.html
- CVE-2025-14819: OpenSSL partial chain store policy bypass https://curl.se/docs/CVE-2025-14819.html
- CVE-2025-15079: libssh global knownhost override https://curl.se/docs/CVE-2025-15079.html
- CVE-2025-15224: libssh key passphrase bypass without agent set https://curl.se/docs/CVE-2025-15224.html

I discovered the last 2 vulnerabilities.

Download curl 8.18.0 from https://curl.se/download.html

##

CVE-2025-13034
(5.9 MEDIUM)

EPSS: 0.02%

updated 2026-01-08T15:32:29

2 posts

When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey` with the curl tool,curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper check, thus not noticing a possible impostor. To skip this check, the connection had to be done with

cR0w@infosec.exchange at 2026-01-08T15:22:45.000Z ##

ZOMG curl CVEs.

#vulnerabilityresearch #vulnerability #cybersecurity #infosec

##

harrysintonen@infosec.exchange at 2026-01-07T07:51:27.000Z ##

#curl 8.18.0 has been released. This release fixes 2 medium and 4 low level vulnerabilities:
- CVE-2025-13034: No QUIC certificate pinning with GnuTLS https://curl.se/docs/CVE-2025-13034.html
- CVE-2025-14017: broken TLS options for threaded LDAPS https://curl.se/docs/CVE-2025-14017.html
- CVE-2025-14524: bearer token leak on cross-protocol redirect https://curl.se/docs/CVE-2025-14524.html
- CVE-2025-14819: OpenSSL partial chain store policy bypass https://curl.se/docs/CVE-2025-14819.html
- CVE-2025-15079: libssh global knownhost override https://curl.se/docs/CVE-2025-15079.html
- CVE-2025-15224: libssh key passphrase bypass without agent set https://curl.se/docs/CVE-2025-15224.html

I discovered the last 2 vulnerabilities.

Download curl 8.18.0 from https://curl.se/download.html

##

CVE-2025-69258
(9.8 CRITICAL)

EPSS: 0.15%

updated 2026-01-08T15:31:28

3 posts

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.

technadu@infosec.exchange at 2026-01-09T10:10:46.000Z ##

PoC exploits are now public for CVE-2025-69258 in Trend Micro Apex Central (on-premise), a vulnerability that could allow unauthenticated RCE on affected systems.

A patch is available, and there are no confirmed exploitation reports so far. Public PoCs, however, tend to accelerate attacker interest.

Follow @technadu for objective and technically grounded infosec updates.

Source: https://www.helpnetsecurity.com/2026/01/08/trend-micro-apex-central-cve-2025-69258-rce-poc/

#Infosec #VulnerabilityDisclosure #PatchManagement #RCE #EnterpriseSecurity #ThreatLandscape

##

beyondmachines1@infosec.exchange at 2026-01-09T08:01:42.000Z ##

Critical flaws and public exploits released for Trend Micro Apex Central on-premise management

Trend Micro patched a critical remote code execution vulnerability (CVE-2025-69258) in Apex Central that allows attackers to gain SYSTEM privileges. Public exploit code is now available, making immediate patching of on-premise installations vital.

**Make sure all Apex Central servers are isolated from the internet and accessible from trusted networks only. Install Critical Patch Build 7190 as soon as possible.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-flaws-and-public-exploits-released-for-trend-micro-apex-central-on-premise-management-g-t-o-p-0/gD2P6Ple2L

##

AAKL@infosec.exchange at 2026-01-07T16:58:30.000Z ##

Tenable Research Advisories have a new entry:

Critical: CVE-2025-69258; CVE-2025-69259 and CVE-2025-69260: Trend Micro Apex Central Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-01 @tenable #vulnerability #infosec

##

CVE-2025-14017(CVSS UNKNOWN)

EPSS: 0.01%

updated 2026-01-08T12:30:38

2 posts

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

cR0w@infosec.exchange at 2026-01-08T15:22:45.000Z ##

ZOMG curl CVEs.

#vulnerabilityresearch #vulnerability #cybersecurity #infosec

##

harrysintonen@infosec.exchange at 2026-01-07T07:51:27.000Z ##

#curl 8.18.0 has been released. This release fixes 2 medium and 4 low level vulnerabilities:
- CVE-2025-13034: No QUIC certificate pinning with GnuTLS https://curl.se/docs/CVE-2025-13034.html
- CVE-2025-14017: broken TLS options for threaded LDAPS https://curl.se/docs/CVE-2025-14017.html
- CVE-2025-14524: bearer token leak on cross-protocol redirect https://curl.se/docs/CVE-2025-14524.html
- CVE-2025-14819: OpenSSL partial chain store policy bypass https://curl.se/docs/CVE-2025-14819.html
- CVE-2025-15079: libssh global knownhost override https://curl.se/docs/CVE-2025-15079.html
- CVE-2025-15224: libssh key passphrase bypass without agent set https://curl.se/docs/CVE-2025-15224.html

I discovered the last 2 vulnerabilities.

Download curl 8.18.0 from https://curl.se/download.html

##

CVE-2025-37164
(10.0 CRITICAL)

EPSS: 81.31%

updated 2026-01-08T00:32:16

4 posts

A remote code execution issue exists in HPE OneView.

https://github.com/LACHHAB-Anas/Exploit_CVE-2025-37164

3 repos

https://github.com/g0vguy/CVE-2025-37164-PoC

https://github.com/rxerium/CVE-2025-37164

Hackread@mstdn.social at 2026-01-10T14:02:18.000Z ##

CISA urges emergency patching after a critical HPE OneView vulnerability (CVE-2025-37164) with active exploitation - Check your versions and update to OneView v11.00 or later now.

Read: https://hackread.com/cisa-emergency-patching-exploit-hpe-oneview-flaw/

#Cybersecurity #HPE #OneView #CISA #Vulnerability

##

DarkWebInformer@infosec.exchange at 2026-01-08T15:33:41.000Z ##

🚨 CISA adds two vulnerabilities to the KEV Catalog

https://darkwebinformer.com/cisa-kev-catalog/

CVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerability

CVSS: 9.3

CVE-2025-37164: Hewlett Packard Enterprise OneView Code Injection Vulnerability

CVSS: 10

##

AAKL@infosec.exchange at 2026-01-07T19:41:11.000Z ##

CISA has updated the KEV catalogue.

CVE-2025-37164: Hewlett Packard Enterprise OneView Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-37164

CVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2009-0556 #infosec #CISA #Microsoft #HP

##

cisakevtracker@mastodon.social at 2026-01-07T19:01:14.000Z ##

CVE ID: CVE-2025-37164
Vendor: Hewlett Packard (HP)
Product: OneView
Date Added: 2026-01-07
Notes: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2025-37164
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-37164

##

CVE-2017-20214
(7.5 HIGH)

EPSS: 0.03%

updated 2026-01-08T00:31:21

1 posts

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.

cR0w@infosec.exchange at 2026-01-07T23:26:02.000Z ##

Old FLIR CVEs just published.

##

CVE-2017-20216
(9.8 CRITICAL)

EPSS: 0.31%

updated 2026-01-08T00:31:21

1 posts

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem() function through shell_exec() calls. Exploitation evidence was observed by the Shadowserver Foundation on 2

cR0w@infosec.exchange at 2026-01-07T23:26:02.000Z ##

Old FLIR CVEs just published.

##

CVE-2017-20213
(7.5 HIGH)

EPSS: 0.10%

updated 2026-01-08T00:31:21

1 posts

FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera series without requiring any authentication.

cR0w@infosec.exchange at 2026-01-07T23:26:02.000Z ##

Old FLIR CVEs just published.

##

CVE-2017-20215
(8.8 HIGH)

EPSS: 0.26%

updated 2026-01-08T00:31:21

1 posts

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complete control of the thermal camera system.

cR0w@infosec.exchange at 2026-01-07T23:26:02.000Z ##

Old FLIR CVEs just published.

https://darkwebinformer.com/cisa-kev-catalog/

##

CVE-2009-0556
(8.8 HIGH)

EPSS: 76.76%

updated 2026-01-07T21:32:42

6 posts

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

beyondmachines1@infosec.exchange at 2026-01-09T12:01:43.000Z ##

CISA warns of active attacks legacy PowerPoint flaw

CISA is warning about active exploitation of CVE-2009-0556, a critical memory corruption vulnerability in legacy Microsoft PowerPoint (2000-2003 versions) that allows attackers to execute malware and move laterally through networks via malicious .ppt files.

**If you're still running legacy Microsoft Office (2000-2003 or 2004 for Mac), remove it and upgrade immediately to a supported version. This 15-year-old PowerPoint flaw is being actively exploited to install malware. If upgrading isn't possible right away, remove PowerPoint from these old systems and avoid opening any .ppt files.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-warns-of-active-attacks-legacy-powerpoint-flaw-c-b-1-9-i/gD2P6Ple2L

##

DarkWebInformer@infosec.exchange at 2026-01-08T15:33:41.000Z ##

🚨 CISA adds two vulnerabilities to the KEV Catalog

CVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerability

CVSS: 9.3

CVE-2025-37164: Hewlett Packard Enterprise OneView Code Injection Vulnerability

CVSS: 10

##

hexmasteen@chaos.social at 2026-01-08T08:55:01.000Z ##

Yesterday (2026-01-07) CISA added a new entry to it's catalog of known exploited vulnerabilities. It's about CVE-2009-0556, a vulnerability in PowerPoint 2003 which is EOL since 2014.

#InfoSec is a lost cause if we keep using unmaintained software.

##

AAKL@infosec.exchange at 2026-01-07T19:41:11.000Z ##

CISA has updated the KEV catalogue.

CVE-2025-37164: Hewlett Packard Enterprise OneView Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-37164

CVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2009-0556 #infosec #CISA #Microsoft #HP

##

j91321@infosec.exchange at 2026-01-07T19:26:42.000Z ##

Huh, CVE-2009-0556 added to KEV? :blobcateyes: https://www.cisa.gov/news-events/alerts/2026/01/07/cisa-adds-two-known-exploited-vulnerabilities-catalog

##

cisakevtracker@mastodon.social at 2026-01-07T19:00:58.000Z ##

CVE ID: CVE-2009-0556
Vendor: Microsoft
Product: Office
Date Added: 2026-01-07
Notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 ; https://nvd.nist.gov/vuln/detail/CVE-2009-0556
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2009-0556

##

CVE-2025-61489
(6.5 MEDIUM)

EPSS: 3.07%

updated 2026-01-07T18:30:33

1 posts

A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string.

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

CVE-2026-20029
(4.9 MEDIUM)

EPSS: 0.03%

updated 2026-01-07T18:30:33

2 posts

A vulnerability in the licensing features of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information.  This vulnerability is due to improper parsing of XML that is processed by the web-based management interface of Cisco ISE and Cisco ISE-P

jbhall56@infosec.exchange at 2026-01-08T13:20:22.000Z ##

The vulnerability, tracked as CVE-2026-20029 (CVSS score: 4.9), resides in the licensing feature and could allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information. https://thehackernews.com/2026/01/cisco-patches-ise-security.html

##

AAKL@infosec.exchange at 2026-01-07T16:25:43.000Z ##

Cisco has two new advisories:

CVE-2026-20026 and CVE-2026-20027: Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH

CVE-2026-20029: Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-jWSbSDKt @TalosSecurity #Cisco #vulnerability #infosec

##

CVE-2026-22536(CVSS UNKNOWN)

EPSS: 0.01%

updated 2026-01-07T18:30:33

1 posts

The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions

cR0w@infosec.exchange at 2026-01-07T18:40:05.000Z ##

WTF kind of CVE is this? It doesn't even say what product is vulnerable.

https://nvd.nist.gov/vuln/detail/CVE-2026-22536

All it says is:

The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions

Slow clap for S21sec.

##

CVE-2026-20027
(5.3 MEDIUM)

EPSS: 0.03%

updated 2026-01-07T18:30:33

1 posts

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a

AAKL@infosec.exchange at 2026-01-07T16:25:43.000Z ##

Cisco has two new advisories:

CVE-2026-20026 and CVE-2026-20027: Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH

CVE-2026-20029: Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-jWSbSDKt @TalosSecurity #Cisco #vulnerability #infosec

##

CVE-2026-20026
(5.8 MEDIUM)

EPSS: 0.09%

updated 2026-01-07T18:30:33

1 posts

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result

AAKL@infosec.exchange at 2026-01-07T16:25:43.000Z ##

Cisco has two new advisories:

CVE-2026-20026 and CVE-2026-20027: Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH

CVE-2026-20029: Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-jWSbSDKt @TalosSecurity #Cisco #vulnerability #infosec

##

CVE-2026-22542(CVSS UNKNOWN)

EPSS: 0.04%

updated 2026-01-07T18:30:33

1 posts

An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service.

cR0w@infosec.exchange at 2026-01-07T15:47:58.000Z ##

RE: https://infosec.exchange/@cR0w/115854579789971369

This one is even better. 🤣

An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service.

Good luck with your Nessus scans.

https://www.cve.org/CVERecord?id=CVE-2026-22542

##

CVE-2026-22541(CVSS UNKNOWN)

EPSS: 0.04%

updated 2026-01-07T18:30:33

1 posts

The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

cR0w@infosec.exchange at 2026-01-07T15:43:14.000Z ##

RE: https://infosec.exchange/@cR0w/115854304322324575

Ooh, this one only requires L3 access to DoS.

The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

https://www.cve.org/CVERecord?id=CVE-2026-22541

Edit to correct the link.

##

CVE-2026-21635
(5.3 MEDIUM)

EPSS: 0.02%

updated 2026-01-07T18:30:25

1 posts

An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device that was only adopted via Ethernet.

cR0w@infosec.exchange at 2026-01-05T16:01:49.000Z ##

Did you do it? Did you hack the Ubiquiti shit? Good. Here's more.

https://community.ui.com/releases/Security-Advisory-Bulletin-059-059/0c0b7f7a-68b7-41b9-987e-554f4b40e0e6

https://www.cve.org/CVERecord?id=CVE-2026-21635

##

CVE-2025-13947
(7.4 HIGH)

EPSS: 0.05%

updated 2026-01-07T18:30:22

1 posts

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.

Ubuntu@activitypub.awakari.com at 2026-01-05T14:23:36.000Z ## Ubuntu 25.10: Critical WebKitGTK Security Updates USN-7941-1 CVE-2025-13947 Several security issues were fixed in WebKitGTK.

#Ubuntu #Linux #Distribution #- #Security #Advisories

Origin | Interest | Match ##

CVE-2025-69277
(4.5 MEDIUM)

EPSS: 0.02%

updated 2026-01-07T17:16:02.003000

1 posts

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.

Ubuntu@activitypub.awakari.com at 2026-01-08T16:59:39.000Z ## Ubuntu 22.04 LTS: Critical Info Exposure in libsodium CVE-2025-69277 Sodium could be made to expose sensitive information.

#Ubuntu #Linux #Distribution #- #Security #Advisories

Origin | Interest | Match ##

CVE-2025-38352
(7.4 HIGH)

EPSS: 0.25%

updated 2026-01-07T15:30:14

6 posts

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent or debugger right after unlock_task_sighand(). If a concurrent posix_cpu_timer_del() runs at that

3 repos

https://github.com/Crime2/poc-CVE-2025-38352

https://github.com/farazsth98/poc-CVE-2025-38352

https://github.com/farazsth98/chronomaly

Android@activitypub.awakari.com at 2026-01-07T14:40:40.000Z ## Chronomaly — PoC Exploit Released for Android/Linux Kernel Vulnerability CVE-2025-38352 https://cybersecuritynews.com/chronomaly-exploit/ Commentaires : voir le flux Atom ouvrir dans le navigateur

#kernel #noyau_linux #android #faille #programmation_concurrente #exploit

Origin | Interest | Match ##

Android@activitypub.awakari.com at 2026-01-07T14:40:40.000Z ## Chronomaly — PoC Exploit Released for Android/Linux Kernel Vulnerability CVE-2025-38352 https://cybersecuritynews.com/chronomaly-exploit/ Commentaires : voir le flux Atom ouvrir dans le navigateur

#exploit #kernel #noyau_linux #android #faille #programmation_concurrente

Origin | Interest | Match ##

linux@activitypub.awakari.com at 2026-01-07T14:40:40.000Z ## Chronomaly — PoC Exploit Released for Android/Linux Kernel Vulnerability CVE-2025-38352 https://cybersecuritynews.com/chronomaly-exploit/ Commentaires : voir le flux Atom ouvrir dans le navigateur

#android #faille #programmation_concurrente #exploit #kernel #noyau_linux

Origin | Interest | Match ##

Android@activitypub.awakari.com at 2026-01-07T14:09:29.000Z ## PoC Exploit Released for Android/Linux Kernel Vulnerability CVE-2025-38352 A proof-of-concept (PoC) exploit for CVE-2025-38352, a critical race condition vulnerability in the Linux kernel, has been...

#Cyber #Security #News #Vulnerability #News #cyber #security #cyber #security #news #vulnerability

Origin | Interest | Match ##

Android@activitypub.awakari.com at 2026-01-07T13:47:51.000Z ## PoC Exploit Released for Android and Linux Kernel Vulnerability CVE-2025-38352 A fully functional exploit has been released for CVE-2025-38352, a critical use-after-free vulnerability in the Linux ...

#Cyber #Security #News #Cybersecurity #Linux #Vulnerabilities #Cyber #Security #Cyber #security #news

Origin | Interest | Match ##

farazsth98@nso.group at 2026-01-05T13:44:56.000Z ##

I'm excited to finally share Chronomaly, a kernel exploit for Android and Linux kernels 5.10.x using CVE-2025-38352.

As a reminder, please patch your Android devices if you haven't already!

The exploit requires winning two race conditions, and then requires using the cross-cache exploitation technique twice. It's the most complex exploit I've written by far.

Here's the Github repository: https://github.com/farazsth98/chronomaly

And here is the accompanying blog post (part 3): https://faith2dxy.xyz/2026-01-03/cve_2025_38352_analysis_part_3/

##

CVE-2025-15472
(7.2 HIGH)

EPSS: 0.12%

updated 2026-01-07T12:31:32

1 posts

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of the component httpd . This manipulation of the argument DeviceURL causes os command injection. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

cR0w@infosec.exchange at 2026-01-06T22:36:08.000Z ##

@Dio9sys @da_667 Another one:

https://www.cve.org/CVERecord?id=CVE-2025-15472

##

CVE-2025-14631(CVSS UNKNOWN)

EPSS: 0.02%

updated 2026-01-07T12:31:27

1 posts

A NULL Pointer Dereference vulnerability in TP-Link Archer BE400 V1(802.11 modules) allows an adjacent attacker to cause a denial-of-service (DoS) by triggering a device reboot. This issue affects Archer BE400: xi 1.1.0 Build 20250710 rel.14914.

cR0w@infosec.exchange at 2026-01-07T16:43:02.000Z ##

Tenda

https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC23_Buffer_Overflow/Tenda%20AC23_Buffer_Overflow.md#poc

TP-Link

https://www.cve.org/CVERecord?id=CVE-2025-14631

TRENDnet

https://pentagonal-time-3a7.notion.site/TrendNet-TEW-811DRU-2d2e5dd4c5a58016a612e99853b835f8

##

CVE-2020-36913
(5.3 MEDIUM)

EPSS: 0.09%

updated 2026-01-06T21:31:40

1 posts

All-Dynamics Software enlogic:show 2.0.2 contains a session fixation vulnerability that allows attackers to set a predefined PHP session identifier during the login process. Attackers can forge HTTP GET requests to welcome.php with a manipulated session token to bypass authentication and potentially execute cross-site request forgery attacks.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

https://www.cve.org/CVERecord?id=CVE-2026-0640

##

CVE-2025-63525
(9.6 CRITICAL)

EPSS: 0.03%

updated 2026-01-06T21:30:27

1 posts

An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with escalated privileges via crafted request to delete.php.

AAKL@infosec.exchange at 2026-01-07T17:15:33.000Z ##

This was updated yesterday.

EUVD: Critical TRENDnet vulnerability, also known as CVE-2025-15471 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206251

New:

Critical: Blood Bank Management System 1.0 vulnerability CVE-2025-63525 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-200000 #infosec

##

CVE-2026-0640
(8.8 HIGH)

EPSS: 0.09%

updated 2026-01-06T18:31:44

1 posts

A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

cR0w@infosec.exchange at 2026-01-06T16:04:59.000Z ##

Tenda

H3C

https://www.cve.org/CVERecord?id=CVE-2025-60262

https://www.cve.org/CVERecord?id=CVE-2025-14942

##

CVE-2025-14942(CVSS UNKNOWN)

EPSS: 0.07%

updated 2026-01-06T18:31:43

1 posts

wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client to send a bogus signature, or trick the client into skipping user authentication. This affects client applications with wolfSSH version 1.4.21 and earlier. Users of wolfSSH must update or apply the fix patch and it’s recommended to update credentials used. This fix is also recommend

cR0w@infosec.exchange at 2026-01-06T17:30:20.000Z ##

Oops.

wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client to send a bogus signature, or trick the client into skipping user authentication. This affects client applications with wolfSSH version 1.4.21 and earlier. Users of wolfSSH must update or apply the fix patch and it’s recommended to update credentials used. This fix is also recommended for wolfSSH server applications. While there aren’t any specific attacks on server applications, the same defect is present. Thanks to Aina Toky Rasoamanana of Valeo and Olivier Levillain of Telecom SudParis for the report.

sev:CRIT 9.4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Red

##

CVE-2025-39477
(9.8 CRITICAL)

EPSS: 0.04%

updated 2026-01-06T18:31:43

1 posts

Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8.

thehackerwire@mastodon.social at 2026-01-06T17:22:52.000Z ##

🔴 CVE-2025-39477 - Critical (9.8)

Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-39477/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

##

CVE-2025-60262
(9.8 CRITICAL)

EPSS: 0.11%

updated 2026-01-06T18:31:43

1 posts

An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote attackers could gain root-level control over the devices.

cR0w@infosec.exchange at 2026-01-06T16:04:59.000Z ##

Tenda

https://www.cve.org/CVERecord?id=CVE-2026-0640

H3C

https://www.cve.org/CVERecord?id=CVE-2025-60262

##

CVE-2020-36906
(4.3 MEDIUM)

EPSS: 0.02%

updated 2026-01-06T18:31:42

1 posts

P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to add new admin users, change passwords, and modify system configurations by tricking authenticated users into loading a specially crafted form.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36916
(8.8 HIGH)

EPSS: 0.02%

updated 2026-01-06T18:31:42

1 posts

TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system access.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36920
(8.8 HIGH)

EPSS: 0.05%

updated 2026-01-06T18:31:42

1 posts

iDS6 DSSPro Digital Signage System 6.2 contains an improper access control vulnerability that allows authenticated users to elevate privileges through console JavaScript functions. Attackers can create users, modify roles and permissions, and potentially achieve full application takeover by exploiting insecure direct object references.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36921
(7.5 HIGH)

EPSS: 0.19%

updated 2026-01-06T18:31:42

1 posts

RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files. Attackers can visit multiple endpoints to retrieve system resources and debug log information without authentication.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36917
(7.5 HIGH)

EPSS: 0.06%

updated 2026-01-06T18:31:42

1 posts

iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36912
(9.8 CRITICAL)

EPSS: 0.04%

updated 2026-01-06T18:31:42

1 posts

Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36910
(8.8 HIGH)

EPSS: 0.33%

updated 2026-01-06T18:31:42

1 posts

Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36914
(7.5 HIGH)

EPSS: 0.04%

updated 2026-01-06T18:31:35

1 posts

QiHang Media Web Digital Signage 3.0.9 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept user authentication credentials through cleartext cookie transmission. Attackers can perform man-in-the-middle attacks to capture and potentially misuse stored authentication credentials transmitted in an insecure manner.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36908
(5.3 MEDIUM)

EPSS: 0.02%

updated 2026-01-06T18:31:34

1 posts

SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

##

CVE-2020-36905
(7.5 HIGH)

EPSS: 0.05%

updated 2026-01-06T18:31:33

1 posts

FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.

cR0w@infosec.exchange at 2026-01-06T16:10:56.000Z ##

Assorted old vulns whose CVEs were just published. Quick glance looks like mostly random IoS stuff.

https://github.com/AlphabugX/CVE-2025-54957

##

CVE-2025-54957
(6.5 MEDIUM)

EPSS: 0.05%

updated 2026-01-06T18:31:24

3 posts

An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution data is processed by evo_priv.c from the DD+ bitstream, the decoder writes that data into a buffer. The length calculation for a write can overflow due to an integer wraparound. This can lead to the allocated buffer being too small, and the

1 repos

jbhall56@infosec.exchange at 2026-01-08T13:10:58.000Z ##

The flaw is tracked as CVE-2025-54957 and its existence came to light in October 2025 after it was discovered by Google researchers. https://www.securityweek.com/critical-dolby-vulnerability-patched-in-android/

##

Android@activitypub.awakari.com at 2026-01-06T18:54:22.000Z ## Google fixes critical Dolby Decoder bug in Android January update Android’s January 2026 update fixes CVE-2025-54957, a critical Dolby audio decoder flaw discovered by Google researchers in Octob...

#Breaking #News #Mobile #Security #Android #CVE-2025-54957 #Google #Hacking #hacking #news #information

Origin | Interest | Match ##

Android@activitypub.awakari.com at 2026-01-06T13:50:36.000Z ## Critical Dolby Vulnerability Patched in Android The flaw is tracked as CVE-2025-54957 and its existence came to light in October 2025 after it was discovered by Google researchers. The post Critica...

#Vulnerabilities #Android #Dolby #vulnerability

Origin | Interest | Match ##

CVE-2025-68455(CVSS UNKNOWN)

EPSS: 0.57%

updated 2026-01-06T15:52:19

1 posts

Note that attackers must have administrator access to the Craft Control Panel for this to work. Users should update to the patched versions (5.8.21 and 4.16.17) to mitigate the issue. Resources: https://github.com/craftcms/cms/commit/6e608a1a5bfb36943f94f584b7548ca542a86fef https://github.com/craftcms/cms/commit/27f55886098b56c00ddc53b69239c9c9192252c7 https://github.com/craftcms/cms/commit/e

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

CVE-2025-12793(CVSS UNKNOWN)

EPSS: 0.01%

updated 2026-01-06T03:31:42

1 posts

An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the application to load a DLL from an attacker-controlled location, potentially resulting in arbitrary code execution. Refer to the ' Security Update for MyASUS' section on the ASUS Security Advisory for more information.

AAKL@infosec.exchange at 2026-01-07T17:52:27.000Z ##

ASUS released a patch yesterday for CVE-2025-12793.

Security Update for MyASUS https://www.asus.com/security-advisory/#bulletins #ASUS #infosec

##

CVE-2026-21634
(6.5 MEDIUM)

EPSS: 0.02%

updated 2026-01-05T21:31:38

1 posts

A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart. Affected Products: UniFi Protect Application (Version 6.1.79 and earlier). Mitigation: Update your UniFi Protect Application to Version 6.2.72 or later.

cR0w@infosec.exchange at 2026-01-05T15:22:30.000Z ##

Go hack more Ubiquiti shit.

https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9

https://www.cve.org/CVERecord?id=CVE-2026-21633

https://www.cve.org/CVERecord?id=CVE-2026-21634

##

CVE-2026-21633
(8.8 HIGH)

EPSS: 0.02%

updated 2026-01-05T21:31:37

2 posts

A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier). Affected Products: UniFi Protect Application (Version 6.1.79 and earlier). Mitigation: Update your UniFi Protect Application to Version 6.2.72 or later.

beyondmachines1@infosec.exchange at 2026-01-07T08:01:17.000Z ##

Ubiquiti patches security flaws in UniFi Protect camera software

Ubiquiti patched two vulnerabilities in the UniFi Protect Application, including CVE-2026-21633 which allows attackers on the local network to access camera feeds without authorization.

**If you are using UniFi Protect Application, plan a quick update. And as usual, make sure all cameras and camera controllers are isolated from the internet and accessible from trusted networks only. Use VLANs to separate your security cameras from guest or general-purpose networks.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/ubiquiti-patches-security-flaws-in-unifi-protect-camera-software-s-f-f-b-f/gD2P6Ple2L

##

cR0w@infosec.exchange at 2026-01-05T15:22:30.000Z ##

Go hack more Ubiquiti shit.

https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9

https://www.cve.org/CVERecord?id=CVE-2026-21633

https://www.cve.org/CVERecord?id=CVE-2026-21634

##

CVE-2025-68668
(9.9 CRITICAL)

EPSS: 0.10%

updated 2026-01-05T19:06:07

2 posts

### Impact A sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. ### Patches In n8n version 1.111.0, a task-runner-based native Python implementation was introduced

beyondmachines1@infosec.exchange at 2026-01-06T19:01:17.000Z ##

Critical sandbox bypass reported in n8n automation platform

n8n patched a critical sandbox bypass vulnerability (CVE-2025-68668) that allows authenticated users to run arbitrary system commands on the host server.

**If you are using n8n, make sure it's isolated from the internet and accessible from trusted users only. Then patch n8n to version 2.0.0 ASAP. Until you can patch, either disable the Python or the entire Code Node.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-sandbox-bypass-reported-in-n8n-automation-platform-v-9-8-b-2/gD2P6Ple2L

##

technadu@infosec.exchange at 2026-01-06T14:06:22.000Z ##

Critical n8n vulnerability (CVE-2025-68668, CVSS 9.9) enables authenticated arbitrary command execution via the Code Node.

Patch released: mitigations include disabling the node or using the task-runner Python sandbox.

https://www.technadu.com/critical-new-vulnerability-in-automation-platform-n8n-allows-arbitrary-command-execution/617646/

Are automation platforms getting enough security scrutiny?

#InfoSec #CVE #n8n #DevSecOps #AutomationSecurity

##

CVE-2025-14346
(9.8 CRITICAL)

EPSS: 0.11%

updated 2026-01-05T18:30:29

3 posts

WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user interaction.

encthenet@flyovercountry.social at 2026-01-05T22:32:06.000Z ##

@mwl

This seems perfect fodder for a plot device.

> https://www.cve.org/CVERecord?id=CVE-2025-14346

(Edit: original post is gone, but this is the CVE mentioned in it.)

##

thehackerwire@mastodon.social at 2026-01-05T16:51:46.000Z ##

🔴 CVE-2025-14346 - Critical (9.8)

WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate config...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14346/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda

##

adulau@infosec.exchange at 2026-01-05T16:21:44.000Z ##

"WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user interaction."

No comments...

🔗 https://vulnerability.circl.lu/vuln/cve-2025-14346

#wheelchair #cybersecurity #vulnerability #hybridthreats

##

CVE-2025-68926
(9.8 CRITICAL)

EPSS: 3.14%

updated 2026-01-05T15:15:45.233000

4 posts

RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token `"rustfs rpc"` that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable with no mechanism for token rotation, and universally valid across all RustFS deployments. Any attacke

https://github.com/Arcueld/CVE-2025-68926

2 repos

https://github.com/Chocapikk/CVE-2025-68926

hackmag@infosec.exchange at 2026-01-06T10:00:32.000Z ##

⚪ A pre-defined access token was found in the open-source project RustFS

🗨️ In the source code of the open-source project RustFS (which develops an S3-compatible distributed object storage solution), experts identified a critical vulnerability (CVE-2025-68926). The issue arises due to the presence of a hardcoded access token in the code, allowing connection to the network s…

🔗 https://hackmag.com/news/a-pre-defined-access-token-was-found-in-the-open-source-project-rustfs?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

https://github.com/rustfs/rustfs/security/advisories/GHSA-h956-rh7x-ppgj

##

levieva@mastodon.social at 2026-01-05T20:34:27.000Z ##

В исходном коде открытого проекта RustFS выявлена критическая уязвимость (CVE-2025-68926) 🚨. Проблема вызвана наличием жёстко прошитого в коде токена доступа, позволяющего подключиться к сетевому сервису по протоколу gRPC, указав в заголовке authorization значение rustfs rpc 🔑. Токен присутствовал в коде сервера и клиента 💻. Проблеме присвоен критический уровень опасности (9.8 из 10) ☢️.

#RustFS #CVE202568926 #InfoSec #CyberSecurity #HardcodedSecrets #gRPC #OpenSource

##

privateger@plasmatrap.com at 2026-01-05T12:05:23.842Z ##

CVE-2025-68926, or GHSA-h956-rh7x-ppgj

##

zrail@hachyderm.io at 2026-01-05T03:13:53.000Z ##

RustFS, a distributed object storage system written by LLMs, but in rust so it's fine everything is fine, hardcoded a fully privileged API token, apparently from Alpha.13 through Alpha.77.

If you're running any of those versions, probably you want to upgrade asap.

https://nvd.nist.gov/vuln/detail/CVE-2025-68926

#rustfs #selfhosted #selfhosting #homelab

##

CVE-2025-54890
(6.8 MEDIUM)

EPSS: 0.02%

updated 2026-01-05T12:31:32

1 posts

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hostgroup configuration page) allows Stored XSS by users with elevated privileges.This issue affects Infra Monitoring: from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19, from 23.10.0 before 23.10.29.

cR0w@infosec.exchange at 2026-01-06T17:03:42.000Z ##

I don't remember if I posted the Centreon stuff yesterday but it's still open in a tab so here you are anyway.

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-12514-centreon-open-tickets-high-severity-5343

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-54890-centreon-web-medium-severity-5342

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8460-centreon-open-tickets-medium-severity-5344

##

CVE-2025-8460
(6.8 MEDIUM)

EPSS: 0.02%

updated 2026-01-05T12:30:29

1 posts

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Notification rules, Open tickets module) allows Stored XSS by users with elevated privileges.This issue affects Infra Monitoring: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.5, from 23.10.0 before 23.10.4.

cR0w@infosec.exchange at 2026-01-06T17:03:42.000Z ##

I don't remember if I posted the Centreon stuff yesterday but it's still open in a tab so here you are anyway.

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-12514-centreon-open-tickets-high-severity-5343

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-54890-centreon-web-medium-severity-5342

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8460-centreon-open-tickets-medium-severity-5344

##

CVE-2025-12514
(7.2 HIGH)

EPSS: 0.02%

updated 2026-01-05T10:15:55.610000

1 posts

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring - Open-tickets (Notification rules configuration parameters, Open tickets modules) allows SQL Injection to user with elevated privileges.This issue affects Infra Monitoring - Open-tickets: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.5, from 23.10.0 before 23.

cR0w@infosec.exchange at 2026-01-06T17:03:42.000Z ##

I don't remember if I posted the Centreon stuff yesterday but it's still open in a tab so here you are anyway.

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-12514-centreon-open-tickets-high-severity-5343

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-54890-centreon-web-medium-severity-5342

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8460-centreon-open-tickets-medium-severity-5344

##

CVE-2026-0581
(6.3 MEDIUM)

EPSS: 3.36%

updated 2026-01-05T09:30:30

1 posts

A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorManager of the component httpd. Executing a manipulation of the argument modulename/option/data/switch can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

CVE-2026-21440(CVSS UNKNOWN)

EPSS: 0.32%

updated 2026-01-03T00:32:10

2 posts

### Summary **Description** A Path Traversal (CWE-22) vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This impacts @adonisjs/bodyparser through version 10.1.1 and 11.x prerelease versions prior to 11.0.0-next.6. This issue has been patched in @adonisjs/bodyparser versions 10.1.2 and 11.0.0-next

3 repos

https://github.com/Ashwesker/Ashwesker-CVE-2026-21440

https://github.com/k0nnect/cve-2026-21440-writeup-poc

https://github.com/you-ssef9/CVE-2026-21440

DarkWebInformer@infosec.exchange at 2026-01-11T00:27:42.000Z ##

❗️CVE-2026-21440: A critical path traversal vulnerability affecting the AdonisJS framework, specifically its multipart file upload handling.

PoC Exploit: https://github.com/Ashwesker/Ashwesker-CVE-2026-21440

▪️CVSS: 9.2
▪️CVE Published: January 2nd, 2026
▪️Exploit Published: January 5th, 2026

Details:

AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This impacts @adonisjs/bodyparser through version 10.1.1 and 11.x prerelease versions prior to 11.0.0-next.6. This issue has been patched in @adonisjs/bodyparser versions 10.1.2 and 11.0.0-next.6.

##

beyondmachines1@infosec.exchange at 2026-01-06T20:01:16.000Z ##

Critical path traversal flaw in AdonisJS enable server takeover

AdonisJS patched a critical path traversal vulnerabilities (CVE-2026-21440) that allow attackers to write or read arbitrary files on servers.

**Update your AdonisJS dependencies immediately to prevent attackers from overwriting your application code or stealing local files. Always sanitize user-provided filenames and use the Node.js permission flag to limit file system access.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-path-traversal-flaw-in-adonisjs-enable-server-takeover-l-o-y-a-8/gD2P6Ple2L

##

CVE-2025-15218
(8.8 HIGH)

EPSS: 0.08%

updated 2026-01-02T21:29:42.810000

1 posts

A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Parameter Handler. Executing manipulation of the argument lanMask can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be exploited

cR0w@infosec.exchange at 2026-01-05T15:03:40.000Z ##

New year, same Tenda.

##

CVE-2025-68613
(9.9 CRITICAL)

EPSS: 8.42%

updated 2026-01-02T18:28:02.143000

2 posts

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently

https://github.com/nehkark/CVE-2025-68613

28 repos

https://github.com/intbjw/CVE-2025-68613-poc-via-copilot

https://github.com/ali-py3/Exploit-CVE-2025-68613

https://github.com/Ak-cybe/CVE-2025-68613-n8n-rce-analysis

https://github.com/cv-sai-kamesh/n8n-CVE-2025-68613

https://github.com/gagaltotal/n8n-cve-2025-68613

https://github.com/intelligent-ears/CVE-2025-68613

https://github.com/JohannesLks/CVE-2025-68613-Python-Exploit

https://github.com/GnuTLam/POC-CVE-2025-68613

https://github.com/rxerium/CVE-2025-68613

https://github.com/secjoker/CVE-2025-68613

https://github.com/TheInterception/n8n_CVE-2025-68613_exploit_payloads

https://github.com/r4j3sh-com/CVE-2025-68613-n8n-lab

https://github.com/mbanyamer/n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613

https://github.com/Ashwesker/Ashwesker-CVE-2025-68613

https://github.com/AbdulRKB/n8n-RCE

https://github.com/Khin-96/n8n-cve-2025-68613-thm

https://github.com/manyaigdtuw/CVE-2025-68613_Scanner

https://github.com/shibaaa204/CVE-2025-68613

https://github.com/ahmedshamsddin/n8n-RCE-CVE-2025-68613

https://github.com/wioui/n8n-CVE-2025-68613-exploit

https://github.com/TheStingR/CVE-2025-68613-POC

https://github.com/LingerANR/n8n-CVE-2025-68613

https://github.com/reem-012/poc_CVE-2025-68613

https://github.com/Dlanang/homelab-CVE-2025-68613

https://github.com/J4ck3LSyN-Gen2/n8n-CVE-2025-68613-TryHackMe

https://github.com/releaseown/analysis-and-poc-n8n-CVE-2025-68613

https://github.com/hackersatyamrastogi/n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate

DarkWebInformer@infosec.exchange at 2026-01-07T19:28:09.000Z ##

Another video showing how incredibly easy the n8n RCE vulnerability (CVE-2025-68613) is.

Credit: http://youtube.com/@0xmrsecurity

##

benzogaga33@mamot.fr at 2026-01-05T16:40:02.000Z ##

Une faille critique affecte n8n – CVE-2025-68613 : comment se protéger ? https://www.it-connect.fr/n8n-cve-2025-68613-faille-securite-critique/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #n8n

##

CVE-2025-13915
(9.8 CRITICAL)

EPSS: 0.37%

updated 2025-12-31T21:37:43.290000

2 posts

IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.

AAKL@infosec.exchange at 2026-01-06T16:12:27.000Z ##

New.

Cyble: Singapore Cyber Agency Warns of Critical IBM API Connect Vulnerability (CVE-2025-13915) https://cyble.com/blog/cve-2025-13915-ibm-api-connect-vulnerability/ #infosec #vulnerability #IBM

##

oversecurity@mastodon.social at 2026-01-06T08:10:11.000Z ##

Singapore Cyber Agency Warns of Critical IBM API Connect Vulnerability (CVE-2025-13915)

Singapore warns of critical CVE-2025-13915 in IBM API Connect. Authentication bypass flaw scored 9.8 CVSS. Patches and mitigations released.

🔗️ [Cyble] https://link.is.it/WZmUnX

##

CVE-2021-47726
(7.5 HIGH)

EPSS: 0.08%

updated 2025-12-31T21:31:05

1 posts

NuCom 11N Wireless Router 5.07.90 contains a privilege escalation vulnerability that allows non-privileged users to access administrative credentials through the configuration backup endpoint. Attackers can send a crafted HTTP GET request to the backup configuration page with a specific cookie to retrieve and decode the admin password in Base64 format.

cR0w@infosec.exchange at 2026-01-05T16:34:13.000Z ##

Random older vulns with newly published CVEs. But at least there are links to ExploitDB in there.

##

CVE-2021-47741
(7.5 HIGH)

EPSS: 0.04%

updated 2025-12-31T21:31:05

1 posts

ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows limited administrative users to elevate access by sending requests to configuration endpoints. Attackers can exploit the vulnerability by accessing the configuration backup or password page to disclose the super user password and gain additional privileged functionalities.

cR0w@infosec.exchange at 2026-01-05T16:34:13.000Z ##

Random older vulns with newly published CVEs. But at least there are links to ExploitDB in there.

##

CVE-2018-25139
(7.5 HIGH)

EPSS: 0.12%

updated 2025-12-31T18:40:36.483000

1 posts

FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record thermal camera footage.

cR0w@infosec.exchange at 2026-01-05T16:09:01.000Z ##

Old FLIR vulns with recently published CVEs

##

CVE-2025-14847
(7.5 HIGH)

EPSS: 69.62%

updated 2025-12-31T17:32:39.683000

6 posts

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Ser

https://github.com/nma-io/mongobleed

30 repos

https://github.com/Rishi-kaul/CVE-2025-14847-MongoBleed

https://github.com/ElJoamy/MongoBleed-exploit

https://github.com/j0lt-github/mongobleedburp

https://github.com/CadGoose/MongoBleed-CVE-2025-14847-Fully-Automated-scanner

https://github.com/lincemorado97/CVE-2025-14847

https://github.com/saereya/CVE-2025-14847---MongoBleed

https://github.com/sahar042/CVE-2025-14847

https://github.com/tunahantekeoglu/MongoDeepDive

https://github.com/FurkanKAYAPINAR/CVE-2025-14847-MongoBleed-Exploit

https://github.com/onewinner/CVE-2025-14847

https://github.com/franksec42/mongobleed-exploit-CVE-2025-14847

https://github.com/JemHadar/MongoBleed-DFIR-Triage-Script-CVE-2025-14847

https://github.com/KingHacker353/CVE-2025-14847_Expolit

https://github.com/joshuavanderpoll/CVE-2025-14847

https://github.com/Ashwesker/Ashwesker-CVE-2025-14847

https://github.com/Security-Phoenix-demo/mongobleed-exploit-CVE-2025-14847

https://github.com/demetriusford/mongobleed

https://github.com/ProbiusOfficial/CVE-2025-14847

https://github.com/kuyrathdaro/cve-2025-14847

https://github.com/AdolfBharath/mongobleed

https://github.com/cybertechajju/CVE-2025-14847_Expolit

https://github.com/14mb1v45h/CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026

https://github.com/Systemhaus-Schulz/MongoBleed-CVE-2025-14847

https://github.com/Black1hp/mongobleed-scanner

https://github.com/NoNameError/MongoBLEED---CVE-2025-14847-POC-

https://github.com/vfa-tuannt/CVE-2025-14847

https://github.com/keraattin/Mongobleed-Detector-CVE-2025-14847

https://github.com/chinaxploiter/CVE-2025-14847-PoC

https://github.com/waheeb71/CVE-2025-14847

MongoDB@activitypub.awakari.com at 2026-01-10T07:36:00.000Z ## MongoBleed Vulnerability Allows Attackers to Read Data from MongoDB's Heap Memory MongoDB recently patched CVE-2025-14847, a vulnerability affecting multiple supported and legacy MongoDB Server...

#Compression #MongoDB #Cloud #Security #Common #Vulnerabilities #and #Exposures #AI, #ML #&

Origin | Interest | Match ##

MongoDB@activitypub.awakari.com at 2026-01-10T07:36:00.000Z ## MongoBleed Vulnerability Allows Attackers to Read Data from MongoDB's Heap Memory MongoDB recently patched CVE-2025-14847, a vulnerability affecting multiple supported and legacy MongoDB Server...

#MongoDB #Cloud #Security #Compression #Common #Vulnerabilities #and #Exposures #AI, #ML #&

Origin | Interest | Match ##

MongoDB@activitypub.awakari.com at 2026-01-10T07:36:00.000Z ## MongoBleed Vulnerability Allows Attackers to Read Data From MongoDB's Heap Memory MongoDB recently patched CVE-2025-14847, a vulnerability affecting multiple supported and legacy MongoDB Server...

#Compression #MongoDB #Cloud #Security #Common #Vulnerabilities #and #Exposures #AI, #ML #&

Origin | Interest | Match ##

MongoDB@activitypub.awakari.com at 2026-01-10T07:36:00.000Z ## MongoBleed Vulnerability Allows Attackers to Read Data From MongoDB's Heap Memory MongoDB recently patched CVE-2025-14847, a vulnerability affecting multiple supported and legacy MongoDB Server...

#MongoDB #Cloud #Security #Compression #Common #Vulnerabilities #and #Exposures #AI, #ML #&

Origin | Interest | Match ##

MongoDB@activitypub.awakari.com at 2026-01-06T19:36:57.000Z ## Urgent Security Update: Patching “Mongobleed” (CVE-2025-14847) in Percona Server for MongoDB At Percona, our mission has always been to provide the community with truly open-source, enterprise-...

#MongoDB #Percona #Software #mongobleed #percona #server #for #MongoDB

Origin | Interest | Match ##

MongoDB@activitypub.awakari.com at 2026-01-05T15:28:16.000Z ## MongoBleed: unauthenticated memory disclosure in MongoDB (CVE-2025-14847) On December 12, 2025, the MongoDB Security Engineering team disclosed a high-severity vulnerability in MongoDB that allows ...

#Security #Bloggers #Network

Origin | Interest | Match ##

CVE-2025-15217
(8.8 HIGH)

EPSS: 0.08%

updated 2025-12-30T21:30:32

1 posts

A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing manipulation of the argument list results in buffer overflow. The attack can be initiated remotely.

cR0w@infosec.exchange at 2026-01-05T15:03:40.000Z ##

New year, same Tenda.

##

CVE-2025-15215
(8.8 HIGH)

EPSS: 0.05%

updated 2025-12-30T03:30:23

1 posts

A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

cR0w@infosec.exchange at 2026-01-05T15:03:40.000Z ##

New year, same Tenda.

##

CVE-2025-15216
(8.8 HIGH)

EPSS: 0.08%

updated 2025-12-30T03:30:17

1 posts

A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument bindnum leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

cR0w@infosec.exchange at 2026-01-05T15:03:40.000Z ##

New year, same Tenda.

##

CVE-2019-25251
(5.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-29T15:58:13.147000

1 posts

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP requests to arbitrary destinations.

cR0w@infosec.exchange at 2026-01-05T16:34:13.000Z ##

Random older vulns with newly published CVEs. But at least there are links to ExploitDB in there.

https://nvd.nist.gov/vuln/detail/CVE-2019-25246

##

CVE-2019-25246
(8.8 HIGH)

EPSS: 0.03%

updated 2025-12-29T15:58:13.147000

1 posts

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to read arbitrary system files via the 'READ.filePath' parameter. Attackers can exploit the fileread script or SendCGICMD API to access sensitive files like /etc/passwd and /etc/issue by supplying absolute file paths.

cR0w@infosec.exchange at 2026-01-05T16:11:55.000Z ##

Old Beward vulns with recently published CVEs

https://nvd.nist.gov/vuln/detail/CVE-2019-25247

https://nvd.nist.gov/vuln/detail/CVE-2019-25248

##

CVE-2018-25141
(7.5 HIGH)

EPSS: 0.11%

updated 2025-12-29T15:58:13.147000

1 posts

FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg, and RTSP streaming URLs without authentication.

cR0w@infosec.exchange at 2026-01-05T16:09:01.000Z ##

Old FLIR vulns with recently published CVEs

https://nvd.nist.gov/vuln/detail/CVE-2019-25246

##

CVE-2019-25248
(7.5 HIGH)

EPSS: 0.14%

updated 2025-12-24T21:30:40

1 posts

Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve the camera's RTSP stream by exploiting the lack of authentication in the video access mechanism.

cR0w@infosec.exchange at 2026-01-05T16:11:55.000Z ##

Old Beward vulns with recently published CVEs

https://nvd.nist.gov/vuln/detail/CVE-2019-25247

https://nvd.nist.gov/vuln/detail/CVE-2019-25248

##

CVE-2018-25140
(7.5 HIGH)

EPSS: 0.08%

updated 2025-12-24T21:30:35

1 posts

FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass authentication and authorization controls. Attackers can directly modify device configurations, access system information, and potentially initiate denial of service by sending crafted WebSocket messages without authentication.

cR0w@infosec.exchange at 2026-01-05T16:09:01.000Z ##

Old FLIR vulns with recently published CVEs

##

CVE-2018-25138
(7.5 HIGH)

EPSS: 0.13%

updated 2025-12-24T21:30:35

1 posts

FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers can exploit these persistent credentials to gain unauthorized shell access and login to multiple camera interfaces using predefined username and password combinations.

cR0w@infosec.exchange at 2026-01-05T16:09:01.000Z ##

Old FLIR vulns with recently published CVEs

https://nvd.nist.gov/vuln/detail/CVE-2019-25246

##

CVE-2019-25247
(5.3 MEDIUM)

EPSS: 0.02%

updated 2025-12-24T21:30:34

1 posts

Beward N100 H.264 VGA IP Camera M2.1.6 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft a malicious web page with a hidden form to add an admin user by tricking a logged-in user into submitting the form.

cR0w@infosec.exchange at 2026-01-05T16:11:55.000Z ##

Old Beward vulns with recently published CVEs

https://nvd.nist.gov/vuln/detail/CVE-2019-25247

https://nvd.nist.gov/vuln/detail/CVE-2019-25248

##

CVE-2019-25236
(9.8 CRITICAL)

EPSS: 0.11%

updated 2025-12-24T21:30:33

1 posts

iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script that allows unauthorized access to live video streams. Attackers can retrieve video snapshots from specific camera channels by sending requests to the /cgi-bin/get_jpeg endpoint without authentication.

cR0w@infosec.exchange at 2026-01-05T16:34:13.000Z ##

Random older vulns with newly published CVEs. But at least there are links to ExploitDB in there.

https://nvd.nist.gov/vuln/detail/CVE-2025-14704

##

CVE-2024-12087
(6.5 MEDIUM)

EPSS: 2.36%

updated 2025-12-22T15:30:20

1 posts

A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow

linux@activitypub.awakari.com at 2026-01-06T02:18:51.000Z ## Oracle Linux 7: rsync Moderate Risk Advisory ELSA-2025-23415 CVE-2024-12087 The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

#Oracle #Linux #Distribution #- #Security #Advisories

Origin | Interest | Match ##

CVE-2025-2486
(8.8 HIGH)

EPSS: 0.02%

updated 2025-12-19T18:31:07

1 posts

The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based decision to continue running inside the Shell itself, which is believed to be sufficient to enforce Secure

Ubuntu@activitypub.awakari.com at 2026-01-03T01:39:24.000Z ## CVE-2025-2486 UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu Information published.

#CVE

Origin | Interest | Match ##

CVE-2025-14704
(7.3 HIGH)

EPSS: 0.23%

updated 2025-12-15T06:31:25

1 posts

A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. The impacted element is an unknown function of the file /eshell of the component API. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

cR0w@infosec.exchange at 2026-01-05T16:14:43.000Z ##

../ in Shiguangwu sgwbox NAS

https://github.com/intSheep/Tika-CVE-2025-66516-Lab

##

CVE-2025-66516(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-05T02:26:57

1 posts

Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. This CVE covers the same vulnerability as in CVE-2025-54988. However, this CVE expands the scope of affected packages in two ways. First, while the entrypoi

4 repos

https://github.com/sid6224/CVE-2025-66516-POC

https://github.com/chasingimpact/CVE-2025-66516-Writeup-POC

https://github.com/Ashwesker/Ashwesker-CVE-2025-66516

AAKL@infosec.exchange at 2026-01-09T18:12:09.000Z ##

New.

Picus: Apache Tika XXE Vulnerability CVE-2025-66516 Explained https://www.picussecurity.com/resource/blog/apache-tika-xxe-vulnerability-cve-2025-66516-explained #infosec #vulnerability #Apache #threatresearch #opensource

##

CVE-2025-1910(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-05T00:31:05

1 posts

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.This issue affects the Mobile VPN with SSL Client 12.0 up to and including 12.11.2.

1 repos

https://github.com/lutrasecurity/CVE-2025-1910-WatchGuard-Privilege-Escalation

lutrasecurity@infosec.exchange at 2026-01-07T17:21:17.000Z ##

After coming across an outdated version of WatchGuard's Mobile VPN with SSL last year and being unable to quickly find a public proof of concept for CVE-2025-1910, we took a closer look and created one ourselves: https://lutrasecurity.com/en/articles/cve-2025-1910-watchguard-privilege-escalation/

Thanks to @tomtom of #AKASEC for finding the vulnerability and providing a great write-up!

##

CVE-2025-64126
(10.0 CRITICAL)

EPSS: 5.60%

updated 2025-12-01T15:39:53.100000

1 posts

An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary commands.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-13601
(7.7 HIGH)

EPSS: 0.02%

updated 2025-12-01T15:39:53.100000

1 posts

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

linux@activitypub.awakari.com at 2026-01-06T15:38:05.000Z ## Ubuntu 25.10: GLib Critical Vulnerabilities USN-7942-1 CVE-2025-13601 Several security issues were fixed in GLib.

#Ubuntu #Linux #Distribution #- #Security #Advisories

Origin | Interest | Match ##

CVE-2025-64129
(7.6 HIGH)

EPSS: 0.17%

updated 2025-11-26T18:31:15

1 posts

Zenitel TCIV-3+ is vulnerable to an out-of-bounds write vulnerability, which could allow a remote attacker to crash the device.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-64130
(9.8 CRITICAL)

EPSS: 0.15%

updated 2025-11-26T18:31:15

1 posts

Zenitel TCIV-3+ is vulnerable to a reflected cross-site scripting vulnerability, which could allow a remote attacker to execute arbitrary JavaScript on the victim's browser.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-64127
(10.0 CRITICAL)

EPSS: 5.60%

updated 2025-11-26T18:31:15

1 posts

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-64128
(10.0 CRITICAL)

EPSS: 5.60%

updated 2025-11-26T18:31:15

1 posts

An OS command injection vulnerability exists due to incomplete validation of user-supplied input. Validation fails to enforce sufficient formatting rules, which could permit attackers to append arbitrary data. This could allow an unauthenticated attacker to inject arbitrary commands.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

##

CVE-2025-43300
(10.0 CRITICAL)

EPSS: 1.08%

updated 2025-11-26T16:21:19.870000

1 posts

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

8 repos

https://github.com/hunters-sec/CVE-2025-43300

https://github.com/XiaomingX/CVE-2025-43300-exp

https://github.com/7amzahard/CVE-2025-43300

https://github.com/PwnToday/CVE-2025-43300

https://github.com/ticofookfook/CVE-2025-43300

https://github.com/veniversum/cve-2025-43300

https://github.com/Dark-life944/CVE-2025

hackmag@infosec.exchange at 2026-01-04T05:35:38.000Z ##

⚪ Apple urgently patches a zero-day vulnerability

🗨️ Apple has released out-of-band patches to fix a zero-day vulnerability. The new issue has reportedly already been exploited as part of an “extremely sophisticated attack.”

🔗 https://hackmag.com/news/cve-2025-43300?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

https://github.com/Ashwesker/Ashwesker-CVE-2025-6389

##

CVE-2025-6389
(9.8 CRITICAL)

EPSS: 0.37%

updated 2025-11-25T03:30:26

1 posts

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoor

3 repos

https://github.com/itsismarcos/SneeitScanner-CVE-2025-6389

https://github.com/thorat-shubham/JXL_Infotainment_CVE-2025-63895

DarkWebInformer@infosec.exchange at 2026-01-06T19:51:11.000Z ##

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation

PoC: https://github.com/Ashwesker/Ashwesker-CVE-2025-6389

▪️Vulnerability Type: Remote Code Execution (RCE)
▪️CVSS: 9.8
▪️Published: 11/24/2025

Impact:

▪️Full site compromise
▪️Create admin accounts
▪️Install backdoors/malicious files
▪️Redirect visitors or inject malware

Credit: youtube.com/@Nxploited

##

CVE-2025-64432
(4.7 MEDIUM)

EPSS: 0.01%

updated 2025-11-17T21:44:47

1 posts

### Summary _Short summary of the problem. Make the impact and severity as clear as possible. A flawed implementation of the Kubernetes aggregation layer's authentication flow could enable bypassing RBAC controls. ### Details _Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer._ It was discovered that the `virt-api` component fails

Kubernetes@activitypub.awakari.com at 2026-01-02T14:39:19.000Z ## CVE-2025-64432 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer Information published.

#CVE

Origin | Interest | Match ##

CVE-2025-60188
(7.5 HIGH)

EPSS: 10.74%

updated 2025-11-17T16:15:48.830000

1 posts

Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2.

https://github.com/m4sh-wacker/CVE-2025-60188-Atarim-Plugin-Exploit

1 repos

DarkWebInformer@infosec.exchange at 2026-01-10T23:46:48.000Z ##

❗️CVE-2025-60188: Atarim Plugin PoC Exploit

GitHub: https://github.com/m4sh-wacker/CVE-2025-60188-Atarim-Plugin-Exploit

##

CVE-2025-40300
(0 None)

EPSS: 0.08%

updated 2025-11-17T16:15:46.780000

1 posts

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing mitigations already protect kernel/KVM from a malicious guest. Userspace can additionally be protected by flushing the branch predictors af

Ubuntu@activitypub.awakari.com at 2026-01-09T16:55:37.000Z ## Ubuntu 24.04: Linux-azure-nvidia Critical Issues CVE-2025-40300 Several security issues were fixed in the Linux kernel.

#Ubuntu #Linux #Distribution #- #Security #Advisories

Origin | Interest | Match ##

CVE-2025-4802
(9.8 CRITICAL)

EPSS: 0.01%

updated 2025-11-03T21:34:58

1 posts

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).

1 repos

https://github.com/Betim-Hodza/CVE-2025-4802-Proof-of-Concept

raptor@infosec.exchange at 2026-01-10T09:07:31.000Z ##

Cool bug 🐞

CVE-2025-4802: Arbitrary library path #vulnerability in static setuid binary in #GLIBC

https://hackyboiz.github.io/2025/12/03/millet/cve-2025-4802/

##

CVE-2025-6430
(6.1 MEDIUM)

EPSS: 0.05%

updated 2025-11-03T20:19:19.233000

1 posts

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

hackmag@infosec.exchange at 2026-01-10T10:04:30.000Z ##

⚪ Firefox Patches Vulnerability Discovered by a Positive Technologies Expert

🗨️ Exploitation of the vulnerability became possible after injecting malicious code into an arbitrary website, allowing an attacker to steal credentials and redirect users to phishing pages.

🔗 https://hackmag.com/news/cve-2025-6430?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

##

CVE-2025-31161
(9.8 CRITICAL)

EPSS: 82.33%

updated 2025-10-31T22:04:34.230000

1 posts

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is used), as exploited in the wild in March and April 2025, aka "Unauthenticated HTTP(S) port access." A race condition exists in the AWS4-HMAC (compatible with S3) authorization method of the HTTP component of the FTP server. The server first verifies the

https://github.com/TX-One/CVE-2025-31161

16 repos

https://github.com/ghostsec420/ShatteredFTP

https://github.com/0xgh057r3c0n/CVE-2025-31161

https://github.com/Dairrow/CVE-2025-31161

https://github.com/f4dee-backup/CVE-2025-31161

https://github.com/ibrahmsql/CVE-2025-31161

https://github.com/SUPRAAA-1337/CVE-2025-31161_exploit

https://github.com/Ashwesker/Ashwesker-CVE-2025-31161

https://github.com/cesarbtakeda/CVE-2025-31161

https://github.com/ch3m1cl/CVE-2025-31161

https://github.com/Teexo/CVE-2025-31161

https://github.com/r0otk3r/CVE-2025-31161

https://github.com/0xDTC/CrushFTP-auth-bypass-CVE-2025-31161

https://github.com/SUPRAAA-1337/Nuclei_CVE-2025-31161_CVE-2025-2825

https://github.com/acan0007/CVE-2025-31161

https://github.com/Immersive-Labs-Sec/CVE-2025-31161

linux@activitypub.awakari.com at 2026-01-05T13:46:37.000Z ## Soulmate HTB Walkthrough HTB Soulmate Walkthrough Initial Reconnaissance I started the Soulmate HackTheBox challenge by performing an nmap scan to identify active services on the target system. nm...

#hackthebox #soulmate-writeup #hackthebox-writeup #soulmate-htb #cve-2025-31161

Origin | Interest | Match ##

CVE-2021-44228
(10.0 CRITICAL)

EPSS: 94.36%

updated 2025-10-22T19:13:26

1 posts

# Summary Log4j versions prior to 2.16.0 are subject to a remote code execution vulnerability via the ldap JNDI parser. As per [Apache's Log4j security guide](https://logging.apache.org/log4j/2.x/security.html): Apache Log4j2 <=2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who

https://github.com/back2root/log4shell-rex

100 repos

https://github.com/takito1812/log4j-detect

https://github.com/momos1337/Log4j-RCE

https://github.com/lfama/log4j_checker

https://github.com/bigsizeme/Log4j-check

https://github.com/hackinghippo/log4shell_ioc_ips

https://github.com/future-client/CVE-2021-44228

https://github.com/sassoftware/loguccino

https://github.com/ssl/scan4log4j

https://github.com/puzzlepeaches/Log4jCenter

https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes

https://github.com/mufeedvh/log4jail

https://github.com/faisalfs10x/Log4j2-CVE-2021-44228-revshell

https://github.com/MalwareTech/Log4jTools

https://github.com/toramanemre/log4j-rce-detect-waf-bypass

https://github.com/marcourbano/CVE-2021-44228

https://github.com/qingtengyun/cve-2021-44228-qingteng-online-patch

https://github.com/logpresso/CVE-2021-44228-Scanner

https://github.com/pedrohavay/exploit-CVE-2021-44228

https://github.com/claranet/ansible-role-log4shell

https://github.com/HyCraftHD/Log4J-RCE-Proof-Of-Concept

https://github.com/puzzlepeaches/Log4jUnifi

https://github.com/corretto/hotpatch-for-apache-log4j2

https://github.com/CERTCC/CVE-2021-44228_scanner

https://github.com/jas502n/Log4j2-CVE-2021-44228

https://github.com/simonis/Log4jPatch

https://github.com/tippexs/nginx-njs-waf-cve2021-44228

https://github.com/Diverto/nse-log4shell

https://github.com/fullhunt/log4j-scan

https://github.com/christophetd/log4shell-vulnerable-app

https://github.com/darkarnium/Log4j-CVE-Detect

https://github.com/qingtengyun/cve-2021-44228-qingteng-patch

https://github.com/CodeShield-Security/Log4JShell-Bytecode-Detector

https://github.com/yahoo/check-log4j

https://github.com/blake-fm/vcenter-log4j

https://github.com/toramanemre/apache-solr-log4j-CVE-2021-44228

https://github.com/boundaryx/cloudrasp-log4j2

https://github.com/BinaryDefense/log4j-honeypot-flask

https://github.com/fireeye/CVE-2021-44228

https://github.com/mr-r3b00t/CVE-2021-44228

https://github.com/thomaspatzke/Log4Pot

https://github.com/roxas-tan/CVE-2021-44228

https://github.com/fox-it/log4j-finder

https://github.com/corelight/cve-2021-44228

https://github.com/Kadantte/CVE-2021-44228-poc

https://github.com/NS-Sp4ce/Vm4J

https://github.com/leonjza/log4jpwn

https://github.com/1lann/log4shelldetect

https://github.com/nccgroup/log4j-jndi-be-gone

https://github.com/NCSC-NL/log4shell

https://github.com/julian911015/Log4j-Scanner-Exploit

https://github.com/sunnyvale-it/CVE-2021-44228-PoC

https://github.com/stripe/log4j-remediation-tools

https://github.com/Nanitor/log4fix

https://github.com/RedDrip7/Log4Shell_CVE-2021-44228_related_attacks_IOCs

https://github.com/DragonSurvivalEU/RCE

https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words

https://github.com/f0ng/log4j2burpscanner

https://github.com/sec13b/CVE-2021-44228-POC

https://github.com/AlexandreHeroux/Fix-CVE-2021-44228

https://github.com/kozmer/log4j-shell-poc

https://github.com/r3kind1e/Log4Shell-obfuscated-payloads-generator

https://github.com/thecyberneh/Log4j-RCE-Exploiter

https://github.com/KosmX/CVE-2021-44228-example

https://github.com/mergebase/log4j-detector

https://github.com/wortell/log4j

https://github.com/aws-samples/kubernetes-log4j-cve-2021-44228-node-agent

https://github.com/Azeemering/CVE-2021-44228-DFIR-Notes

https://github.com/CrackerCat/CVE-2021-44228-Log4j-Payloads

https://github.com/kubearmor/log4j-CVE-2021-44228

https://github.com/irgoncalves/f5-waf-quick-patch-cve-2021-44228

https://github.com/0xInfection/LogMePwn

https://github.com/lucab85/log4j-cve-2021-44228

https://github.com/justakazh/Log4j-CVE-2021-44228

https://github.com/NorthwaveSecurity/log4jcheck

https://github.com/cisagov/log4j-scanner

https://github.com/alexandre-lavoie/python-log4rce

https://github.com/korteke/log4shell-demo

https://github.com/shamo0/CVE-2021-44228

https://github.com/0xDexter0us/Log4J-Scanner

https://github.com/Malwar3Ninja/Exploitation-of-Log4j2-CVE-2021-44228

https://github.com/HynekPetrak/log4shell-finder

https://github.com/alexbakker/log4shell-tools

https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce

https://github.com/greymd/CVE-2021-44228

https://github.com/Adikso/minecraft-log4j-honeypot

https://github.com/mr-vill4in/log4j-fuzzer

https://github.com/twseptian/spring-boot-log4j-cve-2021-44228-docker-lab

https://github.com/rubo77/log4j_checker_beta

https://github.com/redhuntlabs/Log4JHunt

https://github.com/LiveOverflow/log4shell

https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit

https://github.com/puzzlepeaches/Log4jHorizon

https://github.com/mzlogin/CVE-2021-44228-Demo

https://github.com/cyberxml/log4j-poc

https://github.com/giterlizzi/nmap-log4shell

https://github.com/infiniroot/nginx-mitigate-log4shell

https://github.com/dwisiswant0/look4jar

https://github.com/irgoncalves/f5-waf-enforce-sig-CVE-2021-44228

https://github.com/Jeromeyoung/log4j2burpscanner

nono@toot.paris at 2026-01-08T21:46:36.000Z ##

Cloudflare has even bragged on their blog¹ about how they run data analytics on all of the web requests going through their system. This data may be collected for government surveillance purposes as well.

1: https://blog.cloudflare.com/exploitation-of-cve-2021-44228-before-public-disclosure-and-evolution-of-waf-evasion-patterns/

##

CVE-2025-22224
(9.4 CRITICAL)

EPSS: 51.47%

updated 2025-10-22T00:34:17

2 posts

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

cyberveille@mastobot.ping.moi at 2026-01-11T23:00:04.000Z ##

📢 Huntress détaille un kit d’évasion VMware ESXi exploitant CVE-2025-22224/22225/22226
📝 Selon Huntress (Tactical Response et SOC), une intrusion observée en décembre 2025 a mené au déploiement d’un kit d’exploits visant VMwar...
📖 cyberveille : https://cyberveille.ch/posts/2026-01-10-huntress-detaille-un-kit-devasion-vmware-esxi-exploitant-cve-2025-22224-22225-22226/
🌐 source : https://www.huntress.com/blog/esxi-vm-escape-exploit
#CVE_2025_22224_22225_22226 #IOC #Cyberveille

##

jbhall56@infosec.exchange at 2026-01-09T12:57:40.000Z ##

The three bugs, tracked as CVE-2025-22224, CVE-2025-22225 and CVE-2025-22226, and named ESXicape, allow privileged attackers to execute arbitrary code and escape the VM to compromise the hypervisor itself. https://www.securityweek.com/exploit-for-vmware-zero-day-flaws-likely-built-a-year-before-public-disclosure/

##

CVE-2025-22226
(7.1 HIGH)

EPSS: 3.96%

updated 2025-10-22T00:33:13

1 posts

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

jbhall56@infosec.exchange at 2026-01-09T12:57:40.000Z ##

The three bugs, tracked as CVE-2025-22224, CVE-2025-22225 and CVE-2025-22226, and named ESXicape, allow privileged attackers to execute arbitrary code and escape the VM to compromise the hypervisor itself. https://www.securityweek.com/exploit-for-vmware-zero-day-flaws-likely-built-a-year-before-public-disclosure/

##

CVE-2025-22225
(8.3 HIGH)

EPSS: 6.33%

updated 2025-10-22T00:33:13

1 posts

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

jbhall56@infosec.exchange at 2026-01-09T12:57:40.000Z ##

The three bugs, tracked as CVE-2025-22224, CVE-2025-22225 and CVE-2025-22226, and named ESXicape, allow privileged attackers to execute arbitrary code and escape the VM to compromise the hypervisor itself. https://www.securityweek.com/exploit-for-vmware-zero-day-flaws-likely-built-a-year-before-public-disclosure/

##

CVE-2025-10492
(9.8 CRITICAL)

EPSS: 0.33%

updated 2025-10-14T15:06:20.363000

2 posts

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

1 repos

https://github.com/dovezp/CVE-2025-10492-POC

beyondmachines1@infosec.exchange at 2026-01-09T14:01:44.000Z ##

Hitachi Energy patches critical RCE flaw in Asset Suite

Hitachi Energy released a critical update for Asset Suite to patch a remote code execution vulnerability (CVE-2025-10492) caused by improper data handling in the Jaspersoft reporting library.

**Make sure your Hitachi Asset Suite uses only predefined reports and users should not be allowed to upload untrudted reports. If possible, isolate Hitachi Asset Suite to be accessible from trusted networks only and limited number of users. Then plan an update to Asset Suite version 9.8.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/hitachi-energy-patches-critical-rce-flaw-in-asset-suite-w-5-d-c-l/gD2P6Ple2L

##

AAKL@infosec.exchange at 2026-01-08T19:29:24.000Z ##

CISA ICS advisory: Hitachi Energy Asset Suite vulnerability CVE-2025-10492 https://www.cisa.gov/news-events/ics-advisories/icsa-26-008-01 #CISA #infosec #Java #JavaScript

##

CVE-2025-11155
(0 None)

EPSS: 0.02%

updated 2025-09-29T19:34:10.030000

1 posts

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials.

nyanbinary@infosec.exchange at 2026-01-07T17:24:09.000Z ##

@cR0w https://nvd.nist.gov/vuln/detail/CVE-2025-11155 ?

##

CVE-2025-59814
(8.8 HIGH)

EPSS: 0.08%

updated 2025-09-26T14:32:19.853000

1 posts

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-59817
(8.4 HIGH)

EPSS: 0.04%

updated 2025-09-26T14:32:19.853000

1 posts

This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-59815
(9.1 CRITICAL)

EPSS: 0.06%

updated 2025-09-25T21:30:37

1 posts

This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-59816
(8.1 HIGH)

EPSS: 0.10%

updated 2025-09-25T21:30:36

1 posts

This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue.

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

https://github.com/Kryptoenix/CVE-2025-47987_PoC

##

CVE-2025-47987
(7.8 HIGH)

EPSS: 0.08%

updated 2025-07-14T17:38:41.223000

5 posts

Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.

1 repos

Reverse-Engineering@activitypub.awakari.com at 2026-01-06T14:11:00.000Z ## Micropatches Released for Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability (CVE-2025-47987) July 2025 Windows Updates brought a patch for CVE-2025-4...

Origin | Interest | Match ##

Reverse-Engineering@activitypub.awakari.com at 2026-01-06T14:15:37.000Z ## Micropatches Released for Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability (CVE-2025-47987) July 2025 Windows Updates brought a patch for CVE-2025-4...

#Malware #News

Origin | Interest | Match ##

Reverse-Engineering@activitypub.awakari.com at 2026-01-06T14:11:00.000Z ## Micropatches Released for Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability (CVE-2025-47987) July 2025 Windows Updates brought a patch for CVE-2025-4...

Origin | Interest | Match ##

CVE-2025-6842
(4.7 MEDIUM)

EPSS: 0.03%

updated 2025-07-01T15:32:11

1 posts

A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit_user.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

1 repos

https://github.com/12nio/CVE-2025-68428_PoC

DarkWebInformer@infosec.exchange at 2026-01-11T02:00:20.000Z ##

❗️CVE-2025-68428: Critical Path Traversal in jsPDF

GitHub: https://github.com/12nio/CVE-2025-68428_PoC

CVSS: 9.2
CVE Published: January 5th, 2026
Exploit Published: January 8th, 2026

News source: https://www.bleepingcomputer.com/news/security/critical-jspdf-flaw-lets-hackers-steal-secrets-via-generated-pdfs/

##

CVE-2025-4330
(7.5 HIGH)

EPSS: 0.16%

updated 2025-06-05T14:15:32.910000

1 posts

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction fil

6 repos

https://github.com/hunters-sec/CVE-2025-43300

https://github.com/XiaomingX/CVE-2025-43300-exp

https://github.com/7amzahard/CVE-2025-43300

https://github.com/PwnToday/CVE-2025-43300

https://github.com/ticofookfook/CVE-2025-43300

https://github.com/veniversum/cve-2025-43300

hackmag@infosec.exchange at 2026-01-04T05:35:38.000Z ##

⚪ Apple urgently patches a zero-day vulnerability

🗨️ Apple has released out-of-band patches to fix a zero-day vulnerability. The new issue has reportedly already been exploited as part of an “extremely sophisticated attack.”

🔗 https://hackmag.com/news/cve-2025-43300?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

https://github.com/jip-0-0-0-0-0/CVE-2024-38063-scanner

##

CVE-2025-47934
(0 None)

EPSS: 0.03%

updated 2025-05-21T20:25:16.407000

1 posts

OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either `openpgp.verify` or `openpgp.decrypt`, causing these functions to return a valid signature verification result while returning data that was not actually signed. This flaw allows signature verifications of inline

AAKL@infosec.exchange at 2026-01-06T15:58:00.000Z ##

New.

Codean Labs: CVE-2025-47934 – Spoofing OpenPGP.js signature verification https://codeanlabs.com/2025/06/cve-2025-47934-spoofing-openpgp-js-signatures/ @Codean #threatresearch #infosec #vulnerability #JavaScript

##

CVE-2022-23128
(9.8 CRITICAL)

EPSS: 3.77%

updated 2024-11-21T06:48:03.407000

1 posts

Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97 and ICONICS MobileHMI versions 10.95.3 to 10.97 allows a remote unauthenticated attacker to bypass the authentication of

beyondmachines1@infosec.exchange at 2026-01-09T13:01:45.000Z ##

Mitsubishi Electric patches critical SCADA and HMI vulnerabilities

Mitsubishi Electric patched several vulnerabilities in its ICONICS and HMI SCADA suites, including a critical bypass flaw (CVE-2022-23128) that allows unauthorized system control.

**Make sure all Mitsubishi Electric and ICONICS Digital Solutions devices are isolated from the internet and accessible from trusted networks only. Update to GENESIS64 version 10.97.1 immediately and all other systems which have patches. Since GENESIS32 is retired and won't be patched, use strict network isolation and plan a replacement.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/mitsubishi-electric-patches-critical-scada-and-hmi-vulnerabilities-p-5-i-0-o/gD2P6Ple2L

##

CVE-2024-38063
(9.8 CRITICAL)

EPSS: 90.06%

updated 2024-08-13T18:31:24

1 posts

Windows TCP/IP Remote Code Execution Vulnerability

29 repos

https://github.com/idkwastaken/CVE-2024-38063

https://github.com/zenzue/CVE-2024-38063-POC

https://github.com/AdminPentester/CVE-2024-38063-

https://github.com/FrancescoDiSalesGithub/quick-fix-cve-2024-38063

https://github.com/Sachinart/CVE-2024-38063-poc

https://github.com/thanawee321/CVE-2024-38063

https://github.com/akozsentre/CVE-2024-38063

https://github.com/p33d/cve-2024-38063

https://github.com/Dragkob/CVE-2024-38063

https://github.com/Th3Tr1ckst3r/Exip6

https://github.com/AliHj98/cve-2024-38063-Anonyvader

https://github.com/patchpoint/CVE-2024-38063

https://github.com/haroonawanofficial/AI-CVE-2024-38063-0-DAY

https://github.com/ArenaldyP/CVE-2024-38063-Medium

https://github.com/Skac44/CVE-2024-38063

https://github.com/ps-interactive/cve-2024-38063

https://github.com/fredagsguf/Windows-CVE-2024-38063

https://github.com/Faizan-Khanx/CVE-2024-38063

https://github.com/PumpkinBridge/Windows-CVE-2024-38063

https://github.com/ThemeHackers/CVE-2024-38063

https://github.com/dweger-scripts/CVE-2024-38063-Remediation

https://github.com/KernelKraze/CVE-2024-38063_PoC

https://github.com/Th3Tr1ckst3r/CVE-2024-38063

https://github.com/brownpanda29/Cve-2024-38063

https://github.com/ynwarcs/CVE-2024-38063

https://github.com/diegoalbuquerque/CVE-2024-38063

https://github.com/almogopp/Disable-IPv6-CVE-2024-38063-Fix

https://github.com/becrevex/CVE-2024-38063

lightbites@kinkycats.org at 2026-01-06T17:51:23.000Z ##

@norm @niconiconi

Let's also not forget this golden moment: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063

##

CVE-2022-25845
(8.1 HIGH)

EPSS: 89.92%

updated 2024-05-15T06:28:36

1 posts

The package com.alibaba:fastjson before 1.2.83 is vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not possible, you can enable [safeMode](https://github.com/alibaba/fastjson/wiki/fastjson_safemode).

6 repos

https://github.com/scabench/fastjson-tp1fn1

https://github.com/luelueking/CVE-2022-25845-In-Spring

https://github.com/hosch3n/FastjsonVulns

https://github.com/cuijiung/fastjson-CVE-2022-25845

https://github.com/ph0ebus/CVE-2022-25845-In-Spring

https://github.com/nerowander/CVE-2022-25845-exploit

cR0w@infosec.exchange at 2026-01-09T19:46:49.000Z ##

Perfect 10 in Fastjson. 🥳

It's funny that it appears to be a challenging enough bug that it bypassed at least two previous fixes.

https://www.cve.org/CVERecord?id=CVE-2025-70974

Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an attacker-supplied payload located elsewhere in that JSON document. This was exploited in the wild in 2023 through 2025. NOTE: this issue exists because of an incomplete fix for CVE-2017-18349. Also, a later bypass is covered by CVE-2022-25845.

##

CVE-2024-2537
(4.4 MEDIUM)

EPSS: 0.06%

updated 2024-03-15T18:30:45

1 posts

Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion.

1 repos

https://github.com/ewilded/CVE-2024-25376-POC

glyph@mastodon.social at 2026-01-07T17:25:14.000Z ##

@0xabad1dea @mkj @emaksovalec okay _actually_ the last one now, re: that footnote

Logitech has also messed up their code signing security several times so that even such a screw-up would actually not crash their app on macOS in particular, which is bad in its own right: https://nvd.nist.gov/vuln/detail/CVE-2024-2537

tl;dr: avoid logitech's drivers if you can, they are routinely stepping on security & reliability rakes completely unprompted

##

CVE-2017-18349
(9.8 CRITICAL)

EPSS: 92.08%

updated 2023-09-26T14:52:01

1 posts

parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java.

https://github.com/h0cksr/Fastjson--CVE-2017-18349-

1 repos

cR0w@infosec.exchange at 2026-01-09T19:46:49.000Z ##

Perfect 10 in Fastjson. 🥳

It's funny that it appears to be a challenging enough bug that it bypassed at least two previous fixes.

https://www.cve.org/CVERecord?id=CVE-2025-70974

Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an attacker-supplied payload located elsewhere in that JSON document. This was exploited in the wild in 2023 through 2025. NOTE: this issue exists because of an incomplete fix for CVE-2017-18349. Also, a later bypass is covered by CVE-2022-25845.

##

CVE-2025-64424
(0 None)

EPSS: 0.66%

1 posts

N/A

secdb at 2026-01-12T00:00:49.245Z ##

📈 CVE Published in last 7 days (2026-01-05 - 2026-01-12)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1037

Severity:
- Critical: 110
- High: 289
- Medium: 492
- Low: 32
- None: 114

Status:
- : 43
- Analyzed: 62
- Awaiting Analysis: 537
- Received: 246
- Rejected: 32
- Undergoing Analysis: 117

Top CNAs:
- GitHub, Inc.: 201
- Wordfence: 161
- Patchstack: 150
- VulDB: 78
- MITRE: 73
- VulnCheck: 57
- N/A: 43
- MediaTek, Inc.: 28
- Fortinet, Inc.: 26
- Qualcomm, Inc.: 22

Top Affected Products:
- UNKNOWN: 964
- Google Android: 23
- Color Iccdev: 12
- Fabian Online Product Reservation System: 8
- Samsung Exynos 2400 Firmware: 7
- Samsung Exynos 1580 Firmware: 7
- Samsung Exynos 1380 Firmware: 6
- Samsung Exynos 1480 Firmware: 6
- Mediatek Nr17: 5
- Mediatek Nr16: 4

##

CVE-2026-0716
(0 None)

EPSS: 0.00%

1 posts

N/A

MikeGorse@mindly.social at 2026-01-11T17:08:01.000Z ##

I'm not exactly sure why I'm doing this on a Sunday, and the hard work was done by others, but there you go; proposed fix for CVE-2026-0716. https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/494

##

CVE-2026-21876
(0 None)

EPSS: 0.03%

4 posts

N/A

1 repos

https://github.com/daytriftnewgen/CVE-2026-21876

beyondmachines1@infosec.exchange at 2026-01-10T09:01:07.000Z ##

OWASP CRS Patches Critical Multipart Charset Validation Bypass

OWASP CRS released patches for a critical vulnerability (CVE-2026-21876) that allows attackers to bypass charset validation in multipart requests. By placing malicious payloads in early request parts, attackers can slip UTF-7/16/32 encoded XSS attacks past the WAF.

**If you are using WAF OWASP Core Rule Set to version 4.22.0 or 3.3.8 this is important. Update the Core rule 922110 ASAP. Don't not rely on default settings for rule 922110 until you have applied these patches. Attackers can easily hide malicious scripts in multi-part uploads.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/owasp-crs-patches-critical-multipart-charset-validation-bypass-6-n-o-8-z/gD2P6Ple2L

##

_r_netsec@infosec.exchange at 2026-01-08T20:28:06.000Z ##

CVE-2026-21876: OWASP Modsecurity CRS WAF bypass blogpost is out! https://coreruleset.org/20260106/cve-2026-21876-critical-multipart-charset-bypass-fixed-in-crs-4.22.0-and-3.3.8/

##

_r_netsec@infosec.exchange at 2026-01-08T19:58:06.000Z ##

Critical (9.3 CVSS) OWASP ModSecurity CRS WAF bypass advisory and walkthrough is out! https://coreruleset.org/20260106/cve-2026-21876-critical-multipart-charset-bypass-fixed-in-crs-4.22.0-and-3.3.8/

##

cR0w@infosec.exchange at 2026-01-07T21:09:45.000Z ##

Docker WAF doesn't filter on username, apparently. Seems weird. The CVE isn't published yet but they are claiming a number for it in the repo. Either way, if you have Docker WAF logs, maybe look for interesting payloads in the username parameter. Or don't.

https://github.com/daytriftnewgen/CVE-2026-21876

##

CVE-2025-66005
(0 None)

EPSS: 0.00%

1 posts

N/A

andersonc0d3@infosec.exchange at 2026-01-09T18:41:59.000Z ##

InputPlumber: Lack of D-Bus Authorization and Input Verification allows UI Input Injection and Denial-of-Service (CVE-2025-66005, CVE-2025-14338)

https://security.opensuse.org/2026/01/09/inputplumber-lack-of-dbus-auth.html

##

CVE-2025-14338
(0 None)

EPSS: 0.00%

1 posts

N/A

andersonc0d3@infosec.exchange at 2026-01-09T18:41:59.000Z ##

InputPlumber: Lack of D-Bus Authorization and Input Verification allows UI Input Injection and Denial-of-Service (CVE-2025-66005, CVE-2025-14338)

https://security.opensuse.org/2026/01/09/inputplumber-lack-of-dbus-auth.html

##

CVE-2025-59819
(0 None)

EPSS: 0.00%

1 posts

N/A

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

##

CVE-2025-59818
(0 None)

EPSS: 0.00%

1 posts

N/A

cR0w@infosec.exchange at 2026-01-09T14:14:27.000Z ##

Tenda

D-Link

TOTOLINK

Zenitel

#infosec #cybersecurity #cPanel #RCE #vulnerability #PentestTools

##

CVE-2025-63261
(0 None)

EPSS: 0.00%

1 posts

N/A

pentesttools@infosec.exchange at 2026-01-09T12:36:00.000Z ##

Our researchers at Pentest-Tools.com just found a new RCE in cPanel (CVE-2025-63261). 🔧

We discovered that a classic Unsafe Perl Open in AWStats allows command execution. The application fails to sanitize input before the open() call, so a well-placed pipe | character tricks the system into spawning a shell instead of reading a file.

This exploit requires zero actual plumbing. 🪠

Read Part 1 of the technical breakdown by Matei Badanoiu: https://pentest-tools.com/blog/cpanel-cve-ptt-2025-021-part-1

##

CVE-2025-67724
(0 None)

EPSS: 0.04%

1 posts

N/A

Ubuntu@activitypub.awakari.com at 2026-01-08T20:43:44.000Z ## Ubuntu 25.10: Tornado Critical XSS DoS Flaws USN-7950-1 CVE-2025-67724 Several security issues were fixed in Tornado.

#Ubuntu #Linux #Distribution #- #Security #Advisories

Origin | Interest | Match ##

CVE-2025-67859
(0 None)

EPSS: 0.00%

1 posts

N/A

andersonc0d3@infosec.exchange at 2026-01-07T23:12:24.000Z ##

TLP: Polkit Authentication Bypass in Profiles Daemon in Version 1.9.0 (CVE-2025-67859)

https://security.opensuse.org/2026/01/07/tlp-polkit-authentication-bypass.html

##

CVE-2025-69139
(0 None)

EPSS: 0.00%

1 posts

N/A

cR0w@infosec.exchange at 2026-01-07T20:05:48.000Z ##

That's a weird thing to do intentionally.

An unused function in MicroServer can start a reverse SSH connection to a vendor registered domain, without mutual authentication. An attacker on the local network with admin access to the web server, and the ability to manipulate DNS responses, can redirect the SSH connection to an attacker controlled device.

https://www.cve.org/CVERecord?id=CVE-2025-69139

##

CVE-2025-14558
(0 None)

EPSS: 0.00%

1 posts

N/A

2 repos

https://github.com/Ashwesker/Ashwesker-CVE-2025-14558

https://github.com/JohannesLks/CVE-2025-14558

securityland@mastodon.social at 2026-01-07T13:39:58.000Z ##

CVE-2025-14558 is a 9.8-severity vulnerability in FreeBSD's IPv6 auto-configuration that lets attackers execute arbitrary code with a single crafted network packet. FreeBSD released patches on December 16, 2024, but the threat escalated when multiple proof-of-concept exploits hit GitHub about two weeks ago.

#SecurityLand #CyberWatch #FreeBSD #Cybersecurity #VulnerabilityManagement #IPv6 #CVE

##

CVE-2025-65606
(0 None)

EPSS: 0.00%

2 posts

N/A

beyondmachines1@infosec.exchange at 2026-01-07T13:01:17.000Z ##

Unpatched root backdoor found in EoL TOTOLINK EX200 extenders

CERT/CC warned of an unpatched vulnerability (CVE-2025-65606) in the end-of-life TOTOLINK EX200 range extender that allows authenticated attackers to open a root-level telnet backdoor. Because the device is no longer supported, no official fix is available.

**If you are using TOTOLINK EX200, be aware that it can be exploited trivially by anyone with minimal access. Ideally, replace it with another device. If that's not possible, limit the number of authenticated users on the web management, with strong passwords and never expose the management interface to the internet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/unpatched-root-backdoor-found-in-eol-totolink-ex200-extenders-7-e-d-z-s/gD2P6Ple2L

##

cR0w@infosec.exchange at 2026-01-06T15:10:41.000Z ##

TOTOLINK

https://www.cve.org/CVERecord?id=CVE-2025-65606 ( not yet published )

https://kb.cert.org/vuls/id/295169

https://github.com/yt2w/CVE-2025-68615

##

CVE-2025-68615
(0 None)

EPSS: 0.04%

1 posts

N/A

1 repos

hackmag@infosec.exchange at 2026-01-07T10:00:23.000Z ##

⚪ Critical RCE vulnerability has been discovered in Net-SNMP

🗨️ A critical remote code execution vulnerability (CVE-2025-68615) has been identified in the open-source networking package Net-SNMP, which implements SNMP protocols versions 1, 2c, and 3. This flaw allows attackers to execute arbitrary code remotely on any server where the snmptrapd service is used t…

🔗 https://hackmag.com/news/critical-rce-vulnerability-has-been-discovered-in-net-snmp?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials