Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

CVE-2025-6348 is a medium-severity SQL Injection vulnerability affecting the Smart Slider 3 plugin for WordPress, versions up to and including 3.5.1.28. The vulnerability arises from improper neutralization of special elements in the 'sliderid' parameter, which is used in SQL queries without sufficient escaping or parameterization. This flaw allows authenticated users with Administrator-level privileges or higher to perform time-based SQL Injection attacks by appending additional SQL commands to existing queries. Exploiting this vulnerability can enable attackers to extract sensitive information from the underlying database, compromising confidentiality. The attack vector requires network access (remote) but demands high privileges (administrator) and no user interaction. The vulnerability does not impact data integrity or availability directly but poses a significant risk to data confidentiality. No known public exploits have been reported yet, and no patches have been linked at the time of publication. The CVSS 3.1 base score is 4.9, reflecting medium severity, with the vector indicating network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

Detailed information about CVE-2025-6348: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in nextendweb Smart Slider

CVE-2025-6348: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in nextendweb Smart Slider 3 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6348: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in nextendweb Smart Slider 3

Failure to handle the error status returned by the buffer management APIs in SiLabs EmberZNet Zigbee stack may result in data leaks or potential Denial of Service (DoS).

CVE-2025-1394 is a medium-severity vulnerability identified in the Silicon Labs EmberZNet Zigbee stack, specifically related to unchecked return values from buffer management APIs. The vulnerability arises because the Zigbee stack fails to properly handle error statuses returned by these APIs, which are critical for managing data buffers during Zigbee communications. This unchecked return value issue is classified under CWE-252, indicating a failure to handle error conditions properly. The consequence of this flaw can lead to data leaks, where sensitive information might be exposed unintentionally, or to potential Denial of Service (DoS) conditions, where the Zigbee device or network could become unresponsive or unstable due to improper buffer handling. The CVSS 4.0 base score is 5.9, reflecting a medium severity level. The attack vector is adjacent network (AV:A), meaning the attacker must be within the Zigbee network range or have access to the Zigbee communication medium. The attack complexity is low (AC:L), and it requires privileges (PR:L) but no user interaction (UI:N). The vulnerability impacts confidentiality and availability highly (VC:H, VA:H), but not integrity (VI:N). The scope is unchanged (S:U), and no authentication bypass or privilege escalation is involved. No known exploits are currently reported in the wild, and no patches have been linked yet. This vulnerability affects the Zigbee stack used in various IoT and smart home devices that rely on Silicon Labs' EmberZNet implementation, which is widely deployed in European smart building, industrial automation, and consumer IoT environments.

Detailed information about CVE-2025-1394: CWE-252 Unchecked Return Value in silabs.com Zigbee Stack affecting silabs.com Zigbee Stack. Get real-time updates, te

CVE-2025-1394: CWE-252 Unchecked Return Value in silabs.com Zigbee Stack - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-1394: CWE-252 Unchecked Return Value in silabs.com Zigbee Stack

A Zigbee Radio Co-Processor (RCP), which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system (CPCd) due to heavy Zigbee traffic, resulting in a Denial of Service (DoS) attack, Only hard reset will bring the device to normal operation

CVE-2025-1221 identifies a medium-severity vulnerability in the Silicon Labs EmberZNet Zigbee stack used by Zigbee Radio Co-Processors (RCPs). The root cause is classified under CWE-667 (Improper Locking), indicating a concurrency control issue within the Zigbee stack implementation. Specifically, under conditions of heavy Zigbee network traffic, the RCP fails to send messages to the host system (CPCd). This failure leads to a Denial of Service (DoS) condition where the device becomes unresponsive to communication requests. The only known recovery method is a hard reset of the device, which interrupts normal operations and may cause downtime. The vulnerability affects versions from 0 up to 4.4.3 of the EmberZNet Zigbee stack. The CVSS 4.0 base score is 5.9 (medium severity), with the vector indicating that the attack requires adjacent network access (AV:A), low attack complexity (AC:L), privileges required (PR:L), and partial attack type (AT:P). No user interaction is needed, and the impact is primarily on availability (VA:H), with no confidentiality or integrity impact. No patches or known exploits are currently reported. This vulnerability highlights a synchronization flaw in the Zigbee stack's handling of concurrent message transmissions under high traffic, causing message loss and device lock-up. Given the widespread use of Zigbee in IoT devices, smart home, and industrial automation, this vulnerability could disrupt critical communications in affected deployments.

Detailed information about CVE-2025-1221: CWE-667 Improper Locking in silabs.com Zigbee affecting silabs.com Zigbee. Get real-time updates, technical details, a

CVE-2025-1221: CWE-667 Improper Locking in silabs.com Zigbee - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-1221: CWE-667 Improper Locking in silabs.com Zigbee

Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the firmware upgrade feature. The issue results from the lack of an anti-downgrade mechanism. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the device. Was ZDI-CAN-26299.

CVE-2025-8321 is a firmware downgrade vulnerability affecting Tesla Wall Connector devices, specifically version 24.44.1. The core issue stems from the absence of an anti-downgrade mechanism in the firmware upgrade process, allowing an attacker with physical access to the device to revert the firmware to an older, potentially vulnerable version. This downgrade can be leveraged in combination with other vulnerabilities to execute arbitrary code on the device without requiring any authentication or user interaction. The vulnerability is classified under CWE-1328, which relates to security version number mutability, indicating that the device does not properly enforce version control during firmware updates. The CVSS v3.0 base score is 6.8 (medium severity), with attack vector being physical (AV:P), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Although no known exploits are currently reported in the wild, the vulnerability presents a significant risk because it allows attackers to gain full control over the Wall Connector device, potentially disrupting charging operations or using the device as a foothold within a local network environment. The lack of authentication and user interaction requirements further increase the risk if an attacker can physically access the device. Tesla Wall Connectors are widely used in residential and commercial settings for electric vehicle charging, making this vulnerability relevant to infrastructure supporting EV adoption.

Detailed information about CVE-2025-8321: CWE-1328: Security Version Number Mutable to Older Versions in Tesla Wall Connector affecting Tesla Wall Connector. Ge

CVE-2025-8321: CWE-1328: Security Version Number Mutable to Older Versions in Tesla Wall Connector - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8321: CWE-1328: Security Version Number Mutable to Older Versions in Tesla Wall Connector

Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of the HTTP Content-Length header. The issue results from the lack of proper validation of user-supplied data, which can result in memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26300.

CVE-2025-8320 is a high-severity remote code execution vulnerability affecting Tesla Wall Connector devices, specifically version 24.44.1. The root cause lies in improper validation of the HTTP Content-Length header during input parsing, classified under CWE-1284 (Improper Validation of Specified Quantity in Input). This flaw allows a network-adjacent attacker to send specially crafted HTTP requests with manipulated Content-Length headers that cause the device to access memory beyond the allocated buffer boundaries. Such out-of-bounds memory access can be exploited to execute arbitrary code within the context of the Wall Connector device. Notably, exploitation does not require authentication or user interaction, significantly lowering the barrier for attackers. The vulnerability was identified and assigned by the Zero Day Initiative (ZDI) as ZDI-CAN-26300 and has a CVSS v3.0 score of 8.8, indicating high impact on confidentiality, integrity, and availability. The Tesla Wall Connector is a network-connected electric vehicle charging device, and successful exploitation could allow attackers to compromise the device firmware, potentially leading to unauthorized control over charging operations or pivoting into connected networks. Although no known exploits are currently observed in the wild, the vulnerability’s characteristics make it a critical concern for organizations deploying Tesla Wall Connectors in their infrastructure.

Detailed information about CVE-2025-8320: CWE-1284: Improper Validation of Specified Quantity in Input in Tesla Wall Connector affecting Tesla Wall Connector. G

CVE-2025-8320: CWE-1284: Improper Validation of Specified Quantity in Input in Tesla Wall Connector - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8320: CWE-1284: Improper Validation of Specified Quantity in Input in Tesla Wall Connector

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home

CVE-2025-4426 is a medium-severity vulnerability classified under CWE-200, which pertains to the exposure of sensitive information to unauthorized actors. This vulnerability exists in a feature of the InsydeH2O BIOS/UEFI firmware developed specifically for Lenovo devices. InsydeH2O is a widely used firmware solution that provides the interface between the operating system and the hardware. The flaw allows an attacker with high privileges (PR:H) and local access (AV:L) to expose sensitive information without requiring user interaction (UI:N). The vulnerability does not impact confidentiality directly (C:N) but affects integrity (I:H), indicating that the unauthorized exposure could lead to modification or tampering with sensitive data or firmware components, potentially undermining system trustworthiness and security. The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially vulnerable component, possibly impacting the entire system or other components. The attack vector is local, requiring the attacker to have physical or logical access to the affected device, and the attack complexity is low (AC:L), implying that exploitation does not require specialized conditions. No known exploits are currently reported in the wild, and no patches are linked yet, suggesting that mitigation may rely on vendor advisories and firmware updates once available. The vulnerability is specific to Lenovo devices using this particular InsydeH2O feature, limiting the affected population but still significant due to Lenovo's market presence. The exposure of sensitive information at the firmware level can have serious implications, including unauthorized firmware manipulation, data leakage, or facilitating further attacks such as privilege escalation or persistent malware installation.

Detailed information about CVE-2025-4426: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Insyde Software InsydeH2O affecting Insyde Softw

CVE-2025-4426: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Insyde Software InsydeH2O - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-4426: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Insyde Software InsydeH2O

CVE-2025-4425 is a high-severity stack-based buffer overflow vulnerability (CWE-121) found in Insyde Software's InsydeH2O BIOS/UEFI firmware, specifically in a feature developed for Lenovo devices. The vulnerability arises from improper handling of input data on the stack, allowing an attacker with high privileges (PR:H) and local access (AV:L) to execute a buffer overflow attack. This can lead to complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H) of the affected system. The vulnerability does not require user interaction (UI:N) but does require elevated privileges, indicating that an attacker must already have some level of system access to exploit it. The scope is changed (S:C), meaning the vulnerability can affect components beyond the initially vulnerable code, potentially impacting the entire system. No known exploits are currently reported in the wild, and no patches have been linked yet, but Lenovo has been notified and maintains advisories on their product security webpage. Given the nature of BIOS/UEFI firmware vulnerabilities, exploitation could allow attackers to execute arbitrary code at a very low level, persist through OS reinstallations, and evade traditional security controls. This makes it a critical concern for affected Lenovo hardware running InsydeH2O firmware with the vulnerable feature enabled.

Detailed information about CVE-2025-4425: CWE-121: Stack-based Buffer Overflow in Insyde Software InsydeH2O affecting Insyde Software InsydeH2O. Get real-time u

CVE-2025-4425: CWE-121: Stack-based Buffer Overflow in Insyde Software InsydeH2O - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-4425: CWE-121: Stack-based Buffer Overflow in Insyde Software InsydeH2O

CVE-2025-4424 is a medium-severity vulnerability classified under CWE-20 (Improper Input Validation) found in Insyde Software's InsydeH2O BIOS/UEFI firmware, specifically in a feature developed for Lenovo devices. The vulnerability arises due to insufficient validation of input data within the firmware code, which can lead to improper handling of inputs. According to the CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N), exploitation requires local access with high privileges, no user interaction, and low attack complexity. The vulnerability impacts the integrity of the system but does not affect confidentiality or availability. The scope is changed, indicating that exploitation could affect components beyond the initially vulnerable code, potentially compromising the entire system firmware or related subsystems. No known exploits are currently reported in the wild, and no patches or detailed technical mitigations have been published yet. The vulnerability is specific to Lenovo devices using this particular InsydeH2O firmware feature, limiting the affected population to Lenovo hardware with this firmware version. Improper input validation in firmware can allow attackers with local privileged access to manipulate firmware behavior, potentially leading to persistent malware installation, firmware corruption, or bypass of security controls, which can be difficult to detect and remediate. Given the firmware-level nature, exploitation could undermine the trustworthiness of the entire platform and evade OS-level security mechanisms.

Detailed information about CVE-2025-4424: CWE-20 Improper Input Validation in Insyde Software InsydeH2O affecting Insyde Software InsydeH2O. Get real-time updat

CVE-2025-4424: CWE-20 Improper Input Validation in Insyde Software InsydeH2O - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-4424: CWE-20 Improper Input Validation in Insyde Software InsydeH2O

CVE-2025-4423 is a high-severity vulnerability classified under CWE-119, which pertains to improper restriction of operations within the bounds of a memory buffer. This vulnerability exists in Insyde Software's InsydeH2O firmware, specifically in a feature developed for Lenovo devices. The flaw involves a memory buffer handling error that could allow an attacker with high privileges to perform out-of-bounds memory operations. Such operations can lead to corruption of memory, potentially enabling an attacker to execute arbitrary code, escalate privileges, or cause denial of service by crashing the system. The CVSS 3.1 score of 8.2 reflects the critical impact on confidentiality, integrity, and availability, with the vector indicating local attack vector (AV:L), low attack complexity (AC:L), requiring high privileges (PR:H), no user interaction (UI:N), scope changed (S:C), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). The vulnerability is specific to Lenovo devices using InsydeH2O firmware with this particular feature, which suggests it is embedded in the BIOS/UEFI firmware layer. No known exploits are currently reported in the wild, and no patches or mitigation links are provided yet. The vulnerability was reserved in May 2025 and published in July 2025, indicating recent discovery and disclosure. Given the firmware-level nature, exploitation could allow attackers to bypass OS-level security controls, persist through reboots, and deeply compromise affected systems.

Detailed information about CVE-2025-4423: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in Insyde Software InsydeH2O affecting

CVE-2025-4423: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in Insyde Software InsydeH2O - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-4423: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in Insyde Software InsydeH2O

CVE-2025-4422 is a high-severity vulnerability classified under CWE-787, which corresponds to an out-of-bounds write flaw found in Insyde Software's InsydeH2O firmware, specifically in a feature developed for Lenovo devices. InsydeH2O is a widely used UEFI BIOS firmware solution that initializes hardware and boots operating systems on many laptops and desktops. The vulnerability allows an attacker with local access and high privileges (PR:H) to perform an out-of-bounds write operation, potentially leading to corruption of memory outside the intended buffer boundaries. This can result in complete compromise of confidentiality, integrity, and availability of the affected system. The CVSS 3.1 base score of 8.2 reflects the critical impact: the vulnerability requires low attack complexity (AC:L) but does require high privileges and no user interaction. The scope is changed (S:C), indicating that exploitation can affect components beyond the initially vulnerable code, potentially compromising the entire system firmware or OS. Successful exploitation could allow an attacker to execute arbitrary code at the firmware level, persist across reboots, bypass security controls, and manipulate system behavior. Although no known exploits are currently in the wild, the severity and nature of the vulnerability make it a significant threat, especially given the firmware's foundational role in system security. The lack of publicly available patches at the time of publication necessitates immediate attention from affected organizations to monitor vendor advisories and prepare for remediation.

Detailed information about CVE-2025-4422: CWE-787 Out-of-bounds Write in Insyde Software InsydeH2O affecting Insyde Software InsydeH2O. Get real-time updates, t

Title	Severity	Type	Source	Date

Vulnerability Threats

Filter Threats

Filtered Threats

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility