CVE-2025-23131 dlm: prevent NPD when writing a positive value to event_done

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

CVE-2025-23131

CVE-2025-23131 affects the Linux kernel in the DLM subsystem. The issue occurs when do_uevent returns a positive value written to event_done; this value previously caused new_lockspace to consider it a success, leaving lockspace uninitialized and leading to a NULL pointer dereference in dlm_find_...

CVE-2025-23131 dlm: prevent NPD when writing a positive value to event_done

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

CVE-2025-23131

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerabi...

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131 Zabbix SAML Authentication Exploit This Python...

CVE-2024-23131

creationtimestamp| type| source ---|---|--- 2024-02-22 05:26:47+00:00| seen| https://t.me/ctinow/190413 2024-02-22 05:26:55+00:00| seen| https://t.me/ctinow/190419...

CVE-2023-23131

creationtimestamp| type| source ---|---|--- 2023-02-01 16:14:11+00:00| seen| https://t.me/cibsecurity/57289 2025-03-27 14:27:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9088...

CVE-2023-23131

Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security ATS Settings...

CVE-2023-23131

Selfwealth iOS mobile App version 3.3.1 is identified as vulnerable due to Insecure App Transport Security (ATS) Settings. The root cause is improper ATS configuration allowing insecure network communication, which could impact confidentiality. AvailableConnected sources (NVD/Red Hat/PRION/CNNVD-...

CVE-2023-23131

Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security ATS Settings...

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131poc-exp-zabbix CVE-2022-23131 Vulnerability Ba...

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131poc-exp-zabbix CVE-2022-23131 Vulnerability Ba...

CVE-2020-23131

creationtimestamp| type| source ---|---|--- 2022-04-02 18:32:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1827...

Zabbix Web Frontend Authentication Bypass (CVE-2022-23131)

An authentication bypass vulnerability exists in Zabbix Web Frontend. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

CISA Alerts on Actively Exploited Flaws in Zabbix Network Monitoring Platform

The U.S. Cybersecurity and Infrastructure Security Agency CISA has warned of active exploitation of two security flaws impacting Zabbix open-source enterprise monitoring platform, adding them to its Known Exploited Vulnerabilities Catalog. On top of that, CISA is also recommending that Federal...

Exploit for Authentication Bypass by Spoofing in Zabbix

Zabbix SAML SSO Login Bypass Vulnerability CVE-2022-23131 Env...

Vulnerabilities fixed in Zabbix

Vulnerabilities have been fixed in Zabbix. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Cross-Site Scripting XSS. Circumvention of security measure Remote code execution Administrator/Root rights Remote code execution User rights...

CVE-2022-23131

creationtimestamp| type| source ---|---|--- 2022-01-13 18:18:30+00:00| seen| https://t.me/cibsecurity/35414 2022-02-19 13:30:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5445 2022-02-20 10:36:27+00:00| published-proof-of-concept| https://t.me/windef/100 2022-02-24...

CVE-2022-23131

In the case of instances where the SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to...