CVE-2025-27148 Gradle vulnerable to local privilege escalation through system temporary directory

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...

PT-2025-7918 · Gradle +1 · Gradle +1

Name of the Vulnerable Software and Affected Versions: net.rubygrapefruit:native-platform versions prior to 0.22-milestone-28 Gradle version 8.12 Description: The issue concerns a local privilege escalation vulnerability in the Gradle build automation tool, specifically in its native-platform...

CVE-2024-32039

creationtimestamp| type| source ---|---|--- 2025-02-06 02:42:28+00:00| seen| Telegram/Km680gjKos8pRJqMLOIOLAj-x3jsxfol5Q34nxF-l2oeUQN...

CVE-2024-2425

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:10+00:00| seen| Telegram/czfAMzbDCvq9Z-zRPRQ1UAom0EP5uTgZq3uqCGmDmKENcw3x...

CVE-2023-27921

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:09+00:00| seen| Telegram/XANJTwovqYLXfEQWPf54ihXwFhVs2QrdWjjKPbSSytjk4pMG...

CVE-2023-27920

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:09+00:00| seen| Telegram/q6ANZjLPpFnDjBWRcFlS8uYup3H9cBzfCoPUsH5PCbmMdP...

CVE-2024-1380

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:08+00:00| seen| Telegram/kHT30yXpPDepimDODFZdDEqhbXa4jYJbMvwyQAAdrf6ehA...

CVE-2024-3892

creationtimestamp| type| source ---|---|--- 2025-01-28 17:16:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3262...

GHSA-WQ36-MXF8-HV62

creationtimestamp| type| source ---|---|--- 2025-01-28 17:02:26+00:00| seen| Telegram/cYfPl4Qca19rkqt8FYd7E49qcDewBCCVh3ubWy62Agpv4JE...

GHSA-R6RJ-H75W-VJ8V

creationtimestamp| type| source ---|---|--- 2025-01-28 17:02:25+00:00| published-proof-of-concept| Telegram/VQDyMSiZHY5xvEKb4oih99dlPq4vD6lnAW-AaTy3BGN-vo...

GHSA-CRHP-7C74-CG4C

creationtimestamp| type| source ---|---|--- 2025-01-28 14:58:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3256...

CVE-2025-0290

creationtimestamp| type| source ---|---|--- 2025-01-28 08:52:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113905128253455906 2025-01-28 09:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs4lkv7mh2h 2025-01-28 12:56:15+00:00| seen|...

CVE-2024-3831

creationtimestamp| type| source ---|---|--- 2025-01-28 04:09:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3227...

CVE-2024-3680

creationtimestamp| type| source ---|---|--- 2025-01-28 04:09:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3223...

CVE-2024-4158

creationtimestamp| type| source ---|---|--- 2025-01-28 04:09:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3221...

CVE-2012-3372

creationtimestamp| type| source ---|---|--- 2025-01-28 03:22:55+00:00| seen| Telegram/4Luhw53kp1YwWP0eSynmA1Q-VvreakSPf0CJJOvFk6vXgy...

CVE-2014-4608

creationtimestamp| type| source ---|---|--- 2025-01-28 03:22:55+00:00| seen| Telegram/NgL8djqURFf-wT2WisqVtoXKjBTwFjgsdiHpw3J2jDJbcJQb...

CVE-2023-27562

creationtimestamp| type| source ---|---|--- 2025-01-28 03:22:55+00:00| seen| Telegram/k7t03MalwjLdqCngJjZKPZP4--0UU7qsiY4l87dEKRbDADz...

CVE-2010-2642 affecting package t1lib 5.1.2-28

CVE-2010-2642 affecting package t1lib 5.1.2-28. No patch is available currently...

CVE-2023-20732

creationtimestamp| type| source ---|---|--- 2025-01-08 15:13:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/698...