349 matches found
CVE-2024-58134
Mojolicious versions from 0.999922 through 9.40 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default. These predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMA...
CVE-2025-4262
creationtimestamp| type| source ---|---|--- 2025-05-05 04:18:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14832 2025-05-05 06:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofprjedkj2w 2025-05-05 07:30:45+00:00| exploited|...
CVE-2023-53039
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...
CVE-2022-49848
In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-combo: fix NULL-deref on runtime resume Commit fc64623637da "phy: qcom-qmp-combo,usb: add support for separate PCSUSB region" started treating the PCSUSB registers as potentially separate from the PCS registers but...
CVE-2025-4131
creationtimestamp| type| source ---|---|--- 2025-05-02 06:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo65rumphs2h 2025-05-02 07:34:52+00:00| seen| https://t.me/cvedetector/24325 2025-05-02 17:16:45+00:00| published-proof-of-concept|...
CVE-2024-9771
creationtimestamp| type| source ---|---|--- 2025-04-28 09:40:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxi3rc62h 2025-04-28 09:52:50+00:00| seen| https://t.me/cvedetector/23886 2025-04-28 17:10:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13707...
CVE-2025-3973
creationtimestamp| type| source ---|---|--- 2025-04-27 15:11:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13622 2025-04-27 15:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnslbpylhh2u 2025-04-27 17:01:02+00:00| published-proof-of-concept|...
CVE-2025-32986
creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13532 2025-04-25 23:20:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedg2hzl2b 2025-04-26 01:52:34+00:00| seen| https://t.me/cvedetector/23787 2025-04-28...
CVE-2025-43859
creationtimestamp| type| source ---|---|--- 2025-04-24 19:09:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114394512917622666 2025-04-24 21:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114395140063306383 2025-04-24 22:24:48+00:00| seen|...
CVE-2025-3840 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
An improper neutralization of input vulnerability was identified in the End of Life EOL OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. An...
CVE-2025-3818
A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB.processinsertquery of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-43967
libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...
CVE-2024-29643
creationtimestamp| type| source ---|---|--- 2025-04-18 14:55:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3uuv2hm5l2...
CVE-2025-39989
In the Linux kernel, the following vulnerability has been resolved: x86/mce: use iscopyfromuser to determine copy-from-user context Patch series "mm/hwpoison: Fix regressions in memory failure handling", v4. 1. What am I trying to do: This patchset resolves two critical regressions related to...
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
CVE-2025-22060
In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cached shadow SRAM information, from concurrent modifications. Both the TCAM and SRAM tables are indirectly accessed by configuring an...
CVE-2025-29662
A RCE vulnerability in the core application in LandChat 3.25.12.18 allows an unauthenticated attacker to execute system code via remote network access...
CVE-2025-22030
In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix cryptofreeacomp deadlock in zswapcpucompdead Currently, zswapcpucompdead calls cryptofreeacomp while holding the per-CPU acompctx mutex. cryptofreeacomp then holds scomplock through cryptoexitscompopsasync. On the...