349 matches found
CVE-2024-45340
Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...
CVE-2025-23756 WordPress LawPress plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ivanchernyakov LawPress – Law Firm Website Management lawpress allows Reflected XSS.This issue affects LawPress – Law Firm Website Management: from n/a through = 1.4.5...
CVE-2024-35111
creationtimestamp| type| source ---|---|--- 2025-01-25 13:35:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113889257478861428 2025-01-25 14:05:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3083 2025-01-25 17:06:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3104...
CVE-2025-24704
creationtimestamp| type| source ---|---|--- 2025-01-24 21:47:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113885526576461511...
CVE-2025-24644
creationtimestamp| type| source ---|---|--- 2025-01-24 19:47:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113885054196668289...
CVE-2023-37019
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an S1Setup Request message missing a required Supported TAs field to repeatedly crash the MME, resulting in denial of service...
CVE-2025-23692
creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43agb5q2t 2025-01-16 22:05:52+00:00| seen| https://t.me/cvedetector/15634 2025-01-17 00:23:22+00:00| seen|...
CVE-2024-50858
creationtimestamp| type| source ---|---|--- 2025-01-15 00:03:19+00:00| seen| https://t.me/cvedetector/15376 2025-01-15 17:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113833626963845673...
CVE-2025-21340
creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpumfgz4o2t 2025-01-15 01:56:35+00:00| seen|...
CVE-2024-52963
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets...
CVE-2024-43657
creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/912 2025-01-09 08:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagnja4m2d 2025-01-09 08:32:54+00:00| seen|...
CVE-2023-27531
There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code...
CVE-2024-56409
creationtimestamp| type| source ---|---|--- 2025-01-03 16:52:48+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-j2xg-cjcx-4677 2025-01-03 17:09:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113765525095900326 2025-01-03...
CVE-2024-38753
creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2r2intb2l 2025-01-02 18:38:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113760213893345582...
CVE-2023-46073
creationtimestamp| type| source ---|---|--- 2025-01-02 12:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2khydzn2i 2025-01-02 13:08:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113758914788883417...
CVE-2024-56045
creationtimestamp| type| source ---|---|--- 2024-12-31 13:28:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113747671612296235 2024-12-31 14:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemad2vb6i2k 2024-12-31 16:13:22+00:00| seen|...
CVE-2024-56746
In the Linux kernel, the following vulnerability has been resolved: fbdev: sh7760fb: Fix a possible memory leak in sh7760fballocmem When information such as info-screenbase is not ready, calling sh7760fbfreemem does not release memory correctly. Call dmafreecoherent instead...
CVE-2024-56570
In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovldentryweird function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause error...
CVE-2024-12901
creationtimestamp| type| source ---|---|--- 2024-12-23 02:10:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113699706288445746 2024-12-23 02:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwud3tos42m 2024-12-23 04:07:26+00:00| seen|...