CVE-2024-57948 mac802154: check local interfaces before deleting sdata list

In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting sdata list syzkaller reported a corrupted list in ieee802154ifremove. 1 Remove an IEEE 802.15.4 network interface after unregister an IEEE 802.15.4 hardware device from the system...

CVE-2024-13566

The WP DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 0.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-22265 WordPress EMI Calculator plugin <= 1.1 - Settings Change vulnerability

Missing Authorization vulnerability in mgplugin EMI Calculator emi-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EMI Calculator: from n/a through = 1.1...

CVE-2024-13216 HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsor

The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.7 via the 'render' function in /includes/widgets/hteventsponsor.php. This makes it possible for authenticated attackers, with...

CVE-2024-23937

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the debug interface. The issue results from the lack of proper...

CVE-2025-24505

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file...

CVE-2024-13700

creationtimestamp| type| source ---|---|--- 2025-01-30 14:17:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoexlcnj2t 2025-01-30 15:17:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113917966659185202 2025-01-30 16:46:34+00:00| seen|...

CVE-2024-12822

creationtimestamp| type| source ---|---|--- 2025-01-30 14:16:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodu27tl2t 2025-01-30 14:32:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113917789464466680 2025-01-30 16:46:41+00:00| seen|...

CVE-2025-0741 Improper Access Control vulnerability in EmbedAI

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to write messages into other users chat by changing the parameter "chatid" of the POST request "/embedai/chats/sendmessage"...

CVE-2024-57513

A floating-point exception FPE vulnerability exists in the AP4TfraAtom::AP4TfraAtom function in Bento4...

CVE-2024-11187

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...

CVE-2024-11187

A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...

CVE-2025-0840

A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2024-57436

creationtimestamp| type| source ---|---|--- 2025-01-29 14:20:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113912080898338103 2025-01-29 15:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvb65a5sx27 2025-01-29 17:21:29+00:00| seen|...

CVE-2024-13561

creationtimestamp| type| source ---|---|--- 2025-01-29 11:19:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113911371435509053 2025-01-29 12:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgux4sa3is2p 2025-01-29 15:14:37+00:00| seen|...

CVE-2025-0800

CVE-2025-0800 affects SourceCodester Online Courseware 1.0, specifically the Edit Teacher component (file /pcci/admin/saveeditt.php). The vulnerability arises from manipulation of the fname argument, enabling cross-site scripting. The issue can be triggered remotely, and public exploits exist. Mu...

CVE-2024-57513

A floating-point exception FPE vulnerability exists in the AP4TfraAtom::AP4TfraAtom function in Bento4...

CVE-2025-0659 Path Traversal and Rockwell Automation Third-party Vulnerability in DataMosaix™ Private Cloud

A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A threat actor with admin privileges could...

CVE-2024-12723

creationtimestamp| type| source ---|---|--- 2025-01-28 06:12:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113904500113068387 2025-01-28 06:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrsjvjego2n 2025-01-28 07:08:39+00:00| seen|...

CVE-2024-45336

The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however,...