CVE-2025-21838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...

CVE-2025-27653

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Preauthenticated Cross Site Scripting XSS: Badge Registration V-2023-012...

CVE-2025-20918

creationtimestamp| type| source ---|---|--- 2025-03-06 05:35:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljorizagyd2a 2025-03-06 05:36:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6651...

CVE-2025-20917

creationtimestamp| type| source ---|---|--- 2025-03-06 05:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljoriy2g552q 2025-03-06 05:36:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6652...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

CVE-2023-4911 - Đây chỉ là tài liệu mang tính chất học tập...

CVE-2025-24521

External XML entity injection allows arbitrary download of files. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25...

Exploit for CVE-2025-1094

CVE-2025-1094 - Đây chỉ là tài liệu mang tính chất học tập...

CVE-2025-1914

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

CVE-2025-24924

CVE-2025-24924 concerns GMOD Apollo missing authentication for a critical function. Connected sources describe that GMOD Apollo lacks sufficient authentication when an administrative username is used, enabling privilege escalation. The ICS/NVD references add concrete technical details: (1) the sy...

Linux Distros Unpatched Vulnerability : CVE-2021-3669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource...

CVE-2024-43055

CVE-2024-43055 affects Qualcomm chipsets and is caused by memory corruption when handling a camera use case IOCTL call. The public records describe this as a memory corruption issue in the camera IOCTL processing, but do not provide concrete product version(s) or a stated remediation beyond gener...

CVE-2025-25724

CVE-2025-25724 affects libarchive up to 3.7.7. The issue is in tar/util.c: list_item_verbose does not check the return value of strftime, which can enable a denial of service or other impact when reading a crafted TAR with verbose=2, potentially impacted by locale-specific buffer sizing. Connecte...

Advisory ROSA-SA-2025-2746

Software: python3x-urllib3 1.25.10 OS: ROSA Virtualization 3.0 packageevrstring: python3x-urllib3-1.25.10-5.rv30 CVE-ID: CVE-2021-33503 BDU-ID: 2022-00586 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the HTTP client for Python urllib3 is related to uncontrolled resource consumption. Exploitation ...

Advisory ROSA-SA-2025-2747

Software: wget 1.19.5 OS: ROSA Virtualization 3.0 packageevrstring: wget-1.19.5-12.0.1.rv30 CVE-ID: CVE-2024-38428 BDU-ID: 2024-04683 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the userinfo URI component of the GNU Wget download manager is related to insecure behavior in which data that shoul...

CVE-2024-57996

In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch adds the check in kernel as well. This fixes the following...

CVE-2025-1692

creationtimestamp| type| source ---|---|--- 2025-02-27 13:27:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5675 2025-02-27 15:53:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asiuo3g26 2025-02-27 16:45:07+00:00| seen| https://t.me/cvedetector/19042...

CVE-2025-21797

creationtimestamp| type| source ---|---|--- 2025-02-27 06:11:26+00:00| seen| https://t.me/cvedetector/19003 2025-03-05 23:16:11+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3ljo4dkyf7k2l...

CVE-2024-57980

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvcstatusinit function fails to allocate the inturb, it will free the dev-status pointer but doesn't reset the pointer to NULL. This results in the kfree call in...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Elliptic

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Elliptic. Vulnerability Details CVEID:CVE-2024-48949 DESCRIPTION: The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S.gtesig.eddsa.curve.n || sig.S.isNeg"...

Security Bulletin: Vulnerability in urllib3 affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0)[CVE-2023-43804]

Summary The urllib3 package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEsCVE-2023-43804 Vulnerability Details CVEID:CVE-2023-43804 DESCRIPTION: urllib3 could allow a remote authenticated attacker to obtain sensitive information,...