[SECURITY] [DLA 4030-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4030-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 23, 2025 https://wiki.debian.org/LTS -...

CVE-2025-23992

CVE-2025-23992 pertains to a stored XSS in the WordPress plugin Toocheke Companion (Leetoo Toocheke Companion). Affected versions are

CVE-2025-23592 WordPress dForms plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in animexxx dForms dforms allows Reflected XSS.This issue affects dForms: from n/a through = 1.0...

CVE-2025-23089

Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...

Debian dla-3464 : libxmltooling-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3464 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3464-1 [email protected] https://www.debian.org/lts/security/...

CVE-2024-43770

CVE-2024-43770 stems from a missing bounds check in the Bluetooth GATT server path (gatts_process_find_info in gatt_sr.cc), causing an out-of-bounds write. This can enable remote code execution on Android devices with no user interaction and without extra privileges. The issue is classified as a ...

CVE-2024-57541

creationtimestamp| type| source ---|---|--- 2025-01-21 21:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrlemtnh2j 2025-01-22 21:02:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2643...

CVE-2024-57933

In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result i...

CVE-2024-24417

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodeprotocolconfigurationoptions function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a...

[SECURITY] [DLA 4025-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4025-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 20, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4023-1] libebml security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4023-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 20, 2025 https://wiki.debian.org/LTS -...

Exploit for CVE-2024-52380

CVE-2024-52380-Exploit Picsmize plugin for WordPress is vulner...

CVE-2022-20128

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2021-0447

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-57033

creationtimestamp| type| source ---|---|--- 2025-01-17 20:17:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113845537573466684 2025-01-17 20:21:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113845552194441254 2025-01-17 21:15:27+00:00| seen|...

CVE-2024-57784

creationtimestamp| type| source ---|---|--- 2025-01-16 22:56:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2075 2025-01-16 23:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfwkyfpi2p 2025-01-16 23:34:30+00:00| seen|...

CVE-2025-23896

creationtimestamp| type| source ---|---|--- 2025-01-16 21:19:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7gntgxx2f...

CVE-2025-23444

creationtimestamp| type| source ---|---|--- 2025-01-16 20:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3wh6u3n2n 2025-01-16 20:38:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113839956738630575...

CVE-2024-57678

creationtimestamp| type| source ---|---|--- 2025-01-16 18:54:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113839550937045613 2025-01-16 18:56:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1999 2025-01-16 19:15:58+00:00| seen|...

CVE-2024-10789

The WP User Profile Avatar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5. This is due to missing or incorrect nonce validation on the wpupauseradmin function. This makes it possible for unauthenticated attackers to update the plugins...