CVE-2022-49114

creationtimestamp| type| source ---|---|--- 2025-05-15 12:34:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16469...

SUSE CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

SUSE-SU-2025:0613-2 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136. Other bugfixes: - Non approved PBKDF parameters wrongly resulting as approved bsc1236771...

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

...

git: The sideband payload is passed unfiltered to the terminal in git

A flaw was found in Git. When cloning, fetching, or pushing from a server, informational or error messages are transported from the remote Git process to the client via a sideband channel. These messages are prefixed with "remote:" and printed directly to the standard error output. Typically, thi...

Zulip 安全漏洞

Zulip is a powerful open-source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in Zulip versions prior to 10.0 to 10.3, which stems from a channel creation permission...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-devel-32bit / etc (SUSE-SU-2025:1550-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1550-1 advisory. Security: - CVE-2025-27587: Timing side channel vulnerability in the P-384 implementation when used with...

PT-2025-21585 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: Zulip versions 10.0 through 10.2 Description: The issue concerns the "Who can create public channels" access control mechanism in Zulip, which can be circumvented by creating a private or web-public channel and then changing the channel priva...

GHSA-QPJV-V59X-3QC4

creationtimestamp| type| source ---|---|--- 2025-05-14 23:33:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16435...

CLSA-2025-1747251120 buildah: Fix of 2 CVEs

Rebuild with new golang version to address the following CVEs: - CVE-2023-45287: Timing Side Channel attack in RSA based TLS key exchanges - CVE-2024-34156: panic due to stack exhaustion for Decoder.Decode...

CVE-2024-24981

creationtimestamp| type| source ---|---|--- 2025-05-14 18:32:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16373...

CVE-2025-47782

creationtimestamp| type| source ---|---|--- 2025-05-14 15:09:40+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-g5mq-prx7-c588 2025-05-14 16:33:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16329...

GHSA-9CWV-PXCR-HFJC

creationtimestamp| type| source ---|---|--- 2025-05-14 07:30:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16291...

kernel: dmaengine: fix NULL pointer in channel unregistration function

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function The Linux kernel CVE team has assigned CVE-2023-52492 to this issue. Upstream advisory:...

GHSA-W443-5H3J-JQCP Duplicate Advisory: crossbeam-channel Vulnerable to Double Free on Drop

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pg9f-39pc-qf8g. This link is maintained to preserve external references. Original Description In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some...

Duplicate Advisory: crossbeam-channel Vulnerable to Double Free on Drop

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pg9f-39pc-qf8g. This link is maintained to preserve external references. Original Description In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some...

RHSA-2025:7437

creationtimestamp| type| source ---|---|--- 2025-05-14 00:31:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16274...

Alibaba Cloud Linux 3 : 0126: bind (ALINUX3-SA-2023:0126)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0126 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-3341: The code that processes control...

CVE-2025-47710: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0...

Alibaba Cloud Linux 3 : 0216: nss (ALINUX3-SA-2024:0216)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0216 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-5388: NSS was susceptible to a...