22002 matches found
Exposure of Sensitive Information Through Metadata
Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata when executing the UpdateChannelBookmark function, due to improper handling of user permissions. By creating a bookmark referencing a deleted file, an attacker can expose metadata from...
Exposure of Sensitive Information Through Metadata
Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata when executing the UpdateChannelBookmark function, due to improper handling of user permissions. By creating a bookmark referencing a deleted file, an attacker can expose metadata from...
Exposure of Sensitive Information Through Metadata
Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata when executing the UpdateChannelBookmark function, due to improper handling of user permissions...
Exposure of Sensitive Information Through Metadata
Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata when executing the UpdateChannelBookmark function, due to improper handling of user permissions. By creating a bookmark referencing a deleted file, an attacker can expose metadata from...
GHSA-Q9F6-4R6R-H74P
creationtimestamp| type| source ---|---|--- 2025-04-22 16:03:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12875...
CVE-2022-45685
creationtimestamp| type| source ---|---|--- 2025-04-22 04:03:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12798...
CVE-2017-17736
creationtimestamp| type| source ---|---|--- 2025-04-22 02:52:21+00:00| published-proof-of-concept| https://t.me/AGENTZSECURITY/1246...
CVE-2022-42817
creationtimestamp| type| source ---|---|--- 2025-04-21 21:02:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12765...
GHSA-8W3P-QH3X-6GJR
creationtimestamp| type| source ---|---|--- 2025-04-21 20:03:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12750...
CVE-2025-22928
creationtimestamp| type| source ---|---|--- 2025-04-21 19:02:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12743...
CVE-2021-39428
creationtimestamp| type| source ---|---|--- 2025-04-21 19:02:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12739...
CVE-2021-36572
creationtimestamp| type| source ---|---|--- 2025-04-21 19:02:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12735...
CVE-2022-45969
creationtimestamp| type| source ---|---|--- 2025-04-21 15:03:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12678...
CVE-2022-40373
creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12675...
CVE-2022-23500
creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12668...
CSI2Dig: Recovering Digit Content from Smartphone Loudspeakers Using Channel State Information
Eavesdropping on sounds emitted by mobile device loudspeakers can capture sensitive digital information, such as SMS verification codes, credit card numbers, and withdrawal passwords, which poses significant security risks. Existing schemes either require expensive specialized equipment, rely on...
SUSE CVE-2025-23133
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new channel list, it will be processed according to the following steps: 1. update new channel list to cfg80211 and queue regwork. ...
Azure Linux 3.0 Security Update: edk2 / openssl (CVE-2024-13176)
The version of edk2 / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-13176 advisory. - Issue summary: A timing side-channel which could potentially allow recovering the private key exists...
CBL Mariner 2.0 Security Update: edk2 / openssl (CVE-2024-13176)
The version of edk2 / openssl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-13176 advisory. - Issue summary: A timing side-channel which could potentially allow recovering the private key exists...