CSI2Dig: Recovering Digit Content from Smartphone Loudspeakers Using Channel State Information

Eavesdropping on sounds emitted by mobile device loudspeakers can capture sensitive digital information, such as SMS verification codes, credit card numbers, and withdrawal passwords, which poses significant security risks. Existing schemes either require expensive specialized equipment, rely on...

SUSE CVE-2025-23133

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new channel list, it will be processed according to the following steps: 1. update new channel list to cfg80211 and queue regwork. ...

Azure Linux 3.0 Security Update: edk2 / openssl (CVE-2024-13176)

The version of edk2 / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-13176 advisory. - Issue summary: A timing side-channel which could potentially allow recovering the private key exists...

CBL Mariner 2.0 Security Update: edk2 / openssl (CVE-2024-13176)

The version of edk2 / openssl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-13176 advisory. - Issue summary: A timing side-channel which could potentially allow recovering the private key exists...

GHSA-C5WX-6C2C-F7RM

creationtimestamp| type| source ---|---|--- 2025-04-18 18:58:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12525...

GHSA-HQCX-598M-PJQ4

creationtimestamp| type| source ---|---|--- 2025-04-18 16:58:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12488...

GHSA-JHVP-MWJ4-922M

creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12465 2025-04-18 18:31:46+00:00| published-proof-of-concept| Telegram/7jNmJD5vjZVenNUqyYR0CPI9qktayZ3-idVdIxY76S8ayI...

CVE-2025-38049

creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12405...

CVE-2025-1656

creationtimestamp| type| source ---|---|--- 2025-04-18 03:57:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12383...

CVE-2025-32784

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. In versions prior to 2025.4.10, a race condition vulnerability has been identified in the conda-forge-webservices component used within the shared build infrastructure. This vulnerability, categorized a...

[SECURITY] Fedora 41 Update: perl-String-Compare-ConstantTime-0.321-21.fc41

This module provides one function, "equals", which works like perl's "eq", but which does not provide a timing side-channel. Such comparison is useful when matching against a secret string...

[SECURITY] Fedora 40 Update: perl-String-Compare-ConstantTime-0.321-19.fc40

This module provides one function, "equals", which works like perl's "eq", but which does not provide a timing side-channel. Such comparison is useful when matching against a secret string...

[SECURITY] Fedora 42 Update: perl-String-Compare-ConstantTime-0.321-22.fc42

This module provides one function, "equals", which works like perl's "eq", but which does not provide a timing side-channel. Such comparison is useful when matching against a secret string...

CVE-2025-39444

creationtimestamp| type| source ---|---|--- 2025-04-17 16:58:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12282...

CVE-2025-39423

creationtimestamp| type| source ---|---|--- 2025-04-17 16:58:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12276...

CVE-2025-39414

creationtimestamp| type| source ---|---|--- 2025-04-17 15:57:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12258...

CVE-2025-32945

The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code sets the owner of the new playlist to be the user who performed the request, and then sets the associated channel to the channel ID supplied by the request,...

PT-2025-16980 · Unknown · Work Desktop For Mac

Name of the Vulnerable Software and Affected Versions: Work Desktop for Mac versions 10.8.1.46 and earlier Description: The issue is related to improper verification of the source of a communication channel, allowing attackers to execute arbitrary commands via unauthorized access to the Agent...

Oracle MySQL Connectors (April 2025 CPU)

The 9.0.0, 9.1.0 and 9.2.0 versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2025 CPU advisory. - Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...

CVE-2025-1566

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions...