CVE-2024-52005

Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the...

AZL-68573 CVE-2024-57898 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear link ID from bitmap during link delete after clean up Currently, during link deletion, the link ID is first removed from the validlinks bitmap before performing any clean-up operations. However, some functio...

RHSA-2025:0115

creationtimestamp| type| source ---|---|--- 2025-01-15 06:10:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1704...

OpenVPN Data Channel Offload 代码问题漏洞

OpenVPN Data Channel Offload OpenVPN DCO is a cutting-edge Linux kernel module from OpenVPN designed to revolutionize the performance of VPN servers and clients. A code issue vulnerability exists in OpenVPN Data Channel Offload version 1.1.1. Exploitation of this vulnerability by an unprivileged...

CVE-2024-52005: Improper Encoding or Escaping of Output

Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the...

GHSA-94C2-QR2H-88JV

creationtimestamp| type| source ---|---|--- 2025-01-14 23:09:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1636...

CVE-2024-36506

An improper verification of source of a communication channel vulnerability CWE-940 in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection...

CLSA-2025-1736859209 libgcrypt: Fix of CVE-2024-2236

CVE-2024-2236: fix timing-based side-channel vulnerability in RSA implementation...

Updated firefox packages fix security vulnerabilities

WebChannel APIs susceptible to confused deputy attack. CVE-2025-0237 Use-after-free when breaking lines in text. CVE-2025-0238 Alt-Svc ALPN validation failure when redirected. CVE-2025-0239 Compartment mismatch when parsing JavaScript JSON module. CVE-2025-0240 Memory corruption when using...

PT-2026-2936

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description A race condition exists in the serial channel IRP thread tracking of FreeRDP, potentially leading to a heap use-after-free. This occurs when one thread removes an entry from serial-IrpThreads while...

Microsoft Outlook 安全漏洞

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Outlook. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected: Microsoft Office LTSC for Mac...

RHSA-2024:7187

creationtimestamp| type| source ---|---|--- 2025-01-13 21:12:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1393 2025-02-25 08:25:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5260...

RHSA-2024:1897

creationtimestamp| type| source ---|---|--- 2025-01-13 09:11:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1356 2025-05-12 23:29:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16071...

PT-2025-3739

Name of the Vulnerable Software and Affected Versions Intel SGX affected versions not specified Description The issue concerns a critical side-channel attack on Intel SGX, where an attacker can exploit timing variations in SGX enclave operations. This allows for the extraction of attestation keys...

PT-2025-5628 · Intel · Intel Sgx

Name of the Vulnerable Software and Affected Versions: Intel SGX affected versions not specified Description: The issue is a side-channel timing attack against Intel SGX enclaves, which can lead to the complete compromise of Trusted Execution Environment TEE attestation. A proof of concept PoC ha...

CVE-2024-42181

HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...

SUSE CVE-2024-55916

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet If the KVP or VSS daemon starts before the VMBus channel's ringbuffer is fully initialized, we can hit the panic below: hvutils: Registering HyperV Utility Drive...

SUSE CVE-2024-57791

In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sockrecvmsg when draining clc data When receiving clc msg, the field length in smcclcmsghdr indicates the length of msg should be received from network and the value should not be fully trusted as i...

SUSE CVE-2024-57805

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to...

AZL-55754 CVE-2024-55916 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet If the KVP or VSS daemon starts before the VMBus channel's ringbuffer is fully initialized, we can hit the panic below: hvutils: Registering HyperV Utility Drive...