CVE-2020-2942

Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications component: User Interface. The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

OAuth Redirect Flaw in Airline Travel Integration Exposes Millions to Account Hijacking

Cybersecurity researchers have disclosed details of a now-patched account takeover vulnerability affecting a popular online travel service for hotel and car rentals. "By exploiting this flaw, attackers can gain unauthorized access to any user’s account within the system, effectively allowing them...

CVE-2025-24123

creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxtjwu6i2c 2025-01-28 18:48:57+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113907474999986960 2025-03-18 04:00:00+00:00| seen|...

CVE-2025-21564

...

CVE-2025-21540

...

CVE-2023-24278

creationtimestamp| type| source ---|---|--- 2025-01-19 21:02:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pub7dg52h 2025-02-26 19:24:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5585...

CVE-2025-23816

creationtimestamp| type| source ---|---|--- 2025-01-16 21:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7cpqz632r...

Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions

Cybersecurity researchers have found that the Microsoft Active Directory Group Policy that's designed to disable NT LAN Manager NTLM v1 can be trivially bypassed by a misconfiguration. "A simple misconfiguration in on-premise applications can override the Group Policy, effectively negating the...

CVE-2025-21238

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

Microsoft Outlook Remote Code Execution Vulnerability

...

CVE-2024-39802

creationtimestamp| type| source ---|---|--- 2025-01-14 15:19:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkeo6jcn2f 2025-01-14 15:50:12+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113827499814818967 2025-01-14 17:20:23+00:00| seen|...

CVE-2025-22946

creationtimestamp| type| source ---|---|--- 2025-01-10 15:13:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113804705459569518 2025-01-10 15:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfficjf2ln2a 2025-01-10 15:48:59+00:00| seen|...

CVE-2024-12033

creationtimestamp| type| source ---|---|--- 2025-01-07 11:37:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/393 2025-01-07 12:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5muickv22i 2025-01-07 12:53:30+00:00| seen|...

CVE-2024-49249

creationtimestamp| type| source ---|---|--- 2025-01-07 10:55:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113786703677090826 2025-01-07 11:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jijlme22o 2025-01-07 11:37:46+00:00| seen|...

CVE-2024-11711

creationtimestamp| type| source ---|---|--- 2024-12-14 06:46:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113649831070852946 2024-12-14 06:50:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113649844459675891 2024-12-14 09:20:25+00:00| seen| https://t.me/cvedetector/129...

Cleo File Transfer Vulnerability Under Exploitation – Patch Pending, Mitigation Urged

Users of Cleo-managed file transfer software are being urged to ensure that their instances are not exposed to the internet following reports of mass exploitation of a vulnerability affecting fully patched systems. Cybersecurity company Huntress said it discovered evidence of threat actors...

CVE-2024-47581

creationtimestamp| type| source ---|---|--- 2024-12-10 00:50:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113625782216105904 2024-12-10 03:15:35+00:00| seen| https://t.me/cvedetector/12461...

Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 Denial of Service (CVE-2012-2469)

Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability HA policy is configured for Reset, allows remote attackers to cause a denial of service device reset via a malformed Cisco Discovery Protocol CDP packet, aka Bug IDs CSCtk34535 and CSCtk19132. This plugin...

python-2.7.18-51.1 on GA media (moderate)

python-2.7.18-51.1 on GA media Announcement ID: openSUSE-SU-2024:14535-1 Rating: moderate Cross-References: CVE-2024-11168 CVSS scores: CVE-2024-11168 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2024-11168 SUSE : 6.3...