25717 matches found
Configure Audit Rules for File Access Failures
System calls, such as open, truncate, ftruncate, create and openat, are audited and monitored. If the -EACCES or -EPERM error is returned, you lack the permission to access the files. In this case, audit logs need to be recorded. File access failures due to a lack of proper permissions are common...
Graylog 跨站脚本漏洞
Graylog is a centralized log management solution from the US company Graylog. The product supports capturing, storing, and analyzing logs in real-time, among other things. A cross-site scripting vulnerability exists in Graylog versions prior to 6.2.0, which stems from an HTML form that can be...
PT-2025-20150 · Xylus Themes · Xylus Themes Xt Event Widget For Social Events
Name of the Vulnerable Software and Affected Versions: Xylus Themes XT Event Widget for Social Events versions 1.1.7 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' or PHP Loca...
Configure a Proper Value for audit_backlog_limit
auditbackloglimit sets the buffer queue length for audit events awaiting transfer to the audit service. The default value is 64. If the queue is full, audit events are discarded and an alarm log is generated, indicating that the queue is full. If the value is too small, audit events may be lost. ...
CVE-2025-0853
The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'saveheaderbuilder' function in all versions up to, and including, 5.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...
CVE-2025-0853
CVE-2025-0853: PGS Core WordPress plugin
CVE-2022-32881
creationtimestamp| type| source ---|---|--- 2025-05-06 19:21:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15201...
CVE-2022-22677
creationtimestamp| type| source ---|---|--- 2025-05-06 19:21:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15188...
GHSA-9PCC-GVX5-R5WM
creationtimestamp| type| source ---|---|--- 2025-05-06 17:13:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462007419812570 2025-05-06 18:21:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15182 2025-05-06 19:30:34+00:00| published-proof-of-concept|...
CVE-2025-46588
creationtimestamp| type| source ---|---|--- 2025-05-06 14:21:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15123...
CVE-2024-49835
creationtimestamp| type| source ---|---|--- 2025-05-06 13:20:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15104...
CVE-2022-32903
creationtimestamp| type| source ---|---|--- 2025-05-06 04:20:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15052...
CVE-2025-47297
creationtimestamp| type| source ---|---|--- 2025-05-06 03:20:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15036 2025-05-06 06:21:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajosack2e...
SUSE CVE-2022-49797
In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on traceeventfile in kprobeeventgentestexit When tracegeteventfile failed, genkretprobetest will be assigned as the error code. If module kprobeeventgentest is removed now, the null...
SUSE CVE-2022-49798
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race where eprobes can be called before the event The flag that tells the event to call its triggers after reading the event is set for eprobes after the eprobe is enabled. This leads to a race where the eprobe may b...
CVE-2025-45611
creationtimestamp| type| source ---|---|--- 2025-05-05 19:20:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14965 2025-05-06 00:15:26+00:00| seen| https://t.me/cvedetector/24512...
CVE-2025-45618
creationtimestamp| type| source ---|---|--- 2025-05-05 19:20:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14958 2025-05-06 00:15:20+00:00| seen| https://t.me/cvedetector/24508...
SUSE CVE-2022-49799
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix wild-memory-access in registersynthevent In registersynthevent, if setsyntheventprintfmt failed, then both traceremoveeventcall and unregistertraceevent will be called, which means the traceeventcall will call...
SUSE CVE-2022-49800
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in testgensynthcmd and testemptysynthevent testgensynthcmd only free buf in fail path, hence buf will leak when there is no failure. Add kfreebuf to prevent the memleak. The same reason and solution in...
