9780 matches found
CVE-2022-49784
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/uncore: Fix memory leak for events array When a CPU comes online, the per-CPU NB and LLC uncore contexts are freed but not the events array within the context structure. This causes a memory leak as identified by the...
CVE-2025-37753
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-23141 KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVMGETMPSTATE to protect guest memory accesses Acquire a lock on kvm-srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending IN...
CVE-2025-23141 KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVMGETMPSTATE to protect guest memory accesses Acquire a lock on kvm-srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending IN...
Active Light Modulation to Counter Manipulation of Speech Visual Content
High-profile speech videos are prime targets for falsification, owing to their accessibility and influence. This work proposes Spotlight, a low-overhead and unobtrusive system for protecting live speech videos from visual falsification of speaker identity and lip and facial motion. Unlike...
PT-2025-22197
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the issue described, as the specific fixed version is not mentioned. Description The issue arises when generating the MSR IA32 PEBS ENABLE value for a KVM guest, where the host...
CVE-2025-4083
creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn2zxjro2y 2025-04-29 16:49:37+00:00| seen| https://t.me/cvedetector/23995 2025-04-30 07:52:18+00:00| seen|...
IR Trends Q1 2025: Phishing soars as identity-based attacks persist
Phishing attacks spiked this quarter as threat actors leveraged this method of initial access in half of all engagements, a vast increase from previous quarters. Conversely, the use of valid accounts for initial access was rarely seen this quarter, despite being the top observed method in 2024,...
On the Prevalence and Usage of Commit Signing on GitHub: a Longitudinal and Cross-Domain Study
GitHub is one of the most widely used public code development platform. However, the code hosted publicly on the platform is vulnerable to commit spoofing that allows an adversary to introduce malicious code or commits into the repository by spoofing the commit metadata to indicate that the code...
CVE-2025-46654
creationtimestamp| type| source ---|---|--- 2025-04-26 21:09:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13586 2025-04-26 21:37:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqow6hszp72 2025-04-26...
CVE-2025-27299
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP Asia MyTicket Events myticket-events allows Path Traversal.This issue affects MyTicket Events: from n/a through = 1.2.4...
Cryptocurrency Thefts Get Physical
Long story of a $250 million cryptocurrency theft that, in a complicated chain events, resulted in a pretty brutal kidnapping...
SUSE CVE-2025-32445
Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges. The EventSource and Sensor...
Privilege Escalation
github.com/argoproj/argo-events is vulnerable to Privilege Escalation. The vulnerability is due to insufficient permission controls due to allowing users with EventSource and Sensor custom resource permissions to escalate privileges and gain access to the host system and cluster...
A Collaborative Intrusion Detection System Using Snort IDS Nodes
Intrusion Detection Systems IDSs are integral to safeguarding networks by detecting and responding to threats from malicious traffic or compromised devices. However, standalone IDS deployments often fall short when addressing the increasing complexity and scale of modern cyberattacks. This paper...
GO-2025-3608 Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR in github.com/argoproj/argo-events
Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR in github.com/argoproj/argo-events...
WordPress WordPress Events Calendar Registration & Tickets plugin <= 2.6.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WordPress Events Calendar Registration & Tickets versions = 2.6.0...
Adversarial Observations in Weather Forecasting
AI-based systems, such as Google's GenCast, have recently redefined the state of the art in weather forecasting, offering more accurate and timely predictions of both everyday weather and extreme events. While these systems are on the verge of replacing traditional meteorological methods, they al...
CVE-2025-36625
creationtimestamp| type| source ---|---|--- 2025-04-18 19:56:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114360724984751686 2025-04-18 19:59:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12534 2025-04-18 20:33:46+00:00| seen|...
CVE-2025-32434
creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12473 2025-04-18 16:27:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114359904676181462 2025-04-18 18:31:46+00:00| published-proof-of-concept|...