SUSE CVE-2023-2235

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perfgroupdetach function did not check the event's siblings' attachstate before calling addeventtogroups, but removeonexec made it possible to call listdelevent...

CVE-2025-25195 Zulip events can leak private channel names

Zulip is an open source team chat application. A weekly cron job added in 50256f48314250978f521ef439cafa704e056539 demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization, not just users in...

CVE-2025-0814

creationtimestamp| type| source ---|---|--- 2025-02-13 07:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li25dij7sa2a 2025-02-13 10:09:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4224 2025-02-13 10:30:28+00:00| seen|...

CVE-2024-13227

creationtimestamp| type| source ---|---|--- 2025-02-13 04:32:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113994705614223180 2025-02-13 04:37:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113994723785203829 2025-02-13 05:15:44+00:00| seen|...

SUSE CVE-2024-57951

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions from CPUHPONLINE to halfway through a CPU hotunplug down to CPUHPHRTIMERSPREPARE, and then back to CPUHPONLINE: Since hrtimerspreparecpu...

DRUPAL-CONTRIB-2025-015

Open Social is a Drupal distribution for online communities, which ships with a default module to invite users to groups and events. Invites for a specific user can be seen under certain conditions. The issue is mitigated for events by the fact that social\event\max\enroll has to be enabled...

CVE-2024-57951 hrtimers: Handle CPU state correctly on hotplug

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions from CPUHPONLINE to halfway through a CPU hotunplug down to CPUHPHRTIMERSPREPARE, and then back to CPUHPONLINE: Since hrtimerspreparecpu...

CVE-2024-3459

creationtimestamp| type| source ---|---|--- 2025-02-12 03:08:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3986 2025-02-12 04:08:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4002 2025-02-14 10:04:02+00:00| seen| Telegram/PPuDhsQ92s3IrjtpmUSRiMeroVDLEMQsWzkj9UlgEAiQQxOw...

CVE-2025-21420

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbhfmnwy2x 2025-02-11 21:04:27+00:00| seen|...

GHSA-38W6-VX8G-67PP

creationtimestamp| type| source ---|---|--- 2025-02-11 15:40:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113986005583376363 2025-02-28 05:39:56+00:00| seen| https://bsky.app/profile/bsky.amase.xyz/post/3lj7oxwt34sq2...

WordPress Simple Google Calendar Outlook Events Block Widget plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Simple Google Calendar Outlook Events Block Widget versions = 2.5.0...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: Fixed deadlocks that occurred during the removal of kctl elements at disconnection. In sndcarddisconnect, we set the card-shutdown flag at the beginning, called callbacks, and performed synchronization for the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: perf/x86/intel: Limit the period on Haswell Running the ltp test cve-2015-3290 concurrently reports the following warnings. perfevents: irq loop stuck! WARNING: CPU: 31 PID: 32438 at arch/x86/events/intel/core.c:3174...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix for out-of-bound access when a valid event group is used. The perf tool allows users to create event groups using the cmd 1, but the driver does not check whether the array index is out of bounds whe...

Astra Linux – Vulnerability in Firefox, Thunderbird

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks were executed for those events. Web content that attempted to use those interfaces would not be able to do so with elevated privileges. However, the presence of these interfaces indicated...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Acquiring kvm-srcu when handling KVMSETVCPUEVENTS Acquire kvm-srcu when processing KVMSETVCPUEVENTS. When SMM mode is toggled, KVM will forcibly leave the nested VMX/SVM state. Leaving such a state also results in...

CVE-2024-28989

creationtimestamp| type| source ---|---|--- 2025-02-11 07:21:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113984042828183491 2025-02-11 08:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhv7rhnhtv2z 2025-02-11 11:30:00+00:00| seen|...

CVE-2024-8351

creationtimestamp| type| source ---|---|--- 2025-02-11 02:19:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuluzxmmw22 2025-02-11 06:14:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhuyypiqky2a...

Exploit for Improper Initialization in Linux Linux_Kernel

Information c Exploit Title: Local Privilege Escalation...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 "tracing: tprobe-events: Fix leakage of module refcount" moved trymoduleget from findtracepointmodulecb to findtracepoint caller, but that introduced a...