Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that when a driver is removed from the ice module, specific extts events may still be enabled if th...

WordPress Registrations for the Events Calendar Plugin <= 2.12.2 is vulnerable to SQL Injection

Software Registrations for the Events Calendar Type Plugin Vulnerable versions = 2.12.2 Fixed in 2.12.3 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-39638 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID f81c62e13f56 Credits Trương Hữu Phúc...

DEBIAN-CVE-2024-42075

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arenavmclose...

AZL-47186 CVE-2024-42075 affecting package kernel for versions less than 6.6.43.1-7

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arenavmclose...

CVE-2024-42075 bpf: Fix remap of arena.

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a refcnt for multiple mmap events to prevent use-after-free in arenavmclose...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mremap operation not being accounted for in the bpf arena logic, which requires reference counts to be add...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that reading the scheduling trace logs of /sys/kernel/debug/powerpc/dtl/cpu- when...

CVE-2024-42051

creationtimestamp| type| source ---|---|--- 2024-07-28 06:00:23+00:00| seen| https://t.me/cvedetector/1765 2024-07-28 13:11:14+00:00| seen| https://t.me/HackerArsenal/44...

Researchers Warn of Increased Cyberterrorism Activity Targeting Paris Olympics

Cyberterrorism is on the rise, posing a significant threat to global events like the Paris Olympics and elections,…...

CVE-2024-6922

creationtimestamp| type| source ---|---|--- 2024-07-26 17:11:51+00:00| seen| https://t.me/cvedetector/1687 2024-07-29 11:25:42+00:00| published-proof-of-concept| https://t.me/HackingInsights/7773 2024-07-29 13:33:40+00:00| seen| https://t.me/CyberBulletin/197 2024-07-29 13:35:57+00:00| seen|...

CVE-2024-32484

creationtimestamp| type| source ---|---|--- 2024-07-22 17:50:04+00:00| seen| https://t.me/cvedetector/1459 2025-04-16 21:58:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12157 2025-04-17 02:06:37+00:00| seen| https://t.me/cvedetector/23201...

WordPress Community Events plugin < 1.5 - Event Deletion via CSRF vulnerability

Event Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Community Events versions 1.5...

CVE-2024-6271

The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete arbitrary events via a CSRF attack...

CVE-2024-6271

The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete arbitrary events via a CSRF attack...

CVE-2024-6271 Community Events < 1.5 - Event Deletion via CSRF

The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete arbitrary events via a CSRF attack...

CVE-2024-6271 Community Events < 1.5 - Event Deletion via CSRF

The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete arbitrary events via a CSRF attack...

CVE-2024-6271

CVE-2024-6271 affects Community Events WordPress plugin prior to 1.5. The vulnerability is due to a missing CSRF check when deleting events, allowing a CSRF attack to cause a logged-in admin to delete arbitrary events. No exploitation details are provided in the documents. Remediation: upgrade to...

WordPress Community Events Plugin < 1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Community Events Type Plugin Vulnerable versions 1.5 Fixed in 1.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-6271 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 521f0e010f7a Credits Bob Matyas Required...

CVE-2024-37944

creationtimestamp| type| source ---|---|--- 2024-07-20 12:17:13+00:00| seen| https://t.me/cvedetector/1279 2025-02-14 10:04:01+00:00| seen| Telegram/EPlxP9OwrVnuhB2fuQt9dTdfwRw9Vza1DyEPAOmXJeTzk1Gz...

BIT-WORDPRESS-2024-3756

The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack...