CVE-2025-31534

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtleuvb722 2025-04-01 23:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379121005167 2025-04-01 23:48:39+00:00| seen|...

Ubuntu: Security Advisory (USN-7398-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress WP Compress for MainWP plugin <= 6.30.03 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by theviper17 in WordPress Plugin WP Compress for MainWP versions = 6.30.03...

Friday Squid Blogging: A New Explanation of Squid Camouflage

New research: An associate professor of chemistry and chemical biology at Northeastern University, Deravi’s recently published paper in the Journal of Materials Chemistry C sheds new light on how squid use organs that essentially function as organic solar cells to help power their camouflage...

10 Critical Network Pentest Findings IT Teams Overlook

After conducting over 10,000 automated internal network penetration tests last year, vPenTest has uncovered a troubling reality that many businesses still have critical security gaps that attackers can easily exploit. Organizations often assume that firewalls, endpoint protection, and SIEMs are...

Leaked Black Basta Chats Suggest Russian Officials Aided Leader's Escape from Armenia

The recently leaked trove of internal chat logs among members of the Black Basta ransomware operation has revealed possible connections between the e-crime gang and Russian authorities. The leak, containing over 200,000 messages from September 2023 to September 2024, was published by a Telegram...

CVE-2023-22514

This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...

Linux Distros Unpatched Vulnerability : CVE-2024-10224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary...

CVE-2022-49232

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpudmconnectoraddcommonmodes In amdgpudmconnectoraddcommonmodes, amdgpudmcreatecommonmode is assigned to mode and is passed to drmmodeprobedadd directly after that...

SUSE CVE-2022-49710

In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITSPERLONG The code in dm-log rounds up bitsetsize to 32 bits. It then uses findnextzerobitle on the allocated region. findnextzerobitle accesses the bitmap using unsigned long...

CVE-2022-49532

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer dereference in virtiogpuconngetmodes drmcvtmode may return NULL and we should check it. This bug is found by syzkaller: FAULTINJECTION stacktrace: 168.567394 FAULTINJECTION: forcing a failure. name...

Google Ad-Tech Users Can Target National Security ‘Decision Makers’ and People With Chronic Diseases

Google enables marketers to target people with serious illnesses and crushing debt—against its policies—as well as the makers of classified defense technology, a WIRED investigation has found...

Debunking the AI Hype: Inside Real Hacker Tactics

Is AI really reshaping the cyber threat landscape, or is the constant drumbeat of hype drowning out actual, more tangible, real-world dangers? According to Picus Labs' Red Report 2025 which analyzed over one million malware samples, there's been no significant surge, so far, in AI-driven attacks...

[SECURITY] [DLA 4054-1] tryton-client security update

Debian LTS Advisory DLA-4054-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert February 16, 2025 https://wiki.debian.org/LTS Package : tryton-client Version : 5.0.33-1+deb11u1 CVE ID : not yet available Debian Bug : none Cédric Krier has found that trytond, the...

CVE-2025-23403

creationtimestamp| type| source ---|---|--- 2025-02-11 11:09:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113984941074566403 2025-02-11 11:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjttadwn2v 2025-02-11 12:32:32+00:00| seen|...

CGA-WMJ5-G3P6-H776

Bulletin has no description...

CVE-2025-20125

creationtimestamp| type| source ---|---|--- 2025-02-05 16:21:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113952194437291969 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 18:48:29+00:00| seen|...

CVE-2025-0890

creationtimestamp| type| source ---|---|--- 2025-02-04 10:16:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113945094769665038 2025-02-04 11:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdwklgkws2t 2025-02-04 11:58:05+00:00| seen|...

CVE-2024-13356

creationtimestamp| type| source ---|---|--- 2025-02-04 09:27:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113944905514267967 2025-02-04 10:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt6uw2o72h 2025-02-04 12:13:05+00:00| seen|...

Meet the Hired Guns Who Make Sure School Cyberattacks Stay Hidden

An investigation into more than 300 cyberattacks against US K–12 schools over the past five years shows how schools can withhold crucial details from students and parents whose data was stolen...