9702 matches found
CVE-2025-0315
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44wthh2n 2025-03-20 13:05:08+00:00| seen| Telegram/0tokKlWnGavu1g5EFwRDRnlGnj7brX6W2ajJgncmBMXjS3Y 2025-03-20 13:13:15+00:00| seen| https://t.me/cvedetector/20720...
CVE-2025-0453
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44thbj2w 2025-03-20 13:13:08+00:00| seen| https://t.me/cvedetector/20715 2025-03-20 16:18:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...
CVE-2025-0191
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr43rj2e2m...
CVE-2025-0628
creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836524629766 2025-03-20 13:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr45ozcp24 2025-03-20 13:13:01+00:00| seen|...
CVE-2024-9880
creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836353277686 2025-03-26 17:25:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8900...
CVE-2024-9919
creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836385681439...
CVE-2024-12433
creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhgh6qx2m...
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: CVE-2024-47538: Fixed a stack-buffer overflow in vorbishandleidentificationpacket bsc1234415. CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser bsc1234450. CVE-2024-47600: Fixed Out-of-bounds read in...
CVE-2025-0454
A Server-Side Request Forgery SSRF vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the urlparse function from the urllib.parse library and the requests library. A malicious...
CVE-2024-6827
Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data...
CVE-2024-10457
CVE-2024-10457 describes multiple SSRF vulnerabilities in the significant-gravitas/autogpt project (agpt-platform-beta-v0.1.1). The issues arise when inputs to a set of GitHub integration and web-search blocks are controlled by untrusted sources, enabling requests to internal or attacker-controll...
CVE-2024-7045
...
CVE-2024-10550
CVE-2024-10550 affects h2oai/h2o-3 v3.46.0.1. The /3/ParseSetup endpoint applies a user-specified regex to a user-controlled string, enabling Regular Expression DoS (ReDoS) that can exhaust server resources and render the service unresponsive. Affected component: h2o-core in h2o-3; root cause is ...
CVE-2024-9098 Privilege Escalation in lunary-ai/lunary
In lunary-ai/lunary before version 1.4.30, a privilege escalation vulnerability exists where admins can invite new members with billing permissions, thereby gaining unauthorized access to billing resources. This issue arises because the user creation endpoint does not restrict admins from invitin...
CVE-2025-0188 SSRF in gaizhenbiao/chuanhuchatgpt
A Server-Side Request Forgery SSRF vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access th...
CVE-2024-13060 Improper Authorization in mintplex-labs/anything-llm
A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1...
[SECURITY] [DLA 4087-1] python3.9 security update
Debian LTS Advisory DLA-4087-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton March 20, 2025 https://wiki.debian.org/LTS Package : python3.9 Version : 3.9.2-1+deb11u3 CVE ID : CVE-2022-0391 CVE-2025-0938 CVE-2025-1795 Multiple vulnerabilities were discovered in...
CVE-2025-27718
creationtimestamp| type| source ---|---|--- 2025-03-20 06:35:55+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lks3grzvck23 2025-03-28 08:27:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9284 2025-03-28 11:53:24+00:00| seen| https://t.me/cvedetector/21386...
CVE-2024-13881
creationtimestamp| type| source ---|---|--- 2025-03-20 06:18:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8171 2025-03-20 09:02:17+00:00| seen| https://t.me/cvedetector/20696 2025-03-20 09:03:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomb2ac2m...