CVE-2024-53034

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset...

CVE-2024-43056

Transient DOS during hypervisor virtual I/O operation in a virtual machine...

CVE-2024-53023

CVE-2024-53023 is described across multiple connected sources as a memory corruption issue that can occur when accessing a variable during extended back-to-back tests. The NVD entry and related records list a high-severity impact (CVSS v3.1: 7.8, High) with a local attack vector, low attack compl...

CVE-2024-53014 Improper Validation of Array Index in Audio

Memory corruption may occur while validating ports and channels in Audio driver...

CVE-2024-43059

CVE-2024-43059 describes a memory corruption flaw in Qualcomm chipsets when invoking IOCTL calls from user space to the HGSL memory node. The issue is triggered by use-space IOCTL handling and has a CVSSv3.1 score of 7.8 (High) with LOCAL attack vector, LOW attack complexity, and LOW privileges r...

CVE-2025-20644

creationtimestamp| type| source ---|---|--- 2025-03-03 03:33:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6143 2025-03-03 04:39:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljh4ymgfsw2d 2025-03-03 05:29:57+00:00| seen| https://t.me/cvedetector/19...

CVE-2025-20647

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-27219

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service DoS vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when...

CVE-2025-27219

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service DoS vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when...

CVE-2025-1833

creationtimestamp| type| source ---|---|--- 2025-03-02 22:29:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6113 2025-03-03 01:18:17+00:00| seen| https://t.me/cvedetector/19273 2025-03-03 02:34:09+00:00| seen|...

CVE-2025-1821 zj1983 zz ZorgAction.java getUserOrgForUserId sql injection

A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userID leads to sql injection. The attack may be launched...

CVE-2024-36353

Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality...

CVE-2025-1813

creationtimestamp| type| source ---|---|--- 2025-03-02 10:31:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6092 2025-03-02 11:47:01+00:00| seen| Telegram/9xeHjlqe2FqnBwCwLppGpa3SHlCxjwuaPPoNHveS16LI4y 2025-03-02 12:24:16+00:00| seen|...

CVE-2025-26202

creationtimestamp| type| source ---|---|--- 2025-03-01 13:43:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/16234 2025-03-01 22:00:06+00:00| published-proof-of-concept| Telegram/fKkzDe0DNuSMMVqiQoko1Vv8grXi6DqZ0Ry-nyZ1VeIGY8 2025-03-04 21:15:00+00:00| seen|...

CVE-2025-26136

creationtimestamp| type| source ---|---|--- 2025-03-01 04:22:11+00:00| seen| https://gist.github.com/xiadmin6/6d664692d31a04eb59096a488b9f3712 2025-03-04 23:54:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljlnylxgxg2f 2025-03-05 00:12:48+00:00| seen|...

CVE-2025-23117

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6033 2025-03-01 06:24:40+00:00| seen| https://t.me/cvedetector/19204 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-379/ 2025-08-19 18:29:29+00:0...

CVE-2025-25329

An issue in Tencent Technology Beijing Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-27408 Manifest Uses a One-Way Hash without a Salt

Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt,...

CVE-2025-1572

creationtimestamp| type| source ---|---|--- 2025-02-28 08:26:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5848 2025-02-28 09:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lja4mfgbzi26 2025-02-28 11:10:39+00:00| seen| https://t.me/cvedetector/19147 2025-03-02...