About the security content of iOS 18.3.1 and iPadOS 18.3.1

About the security content of iOS 18.3.1 and iPadOS 18.3.1 This document describes the security content of iOS 18.3.1 and iPadOS 18.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

CVE-2025-0517

creationtimestamp| type| source ---|---|--- 2025-02-08 22:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhp5cwljkx2h 2025-02-09 01:48:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhpj7llv7y2d...

CVE-2024-56889

Incorrect access control in the endpoint /admin/mdelete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter...

CVE-2025-24506

A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types...

CVE-2024-49796

IBM ApplinX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim...

CVE-2024-57278

creationtimestamp| type| source ---|---|--- 2025-02-07 22:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmtahhjy2u 2025-02-08 00:41:47+00:00| seen| https://t.me/cvedetector/17525...

CVE-2024-55215

creationtimestamp| type| source ---|---|--- 2025-02-07 21:50:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113964812542272403 2025-02-07 22:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmt3ddj523 2025-02-07 23:39:25+00:00| seen|...

CVE-2025-24366 Insufficient sanitization of user provided rsync command in SFTPGo

SFTPGo is an open source, event-driven file transfer solution. SFTPGo supports execution of a defined set of commands via SSH. Besides a set of default commands some optional commands can be activated, one of them being rsync. It is disabled in the default configuration and it is limited to the...

CVE-2025-25183

CVE-2025-25183 affects vLLM (prefix cache) where malicious inputs can trigger Python 3.12’s hash(None) behaving as a predictable constant, enabling hash collisions in the prefix cache. This may allow cache entries created from one prompt to be reused for another, causing unintended behavior in re...

CVE-2022-26389

creationtimestamp| type| source ---|---|--- 2025-02-07 17:10:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113963709712812927 2025-02-07 19:03:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3807 2025-02-07 20:30:48+00:00| seen| https://t.me/cvedetector/17513...

CVE-2025-1108

creationtimestamp| type| source ---|---|--- 2025-02-07 14:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhls244wgi2t 2025-02-07 14:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113963153480016900 2025-02-07 16:19:41+00:00| seen|...

CVE-2025-1108 Insufficient data authenticity vulnerability in Janto

Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request by injecting malicious content into...

CVE-2025-25148

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepr2dfp2q 2025-02-07 12:08:38+00:00| seen| https://t.me/cvedetector/17479 2025-02-07 12:53:59+00:00| seen|...

CVE-2025-25071

creationtimestamp| type| source ---|---|--- 2025-02-07 10:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelue4vn2x 2025-02-07 10:15:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113962079963358647...

CVE-2025-25080

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gubbigubbi Kona Gallery Block kona-instagram-feed-for-gutenberg allows Stored XSS.This issue affects Kona Gallery Block: from n/a through = 1.7...

CVE-2025-0302

creationtimestamp| type| source ---|---|--- 2025-02-07 09:26:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113961887520571027 2025-02-07 10:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelnsmti27...

CVE-2025-22402

creationtimestamp| type| source ---|---|--- 2025-02-07 02:28:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113960243769713082 2025-02-07 03:18:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkncpbijh2u 2025-02-07 06:17:15+00:00| seen|...

CVE-2025-1083

creationtimestamp| type| source ---|---|--- 2025-02-06 23:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7pouuxw2u 2025-02-07 02:06:41+00:00| seen| https://t.me/cvedetector/17455 2025-02-07 04:19:27+00:00| seen|...

CVE-2025-21279

CVE-2025-21279 is a Microsoft Edge (Chromium-based) Remote Code Execution vulnerability. Edge is the affected product; CVE-2025-21279 is documented across multiple sources (NVD entry and Microsoft Edge advisories) as a high-severity, network-exposed issue with potential for arbitrary code executi...

CVE-2024-56889

creationtimestamp| type| source ---|---|--- 2025-02-06 21:35:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113959092603822996 2025-02-06 22:16:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gn43ws2u 2025-02-07 00:26:02+00:00| seen|...