CVE-2024-38307

Improper input validation in the firmware for some IntelR AMT and IntelR Standard Manageability may allow an authenticated user to potentially enable denial of service via network access...

CVE-2024-21830

Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-41934

CVE-2024-41934 affects Intel® GPA software and Intel® GPA Framework prior to version 2024.3, with an improper access control vulnerability that may allow an authenticated local attacker to cause a denial of service. Multiple sources (Intel advisory, Red Hat CVE page, PT-security entry) confirm th...

CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PH...

CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

CVE-2025-25343

creationtimestamp| type| source ---|---|--- 2025-02-12 18:41:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113992381212711969 2025-02-12 19:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv4sonws2h 2025-02-12 22:19:49+00:00| seen|...

CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings lik...

CVE-2025-25199

creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187510032617 2025-02-12 18:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrrbreq52s 2025-02-12 20:14:01+00:00| seen|...

CVE-2025-25198

creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187494675681 2025-02-12 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr7c7jn2s 2025-02-12 20:14:00+00:00| seen|...

CVE-2025-25198 mailcow: dockerized vulnerable to password reset poisoning

mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an attacker-controlled domain. This...

CVE-2025-1213

creationtimestamp| type| source ---|---|--- 2025-02-12 17:33:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113992114736691216 2025-02-12 18:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrqzweuo2s 2025-02-12 20:14:01+00:00| seen|...

CVE-2025-0818

creationtimestamp| type| source ---|---|--- 2025-02-12 17:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyofqunhf2x 2025-02-12 17:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyoft4tyv2x 2025-02-12 18:19:50+00:00| seen|...

CVE-2025-25184

CVE-2025-25184 affects Rack (Ruby) where CRLF injection in usernames can be logged by Rack::CommonLogger when credentials are supplied via Rack::Auth::Basic. The issue enables log entry manipulation by including CRLF and whitespace in the username, potentially breaking log formats or injecting fr...

CVE-2025-25351

creationtimestamp| type| source ---|---|--- 2025-02-12 16:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl4fhqyr2d 2025-02-12 18:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4skb227 2025-02-12 18:33:22+00:00| seen|...

CVE-2025-26363

creationtimestamp| type| source ---|---|--- 2025-02-12 15:20:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991591892435093 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4...

CVE-2025-26362

creationtimestamp| type| source ---|---|--- 2025-02-12 15:20:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991591877323833 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4 2025-02-12 15:37:05+00:00| published-proof-of-concept|...

CVE-2025-26353

creationtimestamp| type| source ---|---|--- 2025-02-12 14:50:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113991473713011073...

CVE-2025-26347

creationtimestamp| type| source ---|---|--- 2025-02-12 14:20:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113991355655201744 2025-02-12 14:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464673823116 2025-02-12 15:09:32+00:00| seen|...

CVE-2024-23563

creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeeqhynb2z 2025-02-14 10:05:07+00:00| seen| Telegram/TFFqSfT26ZOJtpMQorftKfykRnf9I0bnr-COpikamZRlN54i...

CVE-2025-21695

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...