CVE-2025-21680

In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in getimixentries Passing a sufficient amount of imix entries leads to invalid access to the pktdev-imixentries array because of the incorrect boundary check. UBSAN: array-index-out-of-bounds in...

CVE-2025-21665 filemap: avoid truncating 64-bit offset to 32 bits

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...

CGA-H4Q3-H4GW-X45X

Bulletin has no description...

CVE-2025-24535

creationtimestamp| type| source ---|---|--- 2025-01-31 09:16:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo2dp2sd2w 2025-01-31 10:15:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3633 2025-01-31 11:11:53+00:00| seen| https://t.me/cvedetector/16924...

CVE-2025-23671

creationtimestamp| type| source ---|---|--- 2025-01-31 09:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgznzk3wv32w 2025-01-31 11:11:54+00:00| seen| https://t.me/cvedetector/16925...

CVE-2025-24710

CVE-2025-24710 refers to Gwolle Guestbook (WordPress plugin) with a reflected XSS in versions up to 4.7.1 due to improper input neutralization during page generation. The issue affects Gwolle Guestbook, and the fixed version is newer than 4.7.1. Remediation: upgrade to a version released after 4....

CVE-2025-23759 WordPress Affiliate Tools Việt Nam plugin <= 0.3.17 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gavin Affiliate Tools Việt Nam affiliate-tools-viet-nam allows Reflected XSS.This issue affects Affiliate Tools Việt Nam: from n/a through = 0.3.17...

CVE-2024-13530

creationtimestamp| type| source ---|---|--- 2025-01-31 07:29:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113921792266108738 2025-01-31 08:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzkmrevkh2e...

CVE-2024-12275

creationtimestamp| type| source ---|---|--- 2025-01-31 06:04:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113921455033240436 2025-01-31 06:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwm37gv2h 2025-01-31 08:15:02+00:00| seen|...

CVE-2024-46974

CVE-2024-46974 is tracked across multiple feeds with concrete details: a vulnerability in Imagination Technologies’ GPU driver (PowerVR-GPU) that enables a non-privileged local user to perform improper read/write operations on imported/exported DMA buffers. The NVD entry lists a high impact (CVSS...

GHSA-X5RV-W9PM-8QP8

creationtimestamp| type| source ---|---|--- 2025-01-31 02:04:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113920512197050890 2025-01-31 03:21:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3551 2025-01-31 15:14:56+00:00| published-proof-of-concept|...

CVE-2025-0880

creationtimestamp| type| source ---|---|--- 2025-01-30 21:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyfrkrkxe2t 2025-01-31 01:08:41+00:00| seen| https://t.me/cvedetector/16838...

CVE-2025-0143

CVE-2025-0143 describes an out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5, which may allow an unauthorized user to cause a denial of service via network access. Affected software is the Zoom Workplace App for Linux; root cause is the out-of-bounds write condition. Th...

CVE-2025-24501

creationtimestamp| type| source ---|---|--- 2025-01-30 18:38:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113918758527528552 2025-02-06 02:43:28+00:00| seen| Telegram/upv9y0-cFZ-KC9o7sLGkdSFVAjAHPdQaiwaHNwZ4AhK7w0...

CVE-2025-24500

creationtimestamp| type| source ---|---|--- 2025-01-30 18:23:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113918699528508889 2025-01-30 22:38:34+00:00| seen| https://t.me/cvedetector/16834 2025-02-06 02:43:28+00:00| seen| Telegram/TGmVteE8-5OoE2m3pnRQxH1U4DJdv0U4x9qHKU-yV4K7GBI...

CVE-2025-23216

creationtimestamp| type| source ---|---|--- 2025-01-30 16:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxuyyn6gw2f 2025-01-30 18:26:59+00:00| seen| https://t.me/cvedetector/16795...

CVE-2025-23367

creationtimestamp| type| source ---|---|--- 2025-01-30 15:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnyemmy2e 2025-01-30 18:12:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3499 2025-01-30 18:27:06+00:00| seen| https://t.me/cvedetector/16801...

CVE-2024-13349

creationtimestamp| type| source ---|---|--- 2025-01-30 14:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodzgtjf27 2025-01-30 14:32:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113917789494106875 2025-01-30 16:46:43+00:00| seen|...

CVE-2024-12269

creationtimestamp| type| source ---|---|--- 2025-01-30 14:01:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113917671403718538 2025-01-30 14:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodg4naa2c...

CVE-2025-0870

CVE-2025-0870 affects Axiomatic Bento4 versions up to 1.6.0-641. The vulnerable component is AP4_DataBuffer::GetData in Ap4DataBuffer.h, whose manipulation causes a heap-based buffer overflow. The issue can be exploited remotely with high attack complexity; exploitation has been disclosed publicl...