CVE-2025-22719

creationtimestamp| type| source ---|---|--- 2025-01-21 14:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb25njvtb2t 2025-01-21 16:08:01+00:00| seen| https://t.me/cvedetector/15965...

AI tool GeoSpy analyzes images and identifies locations in seconds

It's just become even more important to be conscious about the pictures we post online. GeoSpy is an Artificial Intelligence AI supported tool that can derive a person’s location by analyzing features in a photo like vegetation, buildings, and other landmarks. And it can do so in seconds based on...

CVE-2025-22711 WordPress Image Source Control Lite Plugin <= 2.29.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Thomas Maier Image Source Control image-source-control-isc allows Reflected XSS.This issue affects Image Source Control: from n/a through = 2.29.0...

CVE-2025-21660

creationtimestamp| type| source ---|---|--- 2025-01-21 13:13:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113866519156146659 2025-01-21 13:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawr6msbs2p 2025-01-21 13:39:37+00:00| seen|...

CVE-2024-57941

creationtimestamp| type| source ---|---|--- 2025-01-21 12:28:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113866341992199507 2025-01-21 13:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqgxik52b 2025-01-21 13:39:29+00:00| seen|...

CVE-2024-57945

CVE-2024-57945 (Linux kernel, riscv): In the sparse vmemmap model, an out-of-bounds virtual address could be computed for struct page if the first page in the phys_ram_base section does not have the expected PFN, causing VA to fall below VMEMMAP_START (and PCI_IO_END) during page initialization. ...

CVE-2024-12005

creationtimestamp| type| source ---|---|--- 2025-01-21 09:27:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113865629807346067 2025-01-21 10:01:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2383 2025-01-21 10:15:28+00:00| seen|...

CVE-2024-57541

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field ipv6protectstatus is copied to the stack without length verification...

CVE-2024-24443

CVE-2024-24443 concerns OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0, where an uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine can allow an attacker to cause a Denial of Service via a crafted PDU Session Resource Setup Response. This vulne...

CVE-2024-24418

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodepdnaddress function at /nas/ies/PdnAddress.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2025-23214 Cosmos userbase checking vulnerability

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7...

CVE-2025-23214

Summary: Cosmos-Server before version 0.17.7 exposes a user-enumeration vulnerability during login, allowing an attacker to determine if a username exists in the database due to error code behavior. This has been addressed in version 0.17.7. Affected software: Cosmos-Server (pre-0.17.7). Root cau...

CVE-2024-22348

creationtimestamp| type| source ---|---|--- 2025-01-20 18:01:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2372 2025-01-20 18:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzhrzzg2e 2025-01-20 19:14:33+00:00| seen|...

CVE-2025-24010

CVE-2025-24010 affects Vite, a JavaScript frontend tooling framework. The flaw arises from permissive CORS settings and lack of Origin header validation for WebSocket connections, enabling unauthenticated cross-origin access to the development server. The vulnerability is mitigated by upgrades to...

GHSA-H2MG-4C7Q-W69V

creationtimestamp| type| source ---|---|--- 2025-01-20 15:49:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113861471504281674 2025-01-20 16:01:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2364...

CVE-2025-24337

creationtimestamp| type| source ---|---|--- 2025-01-20 13:54:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113861018807403929 2025-01-20 13:59:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2358 2025-01-20 14:15:57+00:00| seen|...

CVE-2025-0580

creationtimestamp| type| source ---|---|--- 2025-01-20 03:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eqcthqp2j 2025-01-20 03:54:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lg5gwcafqs2w 2025-01-20 05:01:09+00:00| seen|...

CVE-2025-0581

creationtimestamp| type| source ---|---|--- 2025-01-20 03:06:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113858471478896382 2025-01-20 03:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eqfg7572t 2025-01-20 03:54:48+00:00| seen|...

MAL-2025-136 Malicious code in @moneyguide-devkit/style-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d41e363cb9b67e73c6cfe2f5b71641d9289a57d80051c4e3e67b22db36574d8 The OpenSSF Package Analysis project identified '@moneyguide-devkit/style-provider' @ 1.0.1 npm as malicious. It is considered malicious because...

CVE-2024-57904

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call inputfreedevice on allocated iiodev Current implementation of at91tsregister calls inputfreedeivce on st-tsinput, however, the err label can be reached before the allocated iiodev is stored to st-tsinput. Thu...