CVE-2025-23214 Cosmos userbase checking vulnerability

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7...

CVE-2024-22348

creationtimestamp| type| source ---|---|--- 2025-01-20 18:01:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2372 2025-01-20 18:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzhrzzg2e 2025-01-20 19:14:33+00:00| seen|...

CVE-2025-24010

CVE-2025-24010 affects Vite, a JavaScript frontend tooling framework. The flaw arises from permissive CORS settings and lack of Origin header validation for WebSocket connections, enabling unauthenticated cross-origin access to the development server. The vulnerability is mitigated by upgrades to...

GHSA-H2MG-4C7Q-W69V

creationtimestamp| type| source ---|---|--- 2025-01-20 15:49:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113861471504281674 2025-01-20 16:01:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2364...

CVE-2025-24337

creationtimestamp| type| source ---|---|--- 2025-01-20 13:54:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113861018807403929 2025-01-20 13:59:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2358 2025-01-20 14:15:57+00:00| seen|...

CVE-2025-0580

creationtimestamp| type| source ---|---|--- 2025-01-20 03:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eqcthqp2j 2025-01-20 03:54:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lg5gwcafqs2w 2025-01-20 05:01:09+00:00| seen|...

CVE-2025-0581

creationtimestamp| type| source ---|---|--- 2025-01-20 03:06:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113858471478896382 2025-01-20 03:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eqfg7572t 2025-01-20 03:54:48+00:00| seen|...

MAL-2025-136 Malicious code in @moneyguide-devkit/style-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d41e363cb9b67e73c6cfe2f5b71641d9289a57d80051c4e3e67b22db36574d8 The OpenSSF Package Analysis project identified '@moneyguide-devkit/style-provider' @ 1.0.1 npm as malicious. It is considered malicious because...

CVE-2024-57904

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call inputfreedevice on allocated iiodev Current implementation of at91tsregister calls inputfreedeivce on st-tsinput, however, the err label can be reached before the allocated iiodev is stored to st-tsinput. Thu...

CVE-2024-57923

In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix availin bytes for s390 zlib HW compression path Since the input data length passed to zlibcompressfolios can be arbitrary, always setting strm.availin to a multiple of PAGESIZE may cause read-in bytes to exceed t...

CVE-2024-57911

creationtimestamp| type| source ---|---|--- 2025-01-19 11:58:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2341 2025-01-19 12:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shmqcky2b 2025-01-19 12:54:56+00:00| seen|...

CVE-2024-57917

creationtimestamp| type| source ---|---|--- 2025-01-19 11:58:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2337 2025-01-19 12:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3si2kl2t2t 2026-07-28 16:16:12+00:00| seen|...

CVE-2024-57905

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix information leak in triggered buffer The 'scan' local struct is used to push data to user space from a triggered buffer, but it has a hole between the sample unsigned int and the timestamp. This hole is...

CVE-2025-21647

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out ...

CVE-2025-21640

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

CVE-2025-21650

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed hclgefetchpfreg accesses bar space out of bounds issue The TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs 1024-1279 are in different BAR space addresses. However, hclgefetchpfreg does not...

CVE-2025-21645

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be disabled only in cases where i8042 had actually enabled it, otherwise "wakedepth" for this IRQ will try to drop below zero a...

CVE-2025-21649

creationtimestamp| type| source ---|---|--- 2025-01-19 10:58:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2318 2025-01-19 11:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3p4pi2jp2h 2025-01-19 11:27:09+00:00| seen|...

CVE-2025-21651

creationtimestamp| type| source ---|---|--- 2025-01-19 10:58:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2316 2025-01-19 11:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3p4udn322t 2025-01-19 11:42:09+00:00| seen|...

CVE-2025-21640

creationtimestamp| type| source ---|---|--- 2025-01-19 10:57:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113854659059377333 2025-01-19 10:58:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2325 2025-01-19 11:15:44+00:00| seen|...