CVE-2024-23404

creationtimestamp| type| source ---|---|--- 2025-01-01 00:17:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbworkqv25...

CVE-2024-56803

Ghostty is a cross‑platform terminal emulator. In version 1.0.0, it improperly handles a specific window-title escape sequence, allowing an attacker to modify the window title and then insert it back into the command line, potentially enabling arbitrary command execution when a user views a file ...

CVE-2024-13074

creationtimestamp| type| source ---|---|--- 2024-12-31 17:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemkdkrkxs25 2024-12-31 18:44:01+00:00| seen| https://t.me/cvedetector/14052...

CVE-2024-56802

creationtimestamp| type| source ---|---|--- 2024-12-31 15:17:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113748100084170494 2024-12-31 16:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemgzfyxnj2e 2024-12-31 17:53:43+00:00| seen|...

CVE-2024-56211

creationtimestamp| type| source ---|---|--- 2024-12-31 10:05:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113746873107045238 2024-12-31 12:02:02+00:00| seen| https://t.me/cvedetector/13981...

CVE-2024-13067

creationtimestamp| type| source ---|---|--- 2024-12-31 09:07:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113746644001441615 2024-12-31 11:11:44+00:00| seen| https://t.me/cvedetector/13973...

GHSA-VJP8-2WGG-P734

creationtimestamp| type| source ---|---|--- 2024-12-30 18:31:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113743201037683692...

CVE-2024-56801 Tasklists has Blind SQL Injection in /ajax/reorder.php

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

CVE-2024-12836 Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the...

CVE-2024-47919

Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2024-47923 Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-13031

creationtimestamp| type| source ---|---|--- 2024-12-30 00:54:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113739043756073271 2024-12-30 03:25:20+00:00| seen| https://t.me/cvedetector/13911...

CVE-2024-13021

creationtimestamp| type| source ---|---|--- 2024-12-29 20:15:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lehthiji6o22 2024-12-29 21:34:19+00:00| seen| https://t.me/cvedetector/13904 2025-02-01 21:26:34+00:00| published-proof-of-concept|...

CVE-2024-56672

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcgunpinonline blkcgunpinonline walks up the blkcg hierarchy putting the online pin. To walk up, it uses blkcgparentblkcg but it was calling that after blkcgdestroyblkgsblkcg which could free the blkcg,...

CVE-2024-53166

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfqlimitdepth Set new allocated bfqq to bic or remove freed bfqq from bic are both protected by bfqd-lock, however bfqlimitdepth is deferencing bfqq from bic without the lock, this can lead to UAF if t...

CVE-2024-56748

creationtimestamp| type| source ---|---|--- 2024-12-29 12:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legyoqmbm22f 2024-12-29 12:55:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113736214744018973 2024-12-29 14:02:03+00:00| seen|...

CVE-2024-56745

creationtimestamp| type| source ---|---|--- 2024-12-29 12:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legyoiszjl2k 2024-12-29 12:40:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113736155714636462 2024-12-29 14:02:25+00:00| seen|...

CVE-2024-56756

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but nvmeallochostmem could break out of the loop earlier on memory...

CVE-2024-56728

creationtimestamp| type| source ---|---|--- 2024-12-29 12:10:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113736037584609678 2024-12-29 12:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legyntwank2f 2025-08-14 10:00:00+00:00| seen|...

CVE-2024-56723

creationtimestamp| type| source ---|---|--- 2024-12-29 11:36:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113735906201932375 2024-12-29 11:40:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113735919492048723 2024-12-29 12:15:31+00:00| seen|...