CVE-2024-53223

In the Linux kernel, the following vulnerability has been resolved: clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs Base clocks are the first in being probed and are real dependencies of the rest of fixed, factor and peripheral clocks. For old ralink SoCs RT2880, RT305x and RT38...

CVE-2024-53222

In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in compalgorithmshow LTP reported a NULL pointer dereference as followed: CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ 3 Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0...

CVE-2024-53218

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix race in concurrent f2fsstopgcthread In my test case, concurrent calls to f2fs shutdown report the following stack trace: Oops: general protection fault, probably for non-canonical address 0xc6cfff63bb5513fc: 0000 1...

CVE-2024-53206

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsktimerhandler. The cited commit replaced inetcskreqskqueuedropandput with inetcskreqskqueuedrop and reqskput in reqsktimerhandler. Then, oreq should be passed to reqskput instead of req;...

CVE-2024-53206 tcp: Fix use-after-free of nreq in reqsk_timer_handler().

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsktimerhandler. The cited commit replaced inetcskreqskqueuedropandput with inetcskreqskqueuedrop and reqskput in reqsktimerhandler. Then, oreq should be passed to reqskput instead of req;...

CVE-2024-53166

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfqlimitdepth Set new allocated bfqq to bic or remove freed bfqq from bic are both protected by bfqd-lock, however bfqlimitdepth is deferencing bfqq from bic without the lock, this can lead to UAF if t...

Exploit for CVE-2024-9933

CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option...

CVE-2024-12977

creationtimestamp| type| source ---|---|--- 2024-12-27 02:02:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113722323447112270 2024-12-27 02:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leaw6lwpoc2i 2024-12-27 04:16:46+00:00| seen|...

CVE-2024-56519

An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute...

CVE-2024-54775

Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting XSS vulnerability via /admin/auth/menu and /admin/auth/extensions...

CVE-2024-54453

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. A path traversal vulnerability in the DocServlet servlet allows remote attackers to retrieve any file from the Kurmi web application installation folder, e.g., files such a...

CVE-2024-12967

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function flnupdate of the file /parse/alledits.php. The manipulation of the argument fname/lname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-45600 Fields GLPI plugin has an Authenticated SQL Injection

Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13...

CVE-2024-12966

CVE-2024-12966 affects code-projects Job Recruitment 1.0. The vulnerability lies in the cn_update function in /_parse/_all_edits.php, where manipulation of the cname and url parameters enables SQL injection. Exploitation appears remote and has been disclosed publicly. Multiple sources corroborate...

CVE-2024-12962

creationtimestamp| type| source ---|---|--- 2024-12-26 19:02:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113720670272522449 2024-12-26 20:45:11+00:00| seen| https://t.me/cvedetector/13691...

[SECURITY] [DSA 5836-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2024 https://www.debian.org/security/faq -...

CVE-2024-47148

creationtimestamp| type| source ---|---|--- 2024-12-26 12:07:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113719038894686088 2024-12-26 12:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le7halueoj2i 2024-12-26 14:03:48+00:00| seen|...

CVE-2024-12942

creationtimestamp| type| source ---|---|--- 2024-12-26 08:01:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113718072802078139 2024-12-26 08:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le6ztflwyg2o 2024-12-26 09:52:56+00:00| seen|...

CVE-2024-12931

creationtimestamp| type| source ---|---|--- 2024-12-26 02:52:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113716859337895197 2024-12-26 03:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le6j3t4mti2c 2024-12-26 04:51:56+00:00| seen|...

CVE-2024-1609

creationtimestamp| type| source ---|---|--- 2024-12-25 03:39:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113711379006140273 2024-12-25 04:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xrcewt2l 2024-12-25 06:17:23+00:00| seen|...