CVE-2024-45030

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

CVE-2024-45010

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available Adding the following warning ... WARNONONCEmsk-pm.localaddrused == 0 ... before decrementing the localaddrused counter helped to find a bug when running the "remove single address"...

CVE-2024-45029

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as irq safe On ACPI machines, the tegra i2c module encounters an issue due to a mutex being called inside a spinlock. This leads to the following bug: BUG: sleeping function called from invali...

CVE-2024-45015

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: move dpuencoder's connector assignment to atomicenable For cases where the crtc's connectorschanged was set without enable/active getting toggled , there is an atomicenable call followed by an atomicdisable but witho...

CVE-2024-43405

creationtimestamp| type| source ---|---|--- 2024-09-04 19:25:35+00:00| seen| https://t.me/cvedetector/4815 2025-01-03 15:30:05+00:00| seen| https://bsky.app/profile/wizsecurity.bsky.social/post/3letvtvrric2i 2025-01-03 15:46:37+00:00| seen|...

CVE-2024-44963

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON when freeing tree block after error When freeing a tree block, at btrfsfreetreeblock, if we fail to create a delayed reference we don't deal with the error and just do a BUGON. The error most likely to happen ...

CVE-2024-41570

creationtimestamp| type| source ---|---|--- 2024-08-07 20:26:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8191 2024-10-02 07:56:42+00:00| seen| https://t.me/purplemedved/297 2025-01-19 11:29:07+00:00| seen| https://gist.github.com/pich4ya/bda16a3b2104bea411612f20d536174b...

Trello Data Breach: Hacker Dumps Personal Info of Millions of Users

The hacker behind the Trello data breach claims the data was stolen in January 2024 and can be…...

CVE-2024-6680

creationtimestamp| type| source ---|---|--- 2024-07-11 19:09:24+00:00| seen| https://t.me/cvedetector/661 2025-01-10 17:57:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113805349530967419...

CVE-2024-6298

creationtimestamp| type| source ---|---|--- 2024-07-05 14:09:59+00:00| seen| https://t.me/cvedetector/93 2024-07-08 09:52:00+00:00| seen| https://t.me/HackingInsights/5199 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01 2025-02-04 21:01:58+00:00|...

CVE-2024-5655

creationtimestamp| type| source ---|---|--- 2024-06-26 22:53:18+00:00| seen| https://t.me/techb0ltGenona/4537 2024-06-28 04:04:27+00:00| published-proof-of-concept| https://t.me/HackingInsights/3920 2024-06-28 13:05:27+00:00| seen| https://t.me/truesecator/5912 2024-06-28 16:26:34+00:00| seen|...

Oracle Java SE Multiple Vulnerabilities (January 2024)

Oracle Java SE Multiple Vulnerabilities January 2024 CVE-2024-20918 CVSS 3.1 Base Score 7.4 CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N. CVE-2024-20952 CVSS 3.1 Base Score 7.4 CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N. CVE-2024-20919 CVSS 3.1 Base Score 5.9 CVSS...

mysql: Server: Options unspecified vulnerability (CPU Jan 2024)

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL Server...

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024)

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL Server...

Oracle Enterprise Manager Agent (January 2023 CPU)

The 13.4.0.0 and 13.5.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by a vulnerability as referenced in the January 2023 CPU advisory. - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Management...

PT-2024-12414 · Google · Google Pixel

Name of the Vulnerable Software and Affected Versions: Google Pixel phones affected versions not specified Description: The issue concerns information disclosure when the VI calibration state set by ADSP exceeds MAX FBSP STATE in the response payload to the AFE calibration command. This problem i...

January 9, 2024—KB5034134 (OS Build 10240.20402) - EXPIRED

None None...

January 9, 2024—KB5034119 (OS Build 14393.6614) - EXPIRED

None None...

ThreatDown achieves perfect score in latest AVLab assessment

ThreatDown has once again earned a perfect score in AVLabs January 2024 real-world malware detection tests, marking the eleventh consecutive quarter in achieving this feat. Let’s delve into the details of the test and how ThreatDown outperformed competitors in exhaustive testing. The AVLab...

CVE-2023-49785

creationtimestamp| type| source ---|---|--- 2024-03-12 01:26:57+00:00| seen| https://t.me/ctinow/205222 2024-03-12 01:26:58+00:00| seen| https://t.me/ctinow/205223 2024-03-13 08:39:26+00:00| seen| https://t.me/arpsyndicate/4186 2024-03-13 14:00:55+00:00| seen| https://t.me/truesecator/5515...