CVE-2025-21996

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10185 2025-04-03 11:03:26+00:00| seen| https://t.me/cvedetector/21964 2025-04-03 11:12:00+00:00| seen|...

CVE-2024-12044

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:29+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmheps2e2v 2025-03-20 15:18:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8212...

CVE-2025-26976

creationtimestamp| type| source ---|---|--- 2025-03-15 23:48:56+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114169121045008475 2025-03-16 02:09:30+00:00| seen| https://t.me/cvedetector/20377...

CVE-2024-45638

creationtimestamp| type| source ---|---|--- 2025-03-14 16:42:23+00:00| seen| https://t.me/cvedetector/20293 2025-03-14 16:46:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qgvuij2l...

CVE-2025-1127

creationtimestamp| type| source ---|---|--- 2025-02-13 18:52:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113998086368947353 2025-02-13 19:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3flzjmfv2a 2025-02-13 20:34:57+00:00| seen|...

CVE-2024-12386

creationtimestamp| type| source ---|---|--- 2025-02-12 11:21:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113990650248896980 2025-02-12 12:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5no5smj2a 2025-02-12 13:11:31+00:00| seen|...

CVE-2024-34732

creationtimestamp| type| source ---|---|--- 2025-01-28 19:16:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113907583438463077 2025-01-28 20:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbhvw6w62w 2025-01-28 22:48:55+00:00| seen|...

CVE-2024-13340

creationtimestamp| type| source ---|---|--- 2025-01-23 12:03:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2721 2025-01-23 12:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudrfadw2r 2025-01-23 12:39:50+00:00| seen|...

CVE-2024-13278

creationtimestamp| type| source ---|---|--- 2025-01-09 19:48:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800125966170821 2025-01-09 20:16:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdio35uar25 2025-01-10 17:05:21+00:00| seen|...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a memory leak in the allocatebuffersinternal function in the media:platform:allegro-dvt module...

TikTok ordered to close Canada offices following “national security review”

The Government of Canada ordered the TikTok Technology Canada Inc. to close its offices in the country following a national security review. This decision was made in accordance with the Investment Canada Act, which allows for the review of foreign investments that may be injurious to Canada’s...

JF6000 Cloud Media Collaboration Processing Platform 固件V1.2.0和、软件版本V2.0.0 build 6245 安全漏洞

Shenzhen Jieshi Feitong Technology JF6000 Cloud Media Collaboration Processing Platform is a cloud media collaboration processing platform from Shenzhen Jieshi Feitong Technology, China. JF6000 Cloud Media Collaboration Processing Platform is a cloud media collaboration processing platform from...

CVE-2024-25636 Lack of media type verification of Activity Streams objects allows impersonation and takeover of remote accounts

Misskey is an open source, decentralized social media platform with ActivityPub support. Prior to version 2024.2.0, when fetching remote Activity Streams objects, Misskey doesn't check that the response from the remote server has a Content-Type header value of the Activity Streams media type, whi...

CVE-2024-25636

Misskey prior to version 2024.2.0 is affected by a vulnerability where remote Activity Streams objects are fetched without verifying the Content-Type header for the Activity Streams media type. This flaw allows an attacker to upload a crafted Activity Streams document to a remote server and, if t...

CVE-2023-49079

Misskey (open source, decentralized social platform) has a vulnerability due to missing signature validation that allows an arbitrary user to impersonate any remote user. Concrete details across multiple connected sources indicate this affects Misskey versions prior to 2023.11.1-beta.1, with the ...

CVE-2023-43793

Misskey before version 2023.9.0 is vulnerable: by editing the URL, an attacker can bypass authentication for the Bull dashboard (the job queue UI) and access it. The Red Hat, NVD, OSV, and other connected sources consistently describe this as an authentication bypass affecting Misskey prior to 20...

CVE-2023-30990

creationtimestamp| type| source ---|---|--- 2023-07-03 15:45:35+00:00| seen| https://t.me/thebugbountyhunter/7486 2023-07-04 07:28:25+00:00| seen| https://t.me/cibsecurity/65916 2024-10-31 15:27:49+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8634 2025-09-04...

CVE-2023-24810 Cross site scripting (XSS) vulnerability using authentication callback in Misskey

Misskey is an open source, decentralized social media platform. Due to insufficient validation of the redirect URL during miauth authentication in Misskey, arbitrary JavaScript can be executed when a user allows the link. All versions below 13.3.1 including 12.x are affected. This has been fixed ...

DEBIAN-CVE-2022-3113

An issue was discovered in the Linux kernel through 5.16-rc6. mtkvcodecfwvpuinit in drivers/media/platform/mtk-vcodec/mtkvcodecfwvpu.c lacks check of the return value of devmkzalloc and will cause the null pointer dereference...

CVE-2021-41714

creationtimestamp| type| source ---|---|--- 2022-05-23 20:41:56+00:00| seen| https://t.me/cibsecurity/43177 2025-05-01 21:03:05+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lo57i2a7js2e...