CVE-2022-49512

CVE-2022-49512 affects the Linux kernel’s mtd: rawnand: denali driver. The issue arises because the driver did not use managed device resources, leading to kernel faults (example: timeout waiting for IRQ, page fault on supervisor write) when a NAND device is probed. The vulnerability is resolved ...

CVE-2022-49204 bpf, sockmap: Fix more uncharged while msg has more_data

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more data after tcpbpfsendmsgredir: tcpbpfsendverdict tosend = msg-sg.size //msg-sg.size = 22220 case SKREDIRECT: skmsgreturn //uncharged...

openSUSE 15 Security Update : crun (openSUSE-SU-2025:0074-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0074-1 advisory. Update to 1.20: krun: fix CVE-2025-24965. The .krunconfig.json file could be created outside of the container rootfs. bsc1237421 cgroup: reverted...

OPENSUSE-SU-2025:0074-1 Security update for crun

This update for crun fixes the following issues: Update to 1.20: krun: fix CVE-2025-24965. The .krunconfig.json file could be created outside of the container rootfs. bsc1237421 cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is n...

CVE-2025-1616

creationtimestamp| type| source ---|---|--- 2025-02-24 04:21:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5124 2025-02-24 06:15:09+00:00| seen| https://t.me/cvedetector/18775 2025-02-24 14:08:42+00:00| seen| Telegram/NEA3MC5jAjQxUYKwMIV4zJTXa0gW1e3ounGPnshffzH2FUaZ...

CVE-2023-51339

creationtimestamp| type| source ---|---|--- 2025-02-20 20:41:15+00:00| seen| https://t.me/cvedetector/18582 2025-02-20 23:26:56+00:00| seen| Telegram/l2staJg81n9PyEVgyLyV45c1jkM3YPiJoj41Cq6hTaSD5Iw 2025-02-21 18:19:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4952...

CVE-2025-26618

creationtimestamp| type| source ---|---|--- 2025-02-20 19:49:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4799 2025-02-20 20:41:09+00:00| seen| https://t.me/cvedetector/18578 2025-02-20 23:26:56+00:00| seen| Telegram/0RhbwYwzwEyjXCGtJTM02J2pXDTqA9dWpzhuh8c1zxBbzDF...

CVE-2024-13445

creationtimestamp| type| source ---|---|--- 2025-02-20 08:07:58+00:00| seen| https://t.me/cvedetector/18518...

CVE-2023-51327

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51301

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

Hackers Tricking Users Into Linking Devices to Steal Signal Messages

Is your Signal, WhatsApp, or Telegram account safe? Google warns of increasing attacks by Russian state-backed groups. Learn…...

DRUPAL-CORE-2025-001

Drupal core doesn't sufficiently filter error messages under certain circumstances, leading to a reflected Cross Site Scripting vulnerability XSS. Sites are encouraged to update. There are not yet public documented steps to exploit this, but there may be soon given the nature of this issue. This...

Information Disclosure

github.com/mattermost/mattermost-server is vulnerable to Information Disclosure. The vulnerability is due to failing to filter out DMs from the deleted channels endpoint, allowing an attacker to infer user IDs and other metadata from deleted DMs if they were manually marked as deleted in the...

CVE-2023-51301: Uncontrolled Resource Consumption

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51301

The PHPJabbers Hotel Booking System v4.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the "Login Section, Forgot Email" feature. An attacker can trigger an excessive number of reset requests for a legitimate user, causing the system to generate a massive vol...

CVE-2023-51301

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2025-21608 Forged packets over MQTT can show up in direct messages in Meshtastic firmware

Meshtastic is an open source mesh networking solution. In affected firmware versions crafted packets over MQTT are able to appear as a DM in client to a node even though they were not decoded with PKC. This issue has been addressed in version 2.5.19 and all users are advised to upgrade. There are...

CVE-2025-21608

CVE-2025-21608 affects Meshtastic firmware; forged packets over MQTT can be shown as direct messages in a client to a node because PKC decoding failed. Root cause: packets crafted over MQTT were not decoded with PKC, enabling visibility of a DM in the client. Impact is described as partial (integ...

Remote Code Execution (RCE)

Apache Ignite is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper deserialization due to the configured Class Serialization Filters being ignored for some Ignite endpoints, allowing an attacker to send a maliciously crafted message that executes arbitrary code on the...

CVE-2024-13795

CVE-2024-13795 affects Ecwid by Lightspeed Ecommerce Shopping Cart for WordPress. Vulnerability: Cross-Site Request Forgery due to missing/incorrect nonce validation in ecwid_deactivate_feedback(). Impact: unauthenticated attacker can trigger deactivation messages on behalf of the site owner by d...