UBUNTU-CVE-2022-49378

In the Linux kernel, the following vulnerability has been resolved: sfc: fix considering that all channels have TX queues Normally, all channels have RX and TX queues, but this is not true if modparam efxseparatetxchannels=1 is used. In that cases, some channels only have RX queues and others onl...

CVE-2022-49520

CVE-2022-49520 (Linux kernel, arm64 compat): The vulnerability occurs when a compat process executes an unknown syscall above __ARM_NR_COMPAT_END; the kernel incorrectly uses the syscall number as ESR_ELx for the fault, causing arm64_show_signal() to print bogus ESR messages. The fix is to stop u...

CVE-2022-49520 arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall

In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat syscall number as ESRELx for a bad syscall If a compat process tries to execute an unknown system call above the ARMNRCOMPATEND number, the kernel sends a SIGILL signal to the offending process...

CVE-2022-49512

CVE-2022-49512 affects the Linux kernel’s mtd: rawnand: denali driver. The issue arises because the driver did not use managed device resources, leading to kernel faults (example: timeout waiting for IRQ, page fault on supervisor write) when a NAND device is probed. The vulnerability is resolved ...

CVE-2022-49204 bpf, sockmap: Fix more uncharged while msg has more_data

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more data after tcpbpfsendmsgredir: tcpbpfsendverdict tosend = msg-sg.size //msg-sg.size = 22220 case SKREDIRECT: skmsgreturn //uncharged...

openSUSE 15 Security Update : crun (openSUSE-SU-2025:0074-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0074-1 advisory. Update to 1.20: krun: fix CVE-2025-24965. The .krunconfig.json file could be created outside of the container rootfs. bsc1237421 cgroup: reverted...

OPENSUSE-SU-2025:0074-1 Security update for crun

This update for crun fixes the following issues: Update to 1.20: krun: fix CVE-2025-24965. The .krunconfig.json file could be created outside of the container rootfs. bsc1237421 cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is n...

CVE-2025-1616

creationtimestamp| type| source ---|---|--- 2025-02-24 04:21:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5124 2025-02-24 06:15:09+00:00| seen| https://t.me/cvedetector/18775 2025-02-24 14:08:42+00:00| seen| Telegram/NEA3MC5jAjQxUYKwMIV4zJTXa0gW1e3ounGPnshffzH2FUaZ...

CVE-2023-51339

creationtimestamp| type| source ---|---|--- 2025-02-20 20:41:15+00:00| seen| https://t.me/cvedetector/18582 2025-02-20 23:26:56+00:00| seen| Telegram/l2staJg81n9PyEVgyLyV45c1jkM3YPiJoj41Cq6hTaSD5Iw 2025-02-21 18:19:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4952...

CVE-2025-26618

creationtimestamp| type| source ---|---|--- 2025-02-20 19:49:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4799 2025-02-20 20:41:09+00:00| seen| https://t.me/cvedetector/18578 2025-02-20 23:26:56+00:00| seen| Telegram/0RhbwYwzwEyjXCGtJTM02J2pXDTqA9dWpzhuh8c1zxBbzDF...

CVE-2024-13445

creationtimestamp| type| source ---|---|--- 2025-02-20 08:07:58+00:00| seen| https://t.me/cvedetector/18518...

CVE-2023-51327

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51301

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

Hackers Tricking Users Into Linking Devices to Steal Signal Messages

Is your Signal, WhatsApp, or Telegram account safe? Google warns of increasing attacks by Russian state-backed groups. Learn…...

DRUPAL-CORE-2025-001

Drupal core doesn't sufficiently filter error messages under certain circumstances, leading to a reflected Cross Site Scripting vulnerability XSS. Sites are encouraged to update. There are not yet public documented steps to exploit this, but there may be soon given the nature of this issue. This...

Information Disclosure

github.com/mattermost/mattermost-server is vulnerable to Information Disclosure. The vulnerability is due to failing to filter out DMs from the deleted channels endpoint, allowing an attacker to infer user IDs and other metadata from deleted DMs if they were manually marked as deleted in the...

CVE-2023-51301

The CVE-2023-51301 entry concerns PHPJabbers Hotel Booking System v4.0, where a lack of rate limiting in the Login Section -> Forgot Email workflow allows an attacker to generate a high volume of reset requests for a victim, potentially causing Denial of Service via mass email generation. Publ...

CVE-2023-51301

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2025-21608 Forged packets over MQTT can show up in direct messages in Meshtastic firmware

Meshtastic is an open source mesh networking solution. In affected firmware versions crafted packets over MQTT are able to appear as a DM in client to a node even though they were not decoded with PKC. This issue has been addressed in version 2.5.19 and all users are advised to upgrade. There are...

CVE-2025-21608

CVE-2025-21608 affects Meshtastic firmware; forged packets over MQTT can be shown as direct messages in a client to a node because PKC decoding failed. Root cause: packets crafted over MQTT were not decoded with PKC, enabling visibility of a DM in the client. Impact is described as partial (integ...