CVE-2025-21656

In the Linux kernel, the following vulnerability has been resolved: hwmon: drivetemp Fix driver producing garbage data when SCSI errors occur scsiexecutecmd function can return both negative linux codes and positive scsicmnd result field error codes. Currently the driver just passes error codes o...

You Can’t Improve What You Can’t See: API Monitoring Is Crucial

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the drivetemp driver in the hwmon module returning the wrong error code on a SCSI error. This could cause...

CVE-2025-23214 Cosmos userbase checking vulnerability

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7...

CVE-2025-23214 Cosmos userbase checking vulnerability

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7...

CVE-2024-22347

creationtimestamp| type| source ---|---|--- 2025-01-20 18:01:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2371 2025-01-20 18:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzffje22p 2025-01-20 19:14:34+00:00| seen|...

CVE-2024-56144 Stored XSS-LibreNMS-Display Name 2 in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters Replace $DEVICEID with your specific $DEVICEID value:/device/$DEVICEID/edit - param: display. Librenms versions up to 24.11.0 allow remote attackers to inject...

CVE-2024-56144

CVE-2024-56144 / Librenms: A stored XSS in the display parameter of the /device/$DEVICE_ID/edit endpoint affects Librenms up to version 24.11.0. The underlying issue is insufficient input sanitization that allows injected scripts to execute when users view or interact with the affected page. The ...

CVE-2024-56144 Stored XSS-LibreNMS-Display Name 2 in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters Replace $DEVICEID with your specific $DEVICEID value:/device/$DEVICEID/edit - param: display. Librenms versions up to 24.11.0 allow remote attackers to inject...

CVE-2025-23198 Stored-XSS-LibreNMS-Display-Name in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters Replace $DEVICEID with your specific $DEVICEID value:/device/$DEVICEID/edit - param: display. Librenms versions up to 24.10.1 allow remote attackers to inject...

CVE-2025-23198

Librenms (LibreNMS) is affected by a stored XSS in the /device/$DEVICE_ID/edit endpoint where the display parameter is not properly sanitized. Affected: Librenms versions up to 24.10.1. Impact: remote attackers can inject scripts that execute when a user views/interacts with the affected page, po...

CVE-2025-23199

CVE-2025-23199 describes a stored XSS in LibreNMS

CVE-2025-23200

CVE-2025-23200 affects LibreNMS (librenms/librenms) up to version 24.10.1, where a stored XSS is possible via the ajax_form.php parameter state . The root cause is unsanitized user input in the dynamic_override_config path, allowing injected scripts to execute when a page displaying affected data...

CVE-2025-23200 Stored XSS-LibreNMS-Misc Section in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: ajaxform.php - param: state. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page...

CVE-2025-23200 Stored XSS-LibreNMS-Misc Section in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: ajaxform.php - param: state. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page...

CVE-2025-23201

CVE-2025-23201 affects LibreNMS. The issue is a Cross-site Scripting (XSS) in the /addhost endpoint via the community parameter, impacting Librenms versions up to 24.10.1. The root cause is improper handling/escaping of user-supplied input in this parameter, enabling attackers to inject scripts t...

CVE-2024-52594

creationtimestamp| type| source ---|---|--- 2025-01-16 19:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuyjoogbz2r 2025-01-16 19:44:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24f2k532h 2025-01-16 21:15:22+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.4 release

A new version of Red Hat build of OpenTelemetry has been released Red Hat build of OpenTelemetry is a collection of tools, APIs, and SDKs. You use it to instrument, generate, collect, and export telemetry data metrics, logs, and traces for analysis in order to understand your software's performan...

IBM Concert Information Disclosure Vulnerability (CNVD-2025-29675)

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from an information disclosure vulnerability that stems from the disclosure of sensitive system informatio...

The vulnerability of Dell PowerScale InsightIQ software for performance monitoring and reporting lies in its lack of protection against SQL query structures, allowing attackers to disclose sensitive information.

The vulnerability of the software for performance monitoring and report generation in Dell PowerScale InsightIQ is related to the lack of security measures in the SQL query structure. Exploiting this vulnerability can allow attackers to disclose sensitive information...