CVE-2024-43709

creationtimestamp| type| source ---|---|--- 2025-01-21 11:03:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113866007267211750 2025-01-21 11:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgapznp2wd2f 2025-01-21 11:54:27+00:00| seen|...

CVE-2024-12054

creationtimestamp| type| source ---|---|--- 2025-01-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03 2025-02-13 23:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sydrc6b2g 2025-02-14 00:35:09+00:00| seen|...

JetBrains Hub 安全漏洞

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. JetBrains Hub suffers from an elevation of privilege vulnerability that originates from an elevation of privilege via LDAP authentication mappin...

CVE-2024-22349

creationtimestamp| type| source ---|---|--- 2025-01-20 18:01:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2370 2025-01-20 18:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzk6pk327 2025-01-20 19:14:31+00:00| seen|...

GHSA-XHV4-88GX-HVGH

creationtimestamp| type| source ---|---|--- 2025-01-20 15:49:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113861471488726196 2025-01-20 16:01:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2365...

CVE-2025-23044

creationtimestamp| type| source ---|---|--- 2025-01-20 15:49:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113861471440807384 2025-01-20 16:01:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2366 2025-01-20 16:15:56+00:00| seen|...

CVE-2025-23044

PwnDoc (pwndoc) is affected by a CSRF vulnerability due to missing protection and SameSite cookies, enabling cross-site requests on behalf of authenticated users. The issue is associated with the project commit 14acb704891245bf1703ce6296d62112e85aa995, which patches the vulnerability. Public desc...

CVE-2025-23044 Cross-Site Request Forgery (CSRF) allows creating admin account with POST request

PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the missing SameSite= attribute on cookies and the ability to refresh cookies. Commit...

CVE-2025-21631

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix wakerbfqq UAF after bfqsplitbfqq Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfqinitrq+0x175d/0x17a0 block/bfq-iosched.c:6958 Read of size 8 at addr ffff8881b57147d8 by task...

CERTFR-2025-ALE-001

creationtimestamp| type| source ---|---|--- 2025-01-20 11:16:09+00:00| seen| https://bsky.app/profile/ag6218ent.bsky.social/post/3lg67llxyy42s...

CVE-2025-0578

creationtimestamp| type| source ---|---|--- 2025-01-20 01:17:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113858041446421188 2025-01-20 02:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5bezcbhh27 2025-01-20 02:54:41+00:00| seen|...

OSV-2025-50 Heap-double-free in r_crbtree_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390503425 Crash type: Heap-double-free Crash state: rcrbtreefree rbinobjectfree rbinfilefree...

CVE-2024-57924

In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is usually performed by a filesystem encodefh method that may fail for various reasons. The legacy users of exportfsencodefh, namely, nfsd and...

CVE-2024-57926

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private-alldrmprivatei-drm to NULL if mtkdrmbind returns err The pointer need to be set to NULL, otherwise KASAN complains about use-after-free. Because in mtkdrmbind, all private's drm are set as follows...

CVE-2024-57905

creationtimestamp| type| source ---|---|--- 2025-01-19 11:58:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2347 2025-01-19 12:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sh5xwiw2c 2025-02-18 21:11:31+00:00| seen|...

CVE-2024-57917

creationtimestamp| type| source ---|---|--- 2025-01-19 11:58:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2337 2025-01-19 12:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3si2kl2t2t 2026-07-28 16:16:12+00:00| seen|...

CVE-2025-21631

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix wakerbfqq UAF after bfqsplitbfqq Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfqinitrq+0x175d/0x17a0 block/bfq-iosched.c:6958 Read of size 8 at addr ffff8881b57147d8 by task...

AZL-56259 CVE-2025-21631 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix wakerbfqq UAF after bfqsplitbfqq Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfqinitrq+0x175d/0x17a0 block/bfq-iosched.c:6958 Read of size 8 at addr ffff8881b57147d8 by task...

CVE-2025-21652

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlangetiflink. syzbot presented an use-after-free report 0 regarding ipvlan and linkwatch. ipvlan does not hold a refcnt of the lower device unlike vlan and macvlan. If the linkwatch work is...

CVE-2025-21651

creationtimestamp| type| source ---|---|--- 2025-01-19 10:58:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2316 2025-01-19 11:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3p4udn322t 2025-01-19 11:42:09+00:00| seen|...