UBUNTU-CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

CVE-2024-35219

creationtimestamp| type| source ---|---|--- 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-02 2025-01-13 00:00:00+00:00| seen| The Shadowserver...

Malicious code in ui-forms-embed-components-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...

MAL-2024-12094 Malicious code in ui-forms-embed-components-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...

CVE-2024-37758

creationtimestamp| type| source ---|---|--- 2024-12-20 19:01:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113686693262617989 2024-12-20 19:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wooi472x 2024-12-20 20:55:57+00:00| seen|...

CVE-2024-56331

creationtimestamp| type| source ---|---|--- 2024-12-20 14:23:08+00:00| published-proof-of-concept| https://github.com/louislam/uptime-kuma/security/advisories/GHSA-2qgm-m29m-cj2h 2024-12-20 19:55:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113686907294716814 2024-12-20...

CVE-2024-56350

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576592470411 2024-12-20 15:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj5gvjm2m 2024-12-20 16:44:59+00:00| seen|...

CVE-2024-11812

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptp7kv4e2s 2024-12-20 07:35:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113683998106038612 2024-12-20 09:13:16+00:00| seen|...

CVE-2024-8968

creationtimestamp| type| source ---|---|--- 2024-12-20 06:01:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683628372130551 2024-12-20 06:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpqdzi7dc2s 2024-12-20 08:22:59+00:00| seen|...

CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-12728

creationtimestamp| type| source ---|---|--- 2024-12-19 20:52:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113681467208621916 2024-12-19 21:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos634iqp2s 2024-12-19 23:11:06+00:00| seen|...

CVE-2024-55505

creationtimestamp| type| source ---|---|--- 2024-12-18 22:08:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113676105416709418 2024-12-18 23:44:20+00:00| seen| https://t.me/cvedetector/13257 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

CVE-2024-56059

creationtimestamp| type| source ---|---|--- 2024-12-18 12:33:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113673843515493237 2024-12-18 13:41:33+00:00| seen| https://t.me/cvedetector/13181 2025-01-14 12:49:39+00:00| seen|...

Exploit for CVE-2024-55968

CVE-2024-55968 LPE Exploit POC for CVE-2024-55968 Vulnerab...

Rockwell Automation PowerMonitor 1000 Remote

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to perform edit operations, create admin users, perform factory reset, execute arbitrary code, or cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures...

Hitachi Energy TropOS Devices Series 1400/2400/6400

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...

CVE-2024-54328

creationtimestamp| type| source ---|---|--- 2024-12-14 03:15:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113648999102746399...

How to Generate a CrowdStrike RFM Report With AI in Tines

Run by the team at orchestration, AI, and automation platform Tines, the Tines library contains pre-built workflows shared by real security practitioners from across the community, all of which are free to import and deploy via the Community Edition of the platform. Their bi-annual "You Did What...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2024-2951)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to...

Bot Reporting: 4 Key Differences to Consider

Get a detailed look at Akamai’s bot reporting and the important advantages it offers to organizations that are looking to improve their bot defenses...