24728 matches found
CVE-2025-7674
creationtimestamp| type| source ---|---|--- 2025-08-05 21:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvonfytyzy2c...
kernel: media: uvcvideo: Fix double free in error path
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvcstatusinit function fails to allocate the inturb, it will free the dev-status pointer but doesn't reset the pointer to NULL. This results in the kfree call in...
CVE-2025-32430
creationtimestamp| type| source ---|---|--- 2025-08-05 14:58:17+00:00| published-proof-of-concept| https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m9x4-w7p9-mxhx 2025-08-13 21:02:40+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwcpwzbfpu26 2025-08-14...
CVE-2025-8522
creationtimestamp| type| source ---|---|--- 2025-08-04 22:11:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvm7m2tjag26...
kernel: media: uvcvideo: Fix double free in error path
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvcstatusinit function fails to allocate the inturb, it will free the dev-status pointer but doesn't reset the pointer to NULL. This results in the kfree call in...
kernel: media: uvcvideo: Fix double free in error path
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvcstatusinit function fails to allocate the inturb, it will free the dev-status pointer but doesn't reset the pointer to NULL. This results in the kfree call in...
CVE-2025-54781
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaudtasks service leaks an Intune service access token to the system journal. This short-lived token can be used to detect the host's Intune...
Expired Pointer Dereference
Overview Affected versions of this package are vulnerable to Expired Pointer Dereference in the parsing process of xsl nodes. An attacker can cause the application to crash by triggering the dereference of expired pointers after memory has been freed. Remediation A fix was pushed into the master...
GHSA-FJV4-PGH9-JFGC
creationtimestamp| type| source ---|---|--- 2025-08-03 03:47:15+00:00| seen| Telegram/-mv93qli8YBbWeWn9RjlpXbudAbhUvnKqNuWo67I8nlb84...
RHSA-2024:3854
creationtimestamp| type| source ---|---|--- 2025-08-02 17:49:07+00:00| seen| Telegram/lFaLa7AjNm8LdxpGuB3l4qzVYw36EtRcWGhupmMqMVI5ysU...
CVE-2025-8152 WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Update
The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updatectastatus' and 'changestickysidebarname' functions in all versions up to, and including, 1.7.0. This makes it...
CVE-2025-54781
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaudtasks service leaks an Intune service access token to the system journal. This short-lived token can be used to detect the host's Intune...
CVE-2024-29232
creationtimestamp| type| source ---|---|--- 2025-08-01 05:46:46+00:00| seen| Telegram/fzz9k7MNdHW4CbNYJOxUPbCUJEfOCTz1zZX-5c8VAAEV8E...
CVE-2025-5947
creationtimestamp| type| source ---|---|--- 2025-08-01 04:31:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvcsxn247l2t 2025-10-07 16:44:43+00:00| seen| https://gist.github.com/Darkcrai86/b6a8eee2ed2df4a5d2becbda7f7b6538 2025-10-08 04:16:06+00:00| seen|...
CVE-2025-52289
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval...
PT-2025-31528 · Unknown · Magnusbilling
Name of the Vulnerable Software and Affected Versions: MagnusBilling version 7.8.5.3 Description: A broken access control issue in MagnusBilling version 7.8.5.3 allows newly registered users to gain escalated privileges. This is achieved by sending a crafted request to the...
CVE-2025-52289
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval...
CVE-2025-8334
A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...
kernel: media: uvcvideo: Fix double free in error path
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvcstatusinit function fails to allocate the inturb, it will free the dev-status pointer but doesn't reset the pointer to NULL. This results in the kfree call in...