BIT-PHP-MIN-2020-7062 Null Pointer Dereference in PHP Session Upload Progress

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.uploadprogress.cleanup is set to 0 disabled, and the file upload fails, the upload procedure would try to clean up data that does...

CVE-2025-21338

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuman5jb2f 2025-01-15 01:41:36+00:00| seen|...

CVE-2025-21186

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpucl7vgi2j 2025-01-14 18:20:17+00:00| seen|...

CVE-2025-21244

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:18:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpufhf3ib2h 2025-01-14 20:41:11+00:00| seen|...

CVE-2025-22984

creationtimestamp| type| source ---|---|--- 2025-01-14 16:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpnkmhoyz2p 2025-01-14 16:17:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1502 2025-01-14 16:48:29+00:00| seen|...

CVE-2024-11864

creationtimestamp| type| source ---|---|--- 2025-01-14 13:52:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113827035670982015 2025-01-14 16:18:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1514...

CVE-2025-0146

creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:47+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5iogrwx2d 2025-01-30 19:50:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113919041934691162 2025-01-30 20:16:20+00:00| seen|...

CVE-2024-12240

creationtimestamp| type| source ---|---|--- 2025-01-14 11:13:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113826412561947295 2025-01-14 11:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfp4rlm5zq2f 2025-01-14 11:53:02+00:00| seen|...

CVE-2025-0430

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04 2025-01-17 17:41:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113844925428063721 2025-01-17 17:57:24+00:00| seen|...

CVE-2024-11637

creationtimestamp| type| source ---|---|--- 2025-01-14 02:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo6lqxmqw2f 2025-01-14 04:52:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfohebhbw62g...

CVE-2024-57644

creationtimestamp| type| source ---|---|--- 2025-01-14 01:08:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1445 2025-01-14 01:17:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cumqix2n 2025-01-14 02:16:32+00:00| seen|...

CVE-2024-57655

creationtimestamp| type| source ---|---|--- 2025-01-14 01:07:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1433 2025-01-14 01:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dqzd2i2j 2025-01-14 03:01:35+00:00| seen|...

ROS-20250114-09

Vulnerability in the animation control and synchronization handler on web pages of Mozilla Firefox browsers, Firefox ESR is related to the possibility of memory usage after its release. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code by injecting it into...

ROS-20250114-10

Vulnerability in the animation control and synchronization handler on web pages of Mozilla Firefox browsers, Firefox ESR is related to the possibility of memory usage after its release. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code by injecting it into...

CVE-2023-42244

creationtimestamp| type| source ---|---|--- 2025-01-13 21:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113823276021085212 2025-01-13 22:09:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1415 2025-01-13 22:16:49+00:00| seen|...

CVE-2025-0406

creationtimestamp| type| source ---|---|--- 2025-01-13 01:36:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113818481083937989 2025-01-13 02:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lflo56cffs2d 2025-01-13 02:47:57+00:00| seen|...

CVE-2024-42181

creationtimestamp| type| source ---|---|--- 2025-01-12 22:08:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113817664516251519 2025-01-12 22:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lflapabypp2n 2025-01-12 22:52:41+00:00| seen|...

CVE-2024-53680

creationtimestamp| type| source ---|---|--- 2025-01-11 13:13:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113809896581801885 2025-01-11 13:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs4ohhjm2i 2025-08-14 10:00:00+00:00| seen|...

CVE-2024-50051

creationtimestamp| type| source ---|---|--- 2025-01-11 13:13:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113809896551439352 2025-01-11 13:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs4dwe7p2a 2025-08-14 10:00:00+00:00| seen|...

CVE-2024-47794

creationtimestamp| type| source ---|---|--- 2025-01-11 12:43:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113809778453452872 2025-01-11 13:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs3mhmzd2f 2026-03-19 00:00:00+00:00| seen|...