CVE-2022-49921

creationtimestamp| type| source ---|---|--- 2025-05-01 19:01:40+00:00| seen| https://t.me/cvedetector/24247...

CVE-2025-32886

creationtimestamp| type| source ---|---|--- 2025-05-01 18:15:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14357...

CVE-2022-49855

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipcpciereadbioscfg ipcpciereadbioscfg is using the acpievaluatedsm to obtain the wwan power state configuration from BIOS but is not freeing the acpiobject. The acpievaluatedsm returned...

CVE-2022-49876

Summary: CVE-2022-49876 is a Linux kernel vulnerability in wifi/mac80211 that causes a general-protection fault when an interface’s status changes during active transmission. The issue stems from accessing sdata->bss after it is set to NULL during ieee80211_runtime_change_iftype/ieee80211_do_s...

CVE-2022-49866 net: wwan: mhi: fix memory leak in mhi_mbim_dellink

In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi: fix memory leak in mhimbimdellink MHI driver registers network device without setting the needsfreenetdev flag, and does NOT call freenetdev when unregisters network device, which causes a memory leak. This patch...

CVE-2022-49850

CVE-2022-49850 affects the Linux kernel nilfs2 subsystem. A semaphore deadlock can occur when nilfs_get_block() detects metadata corruption during data-block allocation and a concurrent superblock writeback happens. The root cause involves a lock order: rwsem A (NILFS_MDT dat_inode mi_sem) read l...

CVE-2022-49805 net: lan966x: Fix potential null-ptr-deref in lan966x_stats_init()

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: Fix potential null-ptr-deref in lan966xstatsinit lan966xstatsinit calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: lan966xstatsinit...

CVE-2022-49800 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in testgensynthcmd and testemptysynthevent testgensynthcmd only free buf in fail path, hence buf will leak when there is no failure. Add kfreebuf to prevent the memleak. The same reason and solution in...

CVE-2025-3874

creationtimestamp| type| source ---|---|--- 2025-05-01 12:14:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14262...

CVE-2022-33906

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14133...

CVE-2022-3993

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14129...

CVE-2022-3362

creationtimestamp| type| source ---|---|--- 2025-04-30 18:14:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14106...

CVE-2022-30771

creationtimestamp| type| source ---|---|--- 2025-04-30 16:13:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14070...

CVE-2025-24348

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the wireless network configuration file via a crafted HTTP request...

CVE-2025-24346

creationtimestamp| type| source ---|---|--- 2025-04-30 12:12:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14015 2025-04-30 14:31:11+00:00| seen| Telegram/xLNolCYDHMAF4bbxCk1zERkTbjpp23tQ8mkC2YWhD-XRbxs 2025-04-30 15:55:41+00:00| seen|...

CVE-2025-24345

CVE-2025-24345 affects ctrlX OS web application’s Hosts functionality. A remote authenticated (low-privileged) attacker can manipulate the hosts file via a crafted HTTP request, indicating improper input/authorization handling in the Hosts feature. CVSSv3.1 base score is 6.3 (MEDIUM) with network...

CVE-2025-22883

Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file...

CVE-2025-46701

creationtimestamp| type| source ---|---|--- 2025-04-30 07:49:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/34783 2025-05-29 18:11:40+00:00| seen| https://seclists.org/oss-sec/2025/q2/184 2025-05-29 19:48:02+00:00| seen|...

PHPGurukul Student Record System 注入漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter course-short in the file /add-course.php. An attacker can exploit this vulnerability to...

CVE-2025-0520

creationtimestamp| type| source ---|---|--- 2025-04-29 20:12:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13918 2025-04-29 23:31:43+00:00| seen| https://t.me/cvedetector/24050 2025-04-29 23:50:45+00:00| seen|...