PT-2025-5774 · Asterisk +1 · Asterisk +1

Name of the Vulnerable Software and Affected Versions: Asterisk version 22 Description: The issue allows a remote attacker to execute arbitrary code via the action createconfig function. This is due to an insecure permissions vulnerability. Recommendations: For Asterisk version 22, as a temporary...

CVE-2024-13351

The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rwimagebadge1' shortcode in all versions up to, and including, 5.20 due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2024-22064

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connectionIKE with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the...

GHSA-49RV-574X-WGPC

creationtimestamp| type| source ---|---|--- 2025-02-04 21:20:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113947708453042718...

GHSA-MRPW-GWJ7-98R6

creationtimestamp| type| source ---|---|--- 2025-02-04 21:20:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113947708468156282...

CVE-2025-20895

creationtimestamp| type| source ---|---|--- 2025-02-04 08:16:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmkfgvfu2h 2025-02-04 10:32:46+00:00| seen| https://t.me/cvedetector/17172 2025-02-04 12:19:09+00:00| seen|...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Feb-2025 Release 1, which stems from a mismanagement of permissions issue contained in...

PT-2025-4171 · Unknown · Libsthmbc.So

Name of the Vulnerable Software and Affected Versions: libsthmbc.so versions prior to SMR Jan-2025 Release 1 Description: The issue is related to an out-of-bounds read in decoding a malformed bitstream for smp4vtd in libsthmbc.so. This allows local attackers to read arbitrary memory, with user...

CVE-2024-12510

creationtimestamp| type| source ---|---|--- 2025-02-03 18:53:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113941466402330448 2025-02-03 19:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawtn3jz2t 2025-02-14 13:44:52+00:00| seen|...

CVE-2024-53942

creationtimestamp| type| source ---|---|--- 2025-02-03 18:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc5l3ohc42f 2025-02-03 20:19:17+00:00| seen| https://t.me/cvedetector/17085...

CVE-2025-22693

CVE-2025-22693 concerns the WordPress Contest Gallery plugin (versions

Security update for unbound

This update for unbound fixes the following issues: Update to 1.20.0: Features: The config for discard-timeout, wait-limit, wait-limit-cookie, wait-limit-netblock and wait-limit-cookie-netblock was added, for the fix to the DNSBomb issue. Merge GH1027: Introduce 'cache-min-negative-ttl' option...

PT-2025-4747 · Polycom · Polycom Realpresence Group 500

Name of the Vulnerable Software and Affected Versions: Polycom RealPresence Group 500 versions =20 Description: The issue is related to insecure permissions due to automatically loaded cookies. This allows for the use of administrator functions, resulting in the leakage of sensitive user...

RHEL 7 : tuned (RHSA-2025:0881)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0881 advisory. The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: improper sanitization of...

Check Point Response to CVE-2024-24911 - Out of Bounds read in the CPCA process on a Check Point Management Server

Cause An Out-of-Bounds read may occur when processing certain HTTP "POST" requests to the Security Management Server / Domain Management Server to the TCP port 18264. Repeated requests can cause a denial-of-service DoS of the cpca process and may lead it to exit unexpectedly with a core dump file...

CVE-2024-22360

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:11+00:00| seen| Telegram/aZnqd84Govqe71AbRZsQ2bt7s41B2w-crbNIzBIZHhsCzlz 2025-02-27 20:25:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5780...

CVE-2025-24827

creationtimestamp| type| source ---|---|--- 2025-01-31 13:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh23fq27m427 2025-01-31 15:22:27+00:00| seen| https://t.me/cvedetector/16933 2025-02-01 17:28:08+00:00| seen|...

CVE-2025-21674 net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel Attempt to enable IPsec packet offload in tunnel mode in debug kernel generates the following kernel panic, which is happening due to two issues: 1. In SA ad...

CVE-2024-12267

creationtimestamp| type| source ---|---|--- 2025-01-31 11:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuouktwn2b 2025-01-31 12:52:02+00:00| seen| https://t.me/cvedetector/16926 2025-01-31 13:15:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3650...

CVE-2025-23990

creationtimestamp| type| source ---|---|--- 2025-01-31 09:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo2737bo2j 2025-01-31 10:15:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3624 2025-01-31 11:11:52+00:00| seen| https://t.me/cvedetector/16922...