CVE-2025-0371

creationtimestamp| type| source ---|---|--- 2025-01-21 08:32:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113865413956449112 2025-01-21 09:01:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2377 2025-01-21 09:16:02+00:00| seen|...

SUSE CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

GHSA-WXMH-65F7-JCVW

creationtimestamp| type| source ---|---|--- 2025-01-20 16:01:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113861519101056622 2025-01-21 15:00:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2408...

CVE-2025-21655

creationtimestamp| type| source ---|---|--- 2025-01-20 13:54:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113861018791594110 2025-01-20 13:59:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2359 2025-01-20 14:15:54+00:00| seen|...

USN-7217-1 libpodofo vulnerabilities

It was discovered that the PoDoFo library could dereference a NULL pointer when getting the number of pages in a PDF. If a user or application were tricked into opening a crafted PDF file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.0...

CVE-2025-0578

creationtimestamp| type| source ---|---|--- 2025-01-20 01:17:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113858041446421188 2025-01-20 02:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5bezcbhh27 2025-01-20 02:54:41+00:00| seen|...

CVE-2024-41742

creationtimestamp| type| source ---|---|--- 2025-01-19 15:12:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113855663136088386 2025-01-19 15:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg44izj5pp2e 2025-01-19 15:44:05+00:00| seen|...

CVE-2024-57921

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy trim function When running YouTube videos and Steam games simultaneously, the tester found a system hang / race condition issue with the multi-display configuration setting. Adding ...

CVE-2024-57912

creationtimestamp| type| source ---|---|--- 2025-01-19 11:58:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2340 2025-01-19 12:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shpf7ma2f 2025-01-19 12:54:58+00:00| seen|...

CVE-2025-21639

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rtomin/max: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

CVE-2025-21638

creationtimestamp| type| source ---|---|--- 2025-01-19 10:42:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113854600041661024 2025-01-19 10:58:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2327 2025-01-19 11:15:39+00:00| seen|...

CVE-2025-0564

creationtimestamp| type| source ---|---|--- 2025-01-19 03:36:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113852925479022718 2025-01-19 03:58:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2310 2025-01-19 04:15:23+00:00| seen|...

CVE-2024-49824

IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation...

CVE-2024-13516

creationtimestamp| type| source ---|---|--- 2025-01-18 05:39:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113847749153311562 2025-01-18 05:57:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2273 2025-01-18 06:15:44+00:00| seen|...

CVE-2025-0537

The CVE-2025-0537 entry concerns Code-Projects’ Car Rental Management System 1.0. The vulnerability is triggered by manipulating the pgdetails parameter in /admin/manage-pages.php, causing a cross-site scripting (XSS) flaw. This is described as remotely initiable; the exploit has been disclosed p...

CVE-2007-2020

creationtimestamp| type| source ---|---|--- 2025-01-17 14:56:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2137...

CVE-2024-12637

creationtimestamp| type| source ---|---|--- 2025-01-17 07:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwardg7fl2h 2025-01-17 07:17:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113842471624487735 2025-01-17 07:38:55+00:00| seen|...

CVE-2024-10799

creationtimestamp| type| source ---|---|--- 2025-01-17 05:36:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113842072351692376 2025-01-17 05:56:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2097 2025-01-17 06:15:28+00:00| seen|...

CVE-2024-46450

creationtimestamp| type| source ---|---|--- 2025-01-16 22:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvcllnx4a2t 2025-01-16 22:50:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113840477739106705 2025-01-16 22:54:26+00:00| seen|...

CVE-2025-23955

creationtimestamp| type| source ---|---|--- 2025-01-16 21:21:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7jqboco2e 2025-01-16 21:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfvb47epkl2b 2025-01-16 22:56:01+00:00| seen|...