CVE-2025-24900 Concorde CSRF vulnerability due to insecure configuration of authentication cookie attributes

Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Due to a lack of CSRF countermeasures and improper settings of cookies for MediaProxy authentication, there is a vulnerability that allows MediaProxy authentication to be bypassed. In versions prior to...

February Security Advisory Ivanti Connect Secure (ICS),Ivanti Policy Secure (IPS) and Ivanti Secure Access Client (ISAC) (Multiple CVEs)

Summary Ivanti has released updates for Ivanti Connect Secure ICS,Ivanti Policy Secure IPS and Ivanti Secure Access Client ISAC which addresses medium, high and critical severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20250207T224745 2025-02-07T22:47:45Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3456 CVE-2025-24786 GHSA-9r4c-jwx3-3j76 GO-2025-3457 CVE-2025-24787 GHSA-c7w4-9wv8-7x7...

SUSE-SU-2025:0429-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250207T224745 2025-02-07T22:47:45Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3456 CVE-2025-24786 GHSA-9r4c-jwx3-3j76 GO-2025-3457 CVE-2025-24787...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.16 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.16 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

CVE-2025-0513

creationtimestamp| type| source ---|---|--- 2025-02-11 10:29:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113984783242069780 2025-02-11 11:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjthdwwl2n 2025-02-11 13:10:29+00:00| seen|...

Vulnerability fixed in Apple iOS and iPadOS

Apple has fixed a vulnerability in iOS and iPadOS. A malicious person with physical access to the vulnerable device can exploit the vulnerability to bypass USB restrictions, even when the system is locked. This allows the malicious party to install arbitrary software on the device. Successful abu...

February 11, 2025—KB5052020 (Monthly Rollup)

None None...

February 11, 2025—KB5052042 (Monthly Rollup)

None None...

February 11, 2025—KB5052038 (Monthly Rollup)

None None...

February 11, 2025—Hotpatch KB5052105 (OS Build 26100.3107)

None None...

KB5051972: Cumulative security update for Internet Explorer: February 11, 2025

None None...

February 11, 2025—KB5052016 (Monthly Rollup)

None None...

Astra Linux – Vulnerability in bind9

Resolver caches and authoritative zone databases that hold a significant number of Resource Records for the same hostname of any RTYPE may experience degraded performance as content is added or updated, as well as when handling client queries for this name. This issue affects BIND 9 versions 9.11...

CVE-2024-52612

creationtimestamp| type| source ---|---|--- 2025-02-11 07:27:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113984069914875660 2025-02-11 08:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhv7rt6hlm22 2025-02-11 11:29:54+00:00| seen|...

Vulnerabilities fixed in F5 BIG-IP

F5 has fixed vulnerabilities in BIG-IP. A malicious party could exploit the vulnerabilities to launch attacks that could lead to the following categories of damage: - Denial-of-Service DoS. - Circumvention of a security measure - Execution of arbitrary code Root/admin - Execution of arbitrary cod...

SUSE CVE-2024-54658

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to a denial-of-service...

CVE-2025-1144

creationtimestamp| type| source ---|---|--- 2025-02-11 03:26:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113983118583973641 2025-02-11 04:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhusdstvrm2q 2025-02-11 04:48:27+00:00| seen|...

CVE-2024-12763

creationtimestamp| type| source ---|---|--- 2025-02-11 02:17:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrj6jqa27...

Intel CPUs -- multiple vulnerabilities

Intel reports: A potential security vulnerability in some Intel Processors may allow denial of service. Intel released microcode updates to mitigate this potential vulnerability. A potential security vulnerability in some Intel Software Guard Extensions Intel SGX Platforms may allow denial of...