4942 matches found
CVE-2022-49779
CVE-2022-49779 affects the Linux kernel kprobes subsystem, specifically the kprobe-on-ftrace path. Description: when unregistering an aggrprobe, if the currently unregistered probe has a post_handler but sibling probes do not, the aggrprobe’s post_handler may be cleared. If the probe is ftrace-ba...
Security Bulletin:VMware Tanzu Spring Framework could provide weaker than expected security, affects watsonx.data
Summary VMware Tanzu Spring Framework could provide weaker than expected securitycaused by a flaw related to disallowedFields patterns in DataBinder is case insensitive. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: VMware Tanzu Spring Framework could...
CVE-2025-23141 KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVMGETMPSTATE to protect guest memory accesses Acquire a lock on kvm-srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending IN...
The Planted Orthogonal Vectors Problem
In the $k$-Orthogonal Vectors $k$-OV problem we are given $k$ sets, each containing $n$ binary vectors of dimension $d=n^o1$, and our goal is to pick one vector from each set so that at each coordinate at least one vector has a zero. It is a central problem in fine-grained complexity, conjectured...
Improper Handling of Case Sensitivity
Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to improper handling of uppercase characters in domain names during cookie domain validation. An attacker can bypass domain validation restrictions and set cookies for domains they do not contro...
Exploit for Improper Handling of Case Sensitivity in Apache Tomcat
CVE-2025-46701 Tomcat CVE, I...
Windscribe Acquitted on Charges of Not Collecting Users’ Data
The company doesn't keep logs, so couldn't turn over data: Windscribe, a globally used privacy-first VPN service, announced today that its founder, Yegor Sak, has been fully acquitted by a court in Athens, Greece, following a two-year legal battle in which Sak was personally charged in connection...
CVE-2025-3635
creationtimestamp| type| source ---|---|--- 2025-04-25 19:11:23+00:00| seen| https://t.me/cvedetector/23774...
New whitepaper outlines the taxonomy of failure modes in AI agents
We are releasing a taxonomy of failure modes in AI agents to help security professionals and machine learning engineers think through how AI systems can fail and design them with safety and security in mind. The taxonomy continues Microsoft AI Red Team's work to lead the creation of systematizati...
Shopify faces privacy lawsuit for collecting customer data
Shopify faces a data privacy class action lawsuit in the US that could change the way globally active companies can be held accountable. The proposed class action is a revival of a case that had been dismissed by a lower court judge and a three-judge 9th Circuit Court of Appeals panel. But now it...
Breaking the Flow and the Bank: Stealthy Cyberattacks on Water Network Hydraulics
As water distribution networks WDNs become increasingly connected with digital infrastructures, they face greater exposure to cyberattacks that threaten their operational integrity. Stealthy False Data Injection Attacks SFDIAs are particularly concerning, as they manipulate sensor data to...
Breaking the Prompt Wall (I): a Real-World Case Study of Attacking ChatGPT Via Lightweight Prompt Injection
Whitepaper called Breaking The Prompt Wall I: A Real-World Case Study Of Attacking ChatGPT Via Lightweight Prompt Injection...
CVE-2025-39430
creationtimestamp| type| source ---|---|--- 2025-04-17 15:57:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12252...
CVE-2025-36545
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...
CVE-2025-32090
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...
CVE-2025-31145
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...
CVE-2020-18243
SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php...
CVE-2025-33022
The reporter agreed to not assign CVE ID...
Enricozab CMS 安全漏洞
Enricozab CMS is a content management system by Enrico Zabayle Personal Developer. A security vulnerability exists in Enricozab CMS version v.1.0, which stems from /hdo/hdo-view-case.php not properly filtering inputs, which could lead to remote execution of arbitrary code...