5992 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-8616
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existi...
CVE-2024-43051
Information disclosure while deriving keys for a session for any Widevine use case...
CVE-2024-43051 Improper Authorization in SPS-HLOS
Information disclosure while deriving keys for a session for any Widevine use case...
CVE-2024-43051
The CVE-2024-43051 entry describes an Information disclosure during session key derivation for Widevine use. Connected sources confirm this affects Qualcomm closed‑source components (CVE-2024-43051) and that the issue is listed in Android security bulletins with patch levels addressing these vuln...
CVE-2024-43055: Buffer Copy without Checking Size of Input
Memory corruption while processing camera use case IOCTL call...
PT-2025-9291
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A memory corruption issue occurs while processing a specific camera use case IOCTL call. Recommendations At the moment, there is no information about a newer version that contains a fix for th...
OESA-2025-1226 tomcat security update
The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open developmen...
RHSA-2024:9459
creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5724 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-03-14 16:43:58+00:00| published-proof-of-concept|...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security weakness in Spring Framework [CVE-2024-38820]
Summary IBM Watson Speech Services Cartridge is vulnerable to a security weakness in Spring Framework, caused by a flaw related to disallowedFields patterns in DataBinder is case insensitive CVE-2024-38820. Spring Framework is used by our Speech Microservices. This vulnerabilitiy has been...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a TOCTOU Race Condition vulnerability in Apache Tomcat [CVE-2024-56337]
Summary IBM Watson Speech Services Cartridge is vulnerable to a Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat, caused by JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. CVE-2024-56337. Apache Tomcat is used by our...
tomcat: RCE due to TOCTOU issue in JSP compilation
A flaw was found in Tomcat. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to be treated as a JSP and executed, resulting in remote code...
U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”
A U.S. Army soldier who pleaded guilty last week to leaking phone records for high-ranking U.S. government officials searched online for non-extradition countries and for an answer to the question "can hacking be treason?" prosecutors in the case said Wednesday. The government disclosed the detai...
DEBIAN-CVE-2025-21711
In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rosesetsockopt In case of possible unpredictably large arguments passed to rosesetsockopt and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum an...
CVE-2025-21711 net/rose: prevent integer overflows in rose_setsockopt()
In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rosesetsockopt In case of possible unpredictably large arguments passed to rosesetsockopt and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum an...
DEBIAN-CVE-2022-49490
In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Return error code in mdp5piperelease when deadlock is detected mdp5getglobalstate runs the risk of hitting a -EDEADLK when acquiring the modeset lock, but currently mdp5piperelease doesn't check for if an error is...
UBUNTU-CVE-2022-49657
In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnetwritecmdasync mixed up which buffers need to be freed in which error case. v2: add Fixes tag v3: fix uninitialized buf pointer...
Important: Red Hat Security Advisory: RHODF-4.14-RHEL-9 security update
An updated images are now available for RHODF-4.14-RHEL-9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...
This Russian Tech Bro Helped Steal $93 Million and Landed in US Prison. Then Putin Called
In the epic US-Russian prisoner swap last summer, Vladimir Putin brought home an assassin, spies, and another prized ally: the man behind one of the biggest insider trading cases of all time...
CVE-2025-25604
creationtimestamp| type| source ---|---|--- 2025-02-21 19:18:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4954 2025-02-21 22:17:13+00:00| seen| https://t.me/cvedetector/18685...
CVE-2023-51311
creationtimestamp| type| source ---|---|--- 2025-02-20 17:19:58+00:00| seen| https://t.me/cvedetector/18547 2025-02-24 18:26:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5193...