Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Glpi-Project Glpi

CVE-2024-43416-PoC...

CLSA-2024-1730801437 openssl: Fix of CVE-2024-5535

CVE-2024-5535: Validate provided client list in ssl/ssllib.c. Clarify SSLselectnextproto documentation...

Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122201 fixes several issues. The following security issues were fixed: CVE-2024-41059: hfsplus: fix uninit-value in copyname bsc1228573. CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 bsc1226325. CVE-2021-47378: Destroy cm id before...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52610: net/sched: actct: fix skb leak and crash on ooo frags bsc1221610. CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocshow...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52610: net/sched: actct: fix skb leak and crash on ooo frags bsc1221610. CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocshow...

CVE-2024-25584

Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be CR LF DOT CR LF. This causes Dovecot to convert single mail with LF DOT LF in middle, into two emails when relaying to SMTP. Dovecot will split mail with LF DOT LF into two mails. Upgrade to latest...

vulnerability-research

vulnerability-...

Exploit for CVE-2020-13945

CVE-2020-13945 - Apache APISIX Remote Code Execution RCE Th...

Exploit for CVE-2024-37742

CVE-2024-37742: Clipboard Exploit in SEB ≤ 3.5.0 Windows Thi...

A week in security (June 10 – June 16)

Last week on Malwarebytes Labs: Truist bank confirms data breach Update now! Google Pixel vulnerability is under active exploitation Adobe clarifies Terms of Service change, says it doesn’t train AI on customer content 23andMe data breach under joint investigation in two countries When things go...

CVE-2024-31207

creationtimestamp| type| source ---|---|--- 2024-04-23 18:21:50+00:00| seen| https://t.me/arpsyndicate/4757 2025-08-31 11:06:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxowzve6m22z 2025-08-31 11:08:19+00:00| seen|...

Exploit for Use After Free in Linux Linux_Kernel

!imagehttps://git...

PT-2024-5059 · Siemens · Scalance W786-1 Rj45 +22

Name of the Vulnerable Software and Affected Versions: SCALANCE W1748-1 M12 6GK5748-1GY01-0AA0 SCALANCE W1748-1 M12 6GK5748-1GY01-0TA0 SCALANCE W1788-1 M12 6GK5788-1GY01-0AA0 SCALANCE W1788-2 EEC M12 6GK5788-2GY01-0TA0 SCALANCE W1788-2 M12 6GK5788-2GY01-0AA0 SCALANCE W1788-2IA M12...

CVE-2024-2365

creationtimestamp| type| source ---|---|--- 2024-03-11 01:27:07+00:00| seen| https://t.me/ctinow/204394 2024-03-11 01:27:09+00:00| seen| https://t.me/ctinow/204396 2025-01-04 23:04:57+00:00| seen| https://www.jerrygamblin.com/2025/01/05/2024-cve-data-review/ 2025-01-04 23:04:57+00:00| seen|...

SUSE CVE-2023-52507

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a...

PT-2024-13908 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of a rejected reason stating that the item is unused, alon...

CVE-2016-10972

creationtimestamp| type| source ---|---|--- 2024-01-15 22:26:38+00:00| seen| https://t.me/pytar/231 2025-08-31 03:12:58+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

GHSA-X9QQ-236J-GJ97 Canonical LXD documentation improvement to make clear restricted.devices.disk=allow without restricted.devices.disk.paths also allows shift=true

Summary If a user has restricted access to a project that is configured with restricted=true, they can gain root access on the system by creating a disk device with shift=true and creating a setuid root executable. This is possible because the shift property is not restricted unless...

OESA-2023-1885 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

PT-2023-9239 · Siemens · Scalance W786-1 Rj45 +16

Name of the Vulnerable Software and Affected Versions: SCALANCE W721-1 RJ45 6GK5721-1FC00-0AA0 All versions SCALANCE W721-1 RJ45 6GK5721-1FC00-0AB0 All versions SCALANCE W722-1 RJ45 6GK5722-1FC00-0AA0 All versions SCALANCE W722-1 RJ45 6GK5722-1FC00-0AB0 All versions SCALANCE W722-1 RJ45...