Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A...

GHSA-9M63-33Q3-XQ5X Vela Server Has Insufficient Webhook Payload Data Verification

Impact Users with an enabled repository with access to repo level CI secrets in Vela are vulnerable to the exploit. Any user with access to the CI instance and the linked source control manager can perform the exploit. Method By spoofing a webhook payload with a specific set of headers and body...

Important: Red Hat Security Advisory: Red Hat Insights for Runtimes security update

An update is now available for Red Hat Insights for Runtimes on RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Android zero-day vulnerabilities actively abused. Update as soon as you can

Google has issued updates to fix 43 vulnerabilities in Android, including two zero-days that are being actively exploited in targeted attacks. The updates are available for Android 12, 12L, 13, 14, and 15. Android vendors are notified of all issues at least a month before publication, however, th...

CVE-2025-27497

creationtimestamp| type| source ---|---|--- 2025-03-05 11:13:02+00:00| published-proof-of-concept| https://github.com/OpenIdentityPlatform/OpenDJ/security/advisories/GHSA-93qr-h8pr-4593 2025-03-05 16:32:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6558 2025-03-05...

Linux Distros Unpatched Vulnerability : CVE-2021-47331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: common: usb-conn-gpio: fix NULL pointer dereference of charger When power on system wit...

Linux Distros Unpatched Vulnerability : CVE-2014-2856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in scheduler/client.c in Common Unix Printing System CUPS before 1.7.2 allows remote attackers to inject arbitrary web...

Ubuntu: Security Advisory (USN-7303-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-23447

creationtimestamp| type| source ---|---|--- 2025-03-03 20:30:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6276 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:47+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3...

Malicious code in oj-sp-attachments-common (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in flux-common-plugin (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1810 Malicious code in flux-common-plugin (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @smt-front/common (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1775 Malicious code in common-typeface-termina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 193842681a528ea3a616187f7dff355372eea1f8144257cc73c7d73d9b859318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in common-typeface-termina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 193842681a528ea3a616187f7dff355372eea1f8144257cc73c7d73d9b859318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1844

creationtimestamp| type| source ---|---|--- 2025-03-03 02:29:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6131 2025-03-03 05:30:11+00:00| seen| https://t.me/cvedetector/19301 2025-08-19 18:29:28+00:00| seen| MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18...

CVE-2025-25949

creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6126 2025-03-03 02:58:43+00:00| seen| https://t.me/cvedetector/19280 2025-08-19 18:29:28+00:00| seen| MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18...

Linux Distros Unpatched Vulnerability : CVE-2009-3767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name ...

CVE-2024-5355

creationtimestamp| type| source ---|---|--- 2025-03-02 11:46:30+00:00| seen| Telegram/B7k3NugwduHhWRR6x9d-Kg1ivDWm9iGZ21Te9vFbpfI8rnH...

CVE-2020-1450

creationtimestamp| type| source ---|---|--- 2025-03-02 11:46:28+00:00| seen| Telegram/Km9gcRJ-PStd5h4tHMmt4rQnkSox9bnmGNHQu1h5QIrVDU9 2025-03-02 11:46:28+00:00| seen| Telegram/ddGcu0PbjdPFti98YC4iBSnigFXoQU08u0uyhA05vZPyYFv5...