CVE-2024-57981

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is late...

CVE-2025-27218

creationtimestamp| type| source ---|---|--- 2025-02-20 06:41:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lilooxkrnx2a 2025-02-20 08:07:57+00:00| seen| https://t.me/cvedetector/18517 2025-02-20 23:26:54+00:00| seen| Telegram/bIWqiOjr1i5Jv8o-lCPyoqx7UdJEMKQ-dr8MIYLvX8SvXV-l...

CVE-2024-13726

creationtimestamp| type| source ---|---|--- 2025-02-17 06:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3ufwumy2t 2025-02-17 06:17:44+00:00| seen| https://infosec.exchange/users/cve/statuses/114017767487537657 2025-02-17 08:10:55+00:00| seen|...

shop.stephenvilleofficepro.com Cross Site Scripting vulnerability OBB-4024515

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-QRM9-F75W-HG4C Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Impact Applications which have been bootstrapped by the new igniter installer since AshAuthentication v4.1.0 and who have used the magic link strategy, password resets, confirmation, or are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. If you did not us...

CVE-2024-23814

creationtimestamp| type| source ---|---|--- 2025-02-11 10:29:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113984783226707078 2025-02-11 11:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjsturqv23 2025-02-13 11:00:00+00:00| seen|...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: The Align BR/EDR JUSTWORKS method is now aligned with LE. This adjustment aligns the JUSTWORKS method with LE. Since version 92516cd97fd4, it has always required user confirmation when using the confirmhint...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dccp: A memory leak has been fixed in dccpfeatchangerecv. If dccpfeatpushconfirm fails after a new value for the SP feature is accepted, without reconciliation i.e., when entry == NULL, the memory allocated for that value never...

Astra Linux – Vulnerability in Firefox, Thunderbird

When handling keypress events, an attacker might have been able to trick a user into bypassing the “Open Executable File?” confirmation dialog. This could have led to the execution of malicious code. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

PT-2025-6376 · Unknown · Ashauthentication

Name of the Vulnerable Software and Affected Versions: AshAuthentication versions 4.1.0 through 4.4.8 Description: The issue affects applications that have been bootstrapped by the new igniter installer since AshAuthentication v4.1.0 and have used the magic link strategy or are manually revoking...

GHSA-R385-C5FC-X56C CouchAuth has a Server-Side Template Injection vulnerability in its email functionality

A host header injection vulnerability exists in the NPM package of perfood/couch-auth = 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information...

CVE-2024-57177

A host header injection vulnerability exists in the NPM package of perfood/couch-auth = 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information...

PT-2025-6098 · Perfood · Couch-Auth

Name of the Vulnerable Software and Affected Versions: perfood/couch-auth versions = 0.21.2 Description: A host header injection vulnerability exists in the NPM package of perfood/couch-auth. By sending a specially crafted host header in the email change confirmation request, it is possible to...

CVE-2022-30755

Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...

CVE-2025-1025

creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546311391296 2025-02-05 05:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvmo2252f 2025-02-05 07:26:56+00:00| seen|...

CVE-2025-24906

creationtimestamp| type| source ---|---|--- 2025-02-03 21:49:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113942157461874885 2025-02-03 22:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhckywoopj2c 2025-02-03 23:40:52+00:00| seen|...

CVE-2024-55416

creationtimestamp| type| source ---|---|--- 2025-01-30 15:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnocmz42i 2025-01-30 16:00:07+00:00| seen| https://t.me/truesecator/6678 2025-01-30 18:12:23+00:00| published-proof-of-concept|...

CVE-2025-23057

creationtimestamp| type| source ---|---|--- 2025-01-28 17:18:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113907118853381345 2025-01-28 18:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgt2s7n2ai2j 2025-01-28 19:09:06+00:00| seen|...

CVE-2024-54507

creationtimestamp| type| source ---|---|--- 2025-01-23 22:42:05+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3lggxcviw4y2c 2025-01-23 22:45:51+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lggxjneluj25 2025-01-23 22:51:40+00:00| seen|...

CVE-2024-49742

In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed f...