CVE-2024-11391

creationtimestamp| type| source ---|---|--- 2024-12-03 14:37:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113589395352356764 2024-12-03 17:20:12+00:00| seen| https://t.me/cvedetector/11886...

CVE-2024-10898

creationtimestamp| type| source ---|---|--- 2024-11-21 03:07:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113518737411581057 2026-04-08 23:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mizfihcwag2v...

CVE-2024-33439

creationtimestamp| type| source ---|---|--- 2024-11-20 18:49:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113516778892421525 2024-11-20 21:16:55+00:00| seen| https://t.me/cvedetector/11654...

CVE-2024-10978

creationtimestamp| type| source ---|---|--- 2024-11-14 13:05:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113481449786170984 2024-11-14 14:59:03+00:00| seen| https://t.me/cvedetector/10945 2025-02-20 23:26:54+00:00| seen| Telegram/ZWgJLSHDidKsbED79NYRIJrHIHK98b2Y4jkgVKjeWyYZKj8...

CVE-2024-52532

creationtimestamp| type| source ---|---|--- 2024-11-11 19:58:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113466089408637925 2024-11-11 21:57:36+00:00| seen| https://t.me/cvedetector/10524...

DEBIAN-CVE-2024-50229

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newly created symlinks Syzbot reported that pagesymlink, called by nilfssymlink, triggers memory reclamation involving the filesystem layer, which can result in circular lock dependencies among...

CVE-2024-50223

creationtimestamp| type| source ---|---|--- 2024-11-09 10:49:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113452605277707696...

CVE-2024-51434

creationtimestamp| type| source ---|---|--- 2024-11-07 21:32:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113443809109465362 2024-11-07 23:37:53+00:00| seen| https://t.me/cvedetector/10137...

CVE-2024-10452

CVE-2024-10452 affects Grafana (open‑source platform). The issue allows Organization administrators to delete pending invites in an organization they are not part of, representing an Authorization Bypass/Improper Access protection described in the connected advisories. Exploitation details are no...

AZL-50757 CVE-2024-9287 affecting package python3 for versions less than 3.9.19-11

A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means that...

ALPINE-CVE-2024-9287

A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means that...

Leverage the Power of 45k, free, Hugging Face Models with Spring AI and Ollama

This blog post is co-authored by our great contributor Thomas Vitale. Ollama now supports all GGUF models from Hugging Face , allowing access to over 45,000 community-created models through Spring AI's Ollama integration, runnable locally. We'll explore using this new feature with Spring AI. The...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created EMF file...

CVE-2024-44202

creationtimestamp| type| source ---|---|--- 2024-09-17 03:04:20+00:00| seen| https://t.me/cvedetector/5777...

CVE-2024-8473

creationtimestamp| type| source ---|---|--- 2024-09-05 16:22:06+00:00| seen| https://t.me/cvedetector/4905...

UBUNTU-CVE-2022-48877

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-43403 Kanister has a potential risk which can be leveraged to make a cluster-level privilege escalation

Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with a ClusterRole called edit via ClusterRoleBinding. The "edit" ClusterRole is one of Kubernetes default-created ClusterRole, and it has the create/patch/udpate...

The vulnerability of the application for updating Google Updater allows a perpetrator to elevate their privileges.

The vulnerability of the application for updating Google Updater is related to data processing errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

typo3 Information Disclosure Security Note

Due to reports it has been validated that internal workspaces in Neos are accessible without authentication. Some users assumed this is a planned feature but it is not. A workspace preview should be an additional feature with respective security measures in place. Note that this only allows readi...

PT-2024-40044 · Neos · Neos

Name of the Vulnerable Software and Affected Versions: Neos affected versions not specified Description: The issue allows unauthorized access to internal workspaces in Neos without authentication. This means that internal workspaces, which are non-public and do not have an owner, can be viewed by...