CVE-2021-28494

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases...

CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

CVE-2022-40516

Memory corruption in Core due to stack-based buffer overflow...

CVE-2024-7571

Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2024-11443

The de:branding plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the debrandingsave function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with...

CVE-2024-57428

creationtimestamp| type| source ---|---|--- 2025-02-04 16:00:09+00:00| published-proof-of-concept| Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I 2025-02-06 16:22:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113957861655010492 2025-02-06 17:16:18+00:00| seen|...

CVE-2025-1015

creationtimestamp| type| source ---|---|--- 2025-02-04 14:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheanty4232p 2025-02-04 14:21:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113946059610641619 2025-02-04 16:23:32+00:00| seen|...

Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

CVE-2024-13326 iBuildApp <= 0.2.0 - Reflected XSS

The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-47770

creationtimestamp| type| source ---|---|--- 2025-02-03 22:38:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113942353419505369 2025-02-03 23:40:57+00:00| seen| https://t.me/cvedetector/17131 2025-02-04 02:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhcxybcipi...

Important: Red Hat Security Advisory: rsync security update

An update for rsync is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2025-0842

creationtimestamp| type| source ---|---|--- 2025-01-29 22:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvyogaxfg2c 2025-01-29 23:30:41+00:00| published-proof-of-concept| Telegram/PqVThVgVR3pSBa68e-BpU378IBW0ME4KUrEZUc8I0i5fDDc 2025-01-30 01:11:56+00:00|...

AutoLib Software Systems OPAC 20.10 Secret Disclosure

AutoLib Software Systems OPAC version 20.10 discloses multiple API keys within the source code. Attackers may use these keys to access the backend API or other sensitive information. + Credits: Shahnawaz Shaikh, Security Researcher at Cybergate Defense LLC + twitter.com/striv3r Vendor Autolib-ind...

ALSA-2025:0692 Important: redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

CVE-2024-53588

creationtimestamp| type| source ---|---|--- 2025-01-23 21:40:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113879837210949815 2025-01-23 22:03:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2846 2025-01-23 22:15:47+00:00| seen|...

CVE-2025-0650 Ovn: egress acls may be bypassed via specially crafted udp packet

A flaw was found in the Open Virtual Network OVN. Specially crafted UDP packets may bypass egress access control lists ACLs in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized...

CVE-2025-24401

creationtimestamp| type| source ---|---|--- 2025-01-22 17:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdumxrnhc2r 2025-01-22 17:54:36+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113873287621870613 2025-01-22 18:54:27+00:00| seen|...

CVE-2025-23770 WordPress Fast Tube plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caspie Fast Tube fast-tube allows Reflected XSS.This issue affects Fast Tube: from n/a through = 2.3.1...

CVE-2024-13406

creationtimestamp| type| source ---|---|--- 2025-01-22 07:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgct3tc6a62c 2025-01-22 07:49:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxpwuow2i 2025-01-22 08:02:08+00:00|...

CVE-2023-27112

creationtimestamp| type| source ---|---|--- 2025-01-21 22:01:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2494 2025-01-21 22:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbuvjv5jh2f 2025-01-21 23:40:33+00:00| seen|...