CVE-2025-0842

creationtimestamp| type| source ---|---|--- 2025-01-29 22:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvyogaxfg2c 2025-01-29 23:30:41+00:00| published-proof-of-concept| Telegram/PqVThVgVR3pSBa68e-BpU378IBW0ME4KUrEZUc8I0i5fDDc 2025-01-30 01:11:56+00:00|...

AutoLib Software Systems OPAC 20.10 Secret Disclosure

AutoLib Software Systems OPAC version 20.10 discloses multiple API keys within the source code. Attackers may use these keys to access the backend API or other sensitive information. + Credits: Shahnawaz Shaikh, Security Researcher at Cybergate Defense LLC + twitter.com/striv3r Vendor Autolib-ind...

ALSA-2025:0692 Important: redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

CVE-2024-53588

creationtimestamp| type| source ---|---|--- 2025-01-23 21:40:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113879837210949815 2025-01-23 22:03:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2846 2025-01-23 22:15:47+00:00| seen|...

CVE-2025-0650 Ovn: egress acls may be bypassed via specially crafted udp packet

A flaw was found in the Open Virtual Network OVN. Specially crafted UDP packets may bypass egress access control lists ACLs in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized...

CVE-2025-24401

creationtimestamp| type| source ---|---|--- 2025-01-22 17:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdumxrnhc2r 2025-01-22 17:54:36+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113873287621870613 2025-01-22 18:54:27+00:00| seen|...

CVE-2025-23770 WordPress Fast Tube plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caspie Fast Tube fast-tube allows Reflected XSS.This issue affects Fast Tube: from n/a through = 2.3.1...

CVE-2024-13406

creationtimestamp| type| source ---|---|--- 2025-01-22 07:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgct3tc6a62c 2025-01-22 07:49:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxpwuow2i 2025-01-22 08:02:08+00:00|...

CVE-2023-27112

creationtimestamp| type| source ---|---|--- 2025-01-21 22:01:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2494 2025-01-21 22:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbuvjv5jh2f 2025-01-21 23:40:33+00:00| seen|...

Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

CVE-2024-54794

Summary: CVE-2024-54794 affects SpagoBI 3.5.1 and earlier, where the script input feature enables arbitrary code execution through Groovy script input. This is a command-injection style vulnerability in the web UI that can be exploited by a user with access to insert scripts, potentially leading ...

Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-57770

CVE-2024-57770 affects JFinalOA prior to v2025.01.01, with a SQL injection vulnerability in the component apply/save#oaContractApply.id. The issue’s root cause is an input handling flaw that enables injectable SQL strings via that parameter, leading to potential confidentiality, integrity, and av...

CVE-2025-20088

creationtimestamp| type| source ---|---|--- 2025-01-15 17:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbfiuret2f 2025-01-15 19:18:41+00:00| seen| https://t.me/cvedetector/15488...

Debian: Security Advisory (DLA-4013-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-48876

In the Linux kernel, the following vulnerability has been resolved: stackdepot: fix stackdepotsaveflags in NMI context Per documentation, stackdepotsaveflags was meant to be usable from NMI context if STACKDEPOTFLAGCANALLOC is unset. However, it still would try to take the poollock in an attempt ...

CVE-2025-22596 WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the modulosvisiveis.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msgc parameter. This vulnerability is fixed in...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Moderate: Red Hat Security Advisory: tuned security update

An update for tuned is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2024-11907

creationtimestamp| type| source ---|---|--- 2025-01-09 11:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgg5jsv27 2025-01-09 11:29:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113798164145069141 2025-01-09 12:16:11+00:00| seen|...