MAL-2025-214 Malicious code in opensea-developer-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 692ba66619407967d692be9c0e70b5b297806cf1e398766ee1556657af6feba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-23698

creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43ia6v72n 2025-01-17 00:38:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113840901500299046...

CVE-2024-57679

creationtimestamp| type| source ---|---|--- 2025-01-16 18:54:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113839550952252289 2025-01-16 18:56:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2000 2025-01-16 19:16:01+00:00| seen|...

CGA-F8R8-GCP7-278J

Bulletin has no description...

FreeBSD : keycloak -- Multiple security fixes (5e2bd238-d2bb-11ef-bc0e-1c697a616631)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5e2bd238-d2bb-11ef-bc0e-1c697a616631 advisory. Keycloak reports: This update includes 2 security fixes: Tenable has extracted the preceding...

CVE-2025-21319

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:21:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpukxd7fs2f 2025-01-15 00:41:30+00:00| seen|...

CVE-2024-46669

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwg4lvl2e 2025-01-14 15:39:47+00:00| seen| https://t.me/cvedetector/15262 2025-01-14 15:58:25+00:00| seen|...

GHSA-XF7J-4X67-6H93

creationtimestamp| type| source ---|---|--- 2025-01-13 21:38:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113823205963235371...

CVE-2025-0401

creationtimestamp| type| source ---|---|--- 2025-01-12 23:37:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113818013475990789 2025-01-13 00:06:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1344 2025-01-13 00:16:25+00:00| seen|...

CVE-2024-48876 stackdepot: fix stack_depot_save_flags() in NMI context

In the Linux kernel, the following vulnerability has been resolved: stackdepot: fix stackdepotsaveflags in NMI context Per documentation, stackdepotsaveflags was meant to be usable from NMI context if STACKDEPOTFLAGCANALLOC is unset. However, it still would try to take the poollock in an attempt ...

CVE-2024-48876

CVE-2024-48876 - Linux kernel : The issue affects stack_depot’s stack_depot_save_flags() when invoked in NMI context. It could deadlock if pool_lock is held during an NMI, so the fix ensures the lock is only taken if space permits and the operation is safe in NMI. The documentation was updated to...

Cosmos: Attacker can use any non-enabled capability

The Capabilites implementation in CosmWasm contracts was found to have a vulnerability. Even if the executing chain did not allow a specific capability, a CosmWasm contract could still execute actions that required that capability. This was due to a naive implementation of capabilities and...

CVE-2024-13256

creationtimestamp| type| source ---|---|--- 2025-01-09 19:13:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113799986024892307 2025-01-09 19:16:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1023 2025-01-09 19:16:22+00:00| seen|...

CVE-2024-53526

creationtimestamp| type| source ---|---|--- 2025-01-08 19:08:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113794305549488094 2025-01-08 19:14:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/783 2025-01-08 19:15:57+00:00| seen|...

CVE-2025-0283

creationtimestamp| type| source ---|---|--- 2025-01-08 17:54:03+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113794013127839389 2025-01-08 17:55:33+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0005 2025-01-08 18:07:00+00:00| seen|...

CVE-2023-45878

creationtimestamp| type| source ---|---|--- 2025-01-08 17:16:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/746 2025-03-20 16:00:08+00:00| published-proof-of-concept| Telegram/gMA-tjO3u7r6v0DXDtEtTd2G2qr0DluN8PNDCBpeT15Ynng 2025-03-21 04:00:08+00:00|...

CVE-2024-11271

creationtimestamp| type| source ---|---|--- 2025-01-08 04:30:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113790854121356909 2025-01-08 04:38:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/640 2025-01-08 05:15:22+00:00| seen|...

CVE-2024-54006

creationtimestamp| type| source ---|---|--- 2025-01-07 17:40:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/488 2025-01-07 18:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6aybdnio2o 2025-01-07 18:47:53+00:00| seen|...

CVE-2024-12152

creationtimestamp| type| source ---|---|--- 2025-01-07 09:31:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113786373317643206 2025-01-07 09:36:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/384 2025-01-07 10:15:31+00:00| seen|...

CVE-2024-12535

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/339 2025-01-07 06:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrl6ygx2i 2025-01-07 06:18:53+00:00| seen|...