Security Bulletin: IBM App Connect Enterprise Certified Container Dashboards that use COS S3 storage are vulnerable to denial of service and security restrictions bypass [CVE-2024-48948] [CVE-2024-48949]

Summary Node.js module elliptic is used by IBM App Connect Enterprise Certified Container for signature validation. IBM App Connect Enterprise Certified Container Dashboard operands that use COS S3 storage are vulnerable to denial of service and security restrictions bypass. This bulletin provide...

CVE-2025-23045

creationtimestamp| type| source ---|---|--- 2025-01-28 16:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsu42tcvz2f 2025-01-28 17:02:25+00:00| published-proof-of-concept| Telegram/VQDyMSiZHY5xvEKb4oih99dlPq4vD6lnAW-AaTy3BGN-vo 2025-01-28 18:47:23+00:00| seen|...

CVE-2024-57276

creationtimestamp| type| source ---|---|--- 2025-01-27 16:36:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113901292449278960 2025-01-27 17:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxv6iqm2h 2025-01-27 18:55:23+00:00| seen|...

CVE-2024-38320

creationtimestamp| type| source ---|---|--- 2025-01-27 15:45:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113901091397780672 2025-01-27 16:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmn7e4v2c 2025-01-27 17:40:22+00:00| seen|...

CVE-2024-41739

creationtimestamp| type| source ---|---|--- 2025-01-24 13:42:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113883622037551920 2025-01-24 14:04:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2902 2025-01-24 14:48:38+00:00| seen|...

CVE-2025-23227

creationtimestamp| type| source ---|---|--- 2025-01-23 17:29:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113878851777568302 2025-01-23 18:03:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2791 2025-01-23 18:16:09+00:00| seen|...

CVE-2024-55927

creationtimestamp| type| source ---|---|--- 2025-01-23 17:29:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113878851747424255 2025-01-23 18:03:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2790 2025-01-23 18:15:55+00:00| seen|...

CVE-2024-52331

creationtimestamp| type| source ---|---|--- 2025-01-23 17:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3mf72m2t 2025-01-23 17:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgggguul3a2b 2025-01-23 19:09:14+00:00| seen|...

CVE-2025-21550

...

CVE-2025-21530

...

MAL-2025-214 Malicious code in opensea-developer-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 692ba66619407967d692be9c0e70b5b297806cf1e398766ee1556657af6feba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-23698

creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43ia6v72n 2025-01-17 00:38:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113840901500299046...

CVE-2024-57679

creationtimestamp| type| source ---|---|--- 2025-01-16 18:54:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113839550952252289 2025-01-16 18:56:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2000 2025-01-16 19:16:01+00:00| seen|...

CGA-F8R8-GCP7-278J

Bulletin has no description...

FreeBSD : keycloak -- Multiple security fixes (5e2bd238-d2bb-11ef-bc0e-1c697a616631)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5e2bd238-d2bb-11ef-bc0e-1c697a616631 advisory. Keycloak reports: This update includes 2 security fixes: Tenable has extracted the preceding...

CVE-2025-21319

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:21:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpukxd7fs2f 2025-01-15 00:41:30+00:00| seen|...

CVE-2024-46669

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwg4lvl2e 2025-01-14 15:39:47+00:00| seen| https://t.me/cvedetector/15262 2025-01-14 15:58:25+00:00| seen|...

GHSA-XF7J-4X67-6H93

creationtimestamp| type| source ---|---|--- 2025-01-13 21:38:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113823205963235371...

CVE-2025-0401

creationtimestamp| type| source ---|---|--- 2025-01-12 23:37:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113818013475990789 2025-01-13 00:06:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1344 2025-01-13 00:16:25+00:00| seen|...

CVE-2024-48876 stackdepot: fix stack_depot_save_flags() in NMI context

In the Linux kernel, the following vulnerability has been resolved: stackdepot: fix stackdepotsaveflags in NMI context Per documentation, stackdepotsaveflags was meant to be usable from NMI context if STACKDEPOTFLAGCANALLOC is unset. However, it still would try to take the poollock in an attempt ...