OESA-2025-1097 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This pat...

[SECURITY] Fedora 41 Update: python3.12-3.12.9-1.fc41

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

CVE-2025-25147

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepojmem2a 2025-02-07 12:08:45+00:00| seen| https://t.me/cvedetector/17483 2025-02-07 12:53:52+00:00| seen|...

CVE-2025-23419

creationtimestamp| type| source ---|---|--- 2025-02-05 17:55:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhh5dqksd622 2025-02-05 18:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6ktldeu2i 2025-02-05 18:22:28+00:00| seen|...

CVE-2025-22846

creationtimestamp| type| source ---|---|--- 2025-02-05 17:52:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113952551524178942 2025-02-05 18:16:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6keqjwo2t 2025-02-05 21:40:03+00:00| seen|...

CVE-2024-1624

An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x, SIMULIA Abaqus from Release 2022 through Release 2024, SIMULIA Isight from Release 2022 through Release 2024 and CATIA Composer from Release...

CVE-2023-39943

creationtimestamp| type| source ---|---|--- 2025-02-04 22:27:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113947969898021530 2025-02-04 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf6rw6zjj2e 2025-02-05 02:23:53+00:00| seen|...

CVE-2025-0890

creationtimestamp| type| source ---|---|--- 2025-02-04 10:16:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113945094769665038 2025-02-04 11:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdwklgkws2t 2025-02-04 11:58:05+00:00| seen|...

CVE-2025-24963

creationtimestamp| type| source ---|---|--- 2025-02-04 06:23:56+00:00| published-proof-of-concept| https://github.com/vitest-dev/vitest/security/advisories/GHSA-8gvc-j273-4wm5 2025-02-04 20:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheur3fp7v2c 2025-02-04...

CVE-2023-52163

creationtimestamp| type| source ---|---|--- 2025-02-03 21:15:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113942024359778828 2025-02-03 21:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchm4cfrx2j 2025-02-03 22:08:27+00:00| seen|...

CVE-2025-23920

creationtimestamp| type| source ---|---|--- 2025-02-03 15:17:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtmlmhbp2r 2025-02-03 16:40:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113940944604703676 2025-08-26 18:36:19+00:00| seen|...

CVE-2025-25066

creationtimestamp| type| source ---|---|--- 2025-02-03 06:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhavd6ux5w2b 2025-02-03 06:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113938615957817888 2025-02-03 08:00:35+00:00|...

CVE-2025-24891

creationtimestamp| type| source ---|---|--- 2025-01-31 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh34wadkgh2t 2025-02-01 00:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113925875726724073 2025-02-01 01:25:33+00:00| seen|...

CVE-2024-53357

creationtimestamp| type| source ---|---|--- 2025-01-31 22:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zkotmw32c 2025-01-31 23:25:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3697 2025-02-01 01:25:43+00:00| seen|...

CGA-4GHP-X83G-MJRW

Bulletin has no description...

CVE-2024-57432

creationtimestamp| type| source ---|---|--- 2025-01-31 17:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2ispe4dc2h 2025-01-31 19:34:21+00:00| seen| https://t.me/cvedetector/16962 2025-01-31 21:35:32+00:00| seen|...

CVE-2025-21682

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: ip li set dev eth0 xdp obj xdpdummy.bpf.o sec xdp ip li set dev eth0 xdp off ethtool -k eth0 | grep gro...

Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

...

Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator may be vulnerable to denial of service due to [CVE-2023-24534]

Summary IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in Golang Go. CVE-2023-24534 Vulnerability Details CVEID:CVE-2023-24534 DESCRIPTION: HTTP and MIME...

CVE-2024-57436

creationtimestamp| type| source ---|---|--- 2025-01-29 14:20:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113912080898338103 2025-01-29 15:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvb65a5sx27 2025-01-29 17:21:29+00:00| seen|...