CVE-2024-25020

CVE-2024-25020 affects IBM Cognos Controller 11.0.0 and 11.0.1, where uploading attachments on the Journal entry page allows unrestricted filetypes, enabling attackers to upload malicious executables that could be used against victims. The issue is documented across multiple sources linked to the...

CVE-2024-25019 IBM Cognos Controller file upload

IBM Cognos Controller 11.0.0 and 11.0.1 could be vulnerable to malicious file upload by not validating the type of file uploaded to Journal entry attachments. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing...

PT-2024-20703 · Ibm · Ibm Cognos Controller

Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 11.0.0 through 11.0.1 Description: The issue allows malicious file upload by permitting unrestricted filetype attachments in the Journal entry page. Attackers can exploit this weakness to upload malicious...

CVE-2024-46906

creationtimestamp| type| source ---|---|--- 2024-12-02 17:05:14+00:00| seen| https://t.me/cvedetector/11792 2024-12-02 18:25:11+00:00| seen| https://t.me/ZeroDayru/334 2024-12-03 19:14:22+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590485768782792 2024-12-12...

AZL-54243 CVE-2024-53121 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the hardware deletion function to NULL and unlock the FTE. - Lock...

DEBIAN-CVE-2024-53121

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the hardware deletion function to NULL and unlock the FTE. - Lock...

CLSA-2024-1733142094 squid: Fix of CVE-2024-23638

CVE-2024-23638: Do not update StoreEntry expiration after errorAppendEntry...

CVE-2024-33056

CVE-2024-33056 describes a memory corruption issue in Qualcomm components involving sequential allocation/access of an entry in the SMEM partition. Affected are Qualcomm closed‑source components and related security processor context; root cause is memory corruption from continuous SMEM entry han...

CVE-2024-20137

creationtimestamp| type| source ---|---|--- 2024-12-02 04:13:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113581282947057622 2024-12-02 06:12:21+00:00| seen| https://t.me/cvedetector/11735 2024-12-28 06:11:06+00:00| published-proof-of-concept| https://t.me/ckeArsenal/272 2024-12-28...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the active flag for FTEs in the net/mlx5 component not being checked by locking during deletion, causing the...

CVE-Research

It is an offensive tool for web application security research. T...

PT-2024-36888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability has been identified in the Linux kernel, specifically in the btrfs file system. The issue occurs when an unexpected action of BTRFS DROP DELAYED REF is...

CVE-2024-11967

creationtimestamp| type| source ---|---|--- 2024-11-28 18:01:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113561889396998505...

UBUNTU-CVE-2023-52922

In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcmprocshow BUG: KASAN: slab-use-after-free in bcmprocshow+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/7862 CPU: 1 PID: 7862 Comm: cat Not tainted 6.5.0-rc1-00153-gc8746099c197 230 Hardwar...

CVE-2024-11959

creationtimestamp| type| source ---|---|--- 2024-11-28 14:36:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113561081122883541 2026-07-10 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqcvit7jsy2m...

CVE-2024-46055

creationtimestamp| type| source ---|---|--- 2024-11-27 14:37:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113555422023711821...

CVE-2024-53267

sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a validly-signed but "mismatched" bundle is presented as proof of inclusion into a transparency log. This bug impacts clients using any variation...

sigstore-java has vulnerability with bundle verification

Summary sigstore-java has insufficient verification for a situation where a validly-signed but "mismatched" bundle is presented as proof of inclusion into a transparency log Impact This bug impacts clients using any variation of KeylessVerifier.verify The verifier may accept a bundle with an...

CVE-2018-5852

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'...

CVE-2018-5852 Buffer Over-read in IPA

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'...