24536 matches found
GHSA-9952-GV64-X94C
creationtimestamp| type| source ---|---|--- 2025-07-30 18:47:20+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/19113 2026-02-14 19:30:27+00:00| seen| https://gist.github.com/alon710/f15141bc1f55d69b0e8ca38fc9e28c11 2026-02-17 09:50:49+00:00| seen|...
Directory Traversal
Overview bugsink is a Self-hosted Error Tracking Affected versions of this package are vulnerable to Directory Traversal via the getfilenameforeventid function when constructing file locations from untrusted eventid input without validation. An attacker can overwrite or create files in arbitrary...
HCL IEM Information Disclosure Vulnerability
HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
HCL IEM Information Disclosure Vulnerability (CNVD-2025-20022)
HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2025-31276
creationtimestamp| type| source ---|---|--- 2025-07-29 23:44:39+00:00| seen| Telegram/mSJGQRe9ZfLpC2VjaLNJZV1SO8AvuRSN24Q7Cyo7nztM3OU...
GHSA-Q78P-G86F-JG6Q Bugsink path traversal via event_id in ingestion
Summary In affected versions, ingestion paths construct file locations directly from untrusted eventid input without validation. A specially crafted eventid can result in paths outside the intended directory, potentially allowing file overwrite or creation in arbitrary locations. Submitting such...
CVE-2024-52894
creationtimestamp| type| source ---|---|--- 2025-07-29 19:42:55+00:00| seen| Telegram/SRQpPKksFTdZhZdHY2Op56fBoWKY-b27ghZM8zwC1Hns...
CVE-2025-6175
creationtimestamp| type| source ---|---|--- 2025-07-29 12:44:28+00:00| seen| Telegram/AQ3fam1fLxra7DTFGB8awBoqw3ouD8ZswIfFVdv5-Kjj8...
CVE-2025-4566
creationtimestamp| type| source ---|---|--- 2025-07-29 04:46:45+00:00| seen| Telegram/mXdSbIcSjbESLbbpG4c2o-QsvX8sfpAg1Dpo33xT2bo...
SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2025:02534-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02534-1 advisory. - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability t...
This Week in Spring - July 29th, 2025
It's the end of July! JULY! The seventh month of the year, done and dusted! AHHHHH! I've got memories of being on a tropical beach over the winter holidays, sipping rum and dodging mosquitoes like I was doing a rhythmic gymnastics routine just recently. It turns out that was seven months ago, not...
PT-2025-31371
Name of the Vulnerable Software and Affected Versions Bugsink versions 1.4.2 and below Bugsink versions 1.5.0 through 1.5.4 Bugsink versions 1.6.0 through 1.6.3 Bugsink versions 1.7.0 through 1.7.3 Description Bugsink is a self-hosted error tracking service. Ingestion paths construct file locatio...
Security update for salt
This update for salt fixes the following issues: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal vulnerability...
SUSE-SU-2025:02534-1 Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 - CVE-2024-38824: Fixed directory traversal...
UBUNTU-CVE-2025-38469
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...
The vulnerability of the icl_update_topdown_event() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the iclupdatetopdownevent function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-7501
creationtimestamp| type| source ---|---|--- 2025-07-26 07:38:56+00:00| seen| Telegram/X6faUaU7HnXFhCZkG4kC36rVdO7-th27hZCjcAoWH6iRo...
CVE-2025-52452
creationtimestamp| type| source ---|---|--- 2025-07-25 19:39:37+00:00| seen| Telegram/sraMpOYs4YkHPOEDqtQ7mtQWgHplQ2u-ytTFj7FlwZtqcg...