CVE-2024-12617

creationtimestamp| type| source ---|---|--- 2024-12-24 04:33:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113705931190547781 2024-12-24 04:37:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113705944402586236 2024-12-24 05:15:28+00:00| seen|...

PT-2025-3576

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb Description A slab-use-after-free issue has been identified in the Linux kernel, specifically in the RDMA/rxe component. This problem occurs when the event ib cache event...

GHSA-Q2X7-8RV6-6Q7H

creationtimestamp| type| source ---|---|--- 2024-12-23 15:50:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113702928777162458...

GHSA-6V67-2WR5-GVF4 QOS.CH logback-core Server-Side Request Forgery vulnerability

Server-Side Request Forgery SSRF in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modification of DOCTYPE declaration in XML configuration files...

GHSA-PR98-23F8-JWXV QOS.CH logback-core Expression Language Injection vulnerability

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core up to and including version 1.5.12 in Java applications allows attackers to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program execution. Malicious...

UBUNTU-CVE-2024-12798

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

CVE-2021-20553

creationtimestamp| type| source ---|---|--- 2024-12-19 02:15:27+00:00| seen| https://t.me/cvedetector/13294...

logback 安全漏洞

logback is a reliable, general-purpose, fast and flexible Java logging framework open-sourced by QOS.CH. A security vulnerability exists in logback version 1.5.12, which stems from SaxEventRecorder containing a server-side request forgery issue. An attacker can exploit this vulnerability to forge...

kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()

A vulnerability was found in the eventdeliver function in the Linux kernel's VMCI component, where the issue involves a lack of sanitization for the eventdata.event index controlled by user-space, which could lead to speculative information leaks...

GHSA-FM9W-7M7V-WXQV

creationtimestamp| type| source ---|---|--- 2024-12-17 21:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113670373972746279 2024-12-18 00:18:39+00:00| seen| https://t.me/cvedetector/13136...

Exploit for CVE-2024-55968

CVE-2024-55968 LPE Exploit POC for CVE-2024-55968 Vulnerab...

Empowering Women in Cybersecurity: Lessons from the FS-ISAC Women’s Networking Event

Discover strategies for empowering women in cybersecurity, gleaned from lessons learned at the 2024 FS-ISAC women’s networking event...

GHSA-RHJF-Q2QW-RVX3

creationtimestamp| type| source ---|---|--- 2024-12-16 20:12:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113664325321574528...

CVE-2024-12660

creationtimestamp| type| source ---|---|--- 2024-12-16 19:52:47+00:00| seen| https://t.me/cvedetector/13028...

CVE-2024-43234

creationtimestamp| type| source ---|---|--- 2024-12-16 18:11:15+00:00| seen| https://t.me/cvedetector/13012...

CVE-2024-5333 The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events...

Upcoming Speaking Events

This is a current list of where and when I am scheduled to speak: I'm speaking at a joint meeting of the Boston Chapter of the IEEE Computer Society and GBC/ACM, in Boston, Massachusetts, USA, at 7:00 PM ET on Thursday, January 9, 2025. The event will take place at the Massachusetts Institute of...

CVE-2024-12578 Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure

The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickeraticketsinfo' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from bookings like full names, ema...

CVE-2023-29476

creationtimestamp| type| source ---|---|--- 2024-12-14 04:19:16+00:00| seen| https://t.me/cvedetector/12907...

WordPress plugin Tickera – WordPress Event Ticketing 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin Tickera -...