24677 matches found
GHSA-334R-2682-95WC
creationtimestamp| type| source ---|---|--- 2025-08-27 15:19:26+00:00| seen| Telegram/MeDT5xSbT722Z8IOdUgFM2FhFadZUGYcFOFYbEmTMBS4yA...
kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in...
CVE-2025-30038
creationtimestamp| type| source ---|---|--- 2025-08-27 11:17:36+00:00| seen| Telegram/AY09XLoBUfwxiZFNxj5WEdkCmUdmJNBhVerNq2ufauVfOaQ...
CVE-2025-57846
creationtimestamp| type| source ---|---|--- 2025-08-27 08:01:35+00:00| seen| https://gist.github.com/Darkcrai86/e6f1590754c50458f04bcbafcc2184ca...
CVE-2025-9507
creationtimestamp| type| source ---|---|--- 2025-08-27 06:34:37+00:00| seen| https://gist.github.com/Darkcrai86/98c1b8122efe47156d12f9296fffa7dc...
CVE-2025-54598
Bevy Event service (as used for eBay Seller Events) up to 2025-07-22 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that enables an attacker to delete all notifications via the /notifications/delete/ endpoint. Root cause is CSRF on the notification-deletion path; impact is parti...
CVE-2025-54598
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI...
PT-2025-34954 · D Link · D-Link Dir-645 +6
Name of the Vulnerable Software and Affected Versions: D-Link DIR-110 version 1.03 D-Link DIR-412 version 1.03 D-Link DIR-600 version 1.03 D-Link DIR-610 version 1.03 D-Link DIR-615 version 1.03 D-Link DIR-645 version 1.03 D-Link DIR-815 version 1.03 Description: Multiple D-Link DIR-series router...
CVE-2025-54598
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI...
PT-2025-34886 · Ebay · Bevy Event Service
Name of the Vulnerable Software and Affected Versions: The Bevy Event service versions through 2025-07-22 Description: The Bevy Event service, used for eBay Seller Events and other activities, is susceptible to a Cross-Site Request Forgery CSRF issue. This flaw allows an attacker to delete all...
Linux Distros Unpatched Vulnerability : CVE-2020-25597
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling...
Every Keystroke You Make: a Tech-Law Measurement and Analysis of Event Listeners for Wiretapping
The privacy community has a long track record of investigating emerging types of web tracking techniques. Recent work has focused on compliance of web trackers with new privacy laws such as Europe's GDPR and California's CCPA. Despite the growing body of research documenting widespread lack of...
Linux Distros Unpatched Vulnerability : CVE-2017-16119
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is...
Linux Distros Unpatched Vulnerability : CVE-2020-25601
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows...
SUSE CVE-2025-54467
When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...
CVE-2024-23150
creationtimestamp| type| source ---|---|--- 2025-08-26 21:18:25+00:00| seen| Telegram/-sKfo3qJSvVgKyZycCa5J50EkWlJgyAWl1ZxrarsO-OktqI...
CVE-2025-23312
creationtimestamp| type| source ---|---|--- 2025-08-26 20:17:44+00:00| seen| Telegram/twJqFL0iEQWKbhbQC4jZGZs7O8mY3Om2fxKfMhxYhdUHl10...
CVE-2025-56432
creationtimestamp| type| source ---|---|--- 2025-08-26 16:15:50+00:00| seen| Telegram/LOoWECzn7KtgJ9KtXQPPq-BQMFnKnGfzqQY-oeJaNmgVmQ...
CVE-2025-6366
The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...