24770 matches found
CVE-2025-34091
Rejected reason: Neither filed by Chrome nor a valid security vulnerability...
CVE-2025-6942
The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine...
Malicious code in taskrouter-event-listener (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6bba47f8505eeeef34953080b36ace84d8fd303c36ee00977a2d00f9447a4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
kernel: Bluetooth: Fix use after free in hci_send_acl
A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hcidisconnphylinkcompleteevt function. Improper cleanup and reference handling can lead to a connection object, hcon, being freed and then later accessed during a subsequent function call. This issue can lead to a...
CVE-2012-6428
creationtimestamp| type| source ---|---|--- 2025-07-01 20:09:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20077...
GHSA-3Q26-F695-PP76
creationtimestamp| type| source ---|---|--- 2025-07-01 18:08:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20067 2025-07-01 19:07:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779544615525397...
GHSA-H34R-JXQM-QGPR
creationtimestamp| type| source ---|---|--- 2025-07-01 11:09:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20016...
Security Bulletin: IBM Event Endpoint Management is vulnerable to a Cross-site scripting (XSS) attack (CVE-2024-11831).
Summary IBM Event Endpoint Management is vulnerable to a Cross-site scripting XSS attack due to a flaw in npm-serialize-javascript. It is used for safely serialize complex JavaScript objects for storage or transmission. Vulnerability Details CVEID:CVE-2024-11831 DESCRIPTION: A flaw was found in...
MAL-2025-5336 Malicious code in themeone-event (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344156a1acdac4db165b08dad861bc3aa76c408f6e85556cce6b9cf2b0834ecb Any computer that has this package installed or running should be considered...
Malicious code in themeone-event (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344156a1acdac4db165b08dad861bc3aa76c408f6e85556cce6b9cf2b0834ecb Any computer that has this package installed or running should be considered...
GHSA-39HJ-FXVW-758M
creationtimestamp| type| source ---|---|--- 2025-07-01 02:07:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19996 2025-07-01 03:55:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114775957721289224...
kernel: Bluetooth: Fix use after free in hci_send_acl
A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hcidisconnphylinkcompleteevt function. Improper cleanup and reference handling can lead to a connection object, hcon, being freed and then later accessed during a subsequent function call. This issue can lead to a...
This Week in Spring - July 1st, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! It's July!! This week, I'm on PTO, and as always, I'm looking for good reading material on the plane ride over for my holiday. Thank goodness for the ever-vibrant and awesome Spring community; there's tons of stuff to dive...
Malicious code in cvent-event-calendar (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf244badb700ac9a553a78bc1d00ae8c96e4b9b465c79c5bf09374eb9ef768d3 Any computer that has this package installed or running should be considered...
MAL-2025-5387 Malicious code in cvent-event-calendar (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf244badb700ac9a553a78bc1d00ae8c96e4b9b465c79c5bf09374eb9ef768d3 Any computer that has this package installed or running should be considered...
CVE-2025-49520 Event-driven-ansible: authenticated argument injection in git url in eda project creation
A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote command. This vulnerability allows an authenticated attacker to inject arguments and execute arbitrary commands on the EDA worker. In Kubernetes/OpenShift...
CVE-2025-53074
creationtimestamp| type| source ---|---|--- 2025-06-30 02:55:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19894 2025-06-30 07:16:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lssnc4imfw2a...
CVE-2025-6870
creationtimestamp| type| source ---|---|--- 2025-06-30 00:54:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrxvoxrop23...
CVE-2025-6875
creationtimestamp| type| source ---|---|--- 2025-06-29 22:56:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19881 2025-06-30 00:29:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrwk7ke4j2p...