Lucene search
+L

2581 matches found

Positive Technologies
Positive Technologies
added 2025/03/24 12:00 a.m.12 views

PT-2025-16683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved by adding a bounds check for durable handle context in ksmbd. The issue was related to a missing bounds check for durable handle...

7.8CVSS6.4AI score0.66418EPSS
SaveExploits0References494
Circl
Circl
added 2025/03/21 5:19 p.m.16 views

CVE-2025-25500

creationtimestamp| type| source ---|---|--- 2025-03-21 17:19:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8386...

7.5CVSS4.8AI score0.00771EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/20 10:15 a.m.10 views

PYSEC-2025-93

gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue CVE-2024-4941. This vulnerability allows unauthenticated users to access arbitrary files on the server by uploading a speciall...

6.5CVSS6.9AI score0.00715EPSS
SaveExploits1References1
PyPA
PyPA
added 2025/03/20 10:15 a.m.21 views

PYSEC-2025-93

gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue CVE-2024-4941. This vulnerability allows unauthenticated users to access arbitrary files on the server by uploading a speciall...

7.5CVSS7AI score0.0083EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/03/20 12:00 a.m.19 views

PT-2025-12052

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version git d4ec6a3 Description: The issue is related to a local file inclusion vulnerability due to the use of the gradio component gr.JSON. This vulnerability allows unauthenticated users to access arbitrary files...

6.5CVSS6.6AI score0.00715EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.24 views

The vulnerability of the ext4handle_error() function in the fs/ext4/super.c module of the Linux file system support module allows a hacker to trigger a service failure.

The vulnerability of the ext4handleerror function in the fs/ext4/super.c module of the Linux file system support module is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00222EPSS
SaveExploits0References12Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.16 views

Vulnerability of the efx_farch_handle_txFlushDone() function in the drivers/net/ethernet/sfc/farch.c module – A driver for supporting Ethernet network adapters in the Linux kernel, which allows a hacker to cause a service failure.

Vulnerability of the efxfarchhandletxFlushDone function in the drivers/net/ethernet/sfc/farch.c module – The Linux kernel’s Ethernet network adapter support driver is vulnerable due to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system...

5.5CVSS5.5AI score0.00222EPSS
SaveExploits0References15Affected Software2
OSV
OSV
added 2025/03/14 9:15 a.m.4 views

CVE-2025-1507

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleactions function in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to disable all...

5.3CVSS7.3AI score0.00272EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/14 12:00 a.m.25 views

WordPress plugin ShareThis Dashboard for Google Analytics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

5.3CVSS6.6AI score0.00272EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2025/03/13 7:00 a.m.8 views

drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()

...

7.8CVSS7.4AI score0.0022EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/12 8:24 p.m.8 views

Malicious code in event-handle-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07ebcac63455f7e71c3494f3d9dcff8de8fcc17290bff93372dd297555198012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/12 8:24 p.m.6 views

Malicious code in event-handle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80089375c8962bc9b14ecf6eea6f7f669f3235efadc86a11dc4a601ea24b8581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/03/12 8:24 p.m.4 views

MAL-2025-2310 Malicious code in event-handle-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07ebcac63455f7e71c3494f3d9dcff8de8fcc17290bff93372dd297555198012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/12 12:00 a.m.6 views

PT-2025-11064 · Google · Android

Name of the Vulnerable Software and Affected Versions: AdapterService.java affected versions not specified Description: A permission bypass exists due to misleading or insufficient UI in the handleBondStateChanged function of AdapterService.java. This could lead to remote information disclosure...

6.5CVSS6.3AI score0.00152EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-57924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: relax assertions on failure to encode file handles Encoding file handles is usually performed by a filesystem encodefh method that may fail for various...

5.5CVSS6.8AI score0.0026EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2025/03/03 11:15 a.m.4 views

CVE-2024-53034

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset...

7.8CVSS5.8AI score0.00115EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/27 3:15 a.m.3 views

DEBIAN-CVE-2024-58003

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ds90ub9x3: Fix extra fwnodehandleput The ub913 and ub953 drivers call fwnodehandleputpriv-sd.fwnode as part of their remove process, and if the driver is removed multiple times, eventually leads to put "overflow",...

7.8CVSS6AI score0.002EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/27 3:15 a.m.7 views

UBUNTU-CVE-2024-58016

In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handlepolicyupdate, triggering a warning in kmalloc. Check the size specified for write buffers...

5.5CVSS6.8AI score0.00203EPSS
SaveExploits0References34
SUSE CVE
SUSE CVE
added 2025/02/27 3:11 a.m.5 views

SUSE CVE-2022-49138

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to memory corruptions...

4.4CVSS6.4AI score0.00395EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
added 2025/02/27 3:09 a.m.7 views

SUSE CVE-2022-49281

In the Linux kernel, the following vulnerability has been resolved: cifs: fix handlecache and multiuser In multiuser each individual user has their own tcon structure for the share and thus their own handle for a cached directory. When we umount such a share we much make sure to release the pinne...

5.5CVSS7.8AI score0.00263EPSS
SaveExploits0References10
Rows per page
Query Builder