CVE-2024-57941

creationtimestamp| type| source ---|---|--- 2025-01-21 12:28:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113866341992199507 2025-01-21 13:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqgxik52b 2025-01-21 13:39:29+00:00| seen|...

CVE-2024-57945

CVE-2024-57945 (Linux kernel, riscv): In the sparse vmemmap model, an out-of-bounds virtual address could be computed for struct page if the first page in the phys_ram_base section does not have the expected PFN, causing VA to fall below VMEMMAP_START (and PCI_IO_END) during page initialization. ...

CVE-2024-12005

creationtimestamp| type| source ---|---|--- 2025-01-21 09:27:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113865629807346067 2025-01-21 10:01:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2383 2025-01-21 10:15:28+00:00| seen|...

CVE-2024-57541

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field ipv6protectstatus is copied to the stack without length verification...

CVE-2024-24443

CVE-2024-24443 concerns OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0, where an uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine can allow an attacker to cause a Denial of Service via a crafted PDU Session Resource Setup Response. This vulne...

CVE-2024-24418

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodepdnaddress function at /nas/ies/PdnAddress.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2025-23214 Cosmos userbase checking vulnerability

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7...

CVE-2025-23214

Summary: Cosmos-Server before version 0.17.7 exposes a user-enumeration vulnerability during login, allowing an attacker to determine if a username exists in the database due to error code behavior. This has been addressed in version 0.17.7. Affected software: Cosmos-Server (pre-0.17.7). Root cau...

CVE-2024-22348

creationtimestamp| type| source ---|---|--- 2025-01-20 18:01:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2372 2025-01-20 18:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzhrzzg2e 2025-01-20 19:14:33+00:00| seen|...

CVE-2025-24010

CVE-2025-24010 affects Vite, a JavaScript frontend tooling framework. The flaw arises from permissive CORS settings and lack of Origin header validation for WebSocket connections, enabling unauthenticated cross-origin access to the development server. The vulnerability is mitigated by upgrades to...

GHSA-H2MG-4C7Q-W69V

creationtimestamp| type| source ---|---|--- 2025-01-20 15:49:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113861471504281674 2025-01-20 16:01:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2364...

CVE-2025-24337

creationtimestamp| type| source ---|---|--- 2025-01-20 13:54:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113861018807403929 2025-01-20 13:59:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2358 2025-01-20 14:15:57+00:00| seen|...

CVE-2025-0580

creationtimestamp| type| source ---|---|--- 2025-01-20 03:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eqcthqp2j 2025-01-20 03:54:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lg5gwcafqs2w 2025-01-20 05:01:09+00:00| seen|...

CVE-2025-0581

creationtimestamp| type| source ---|---|--- 2025-01-20 03:06:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113858471478896382 2025-01-20 03:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eqfg7572t 2025-01-20 03:54:48+00:00| seen|...

MAL-2025-136 Malicious code in @moneyguide-devkit/style-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d41e363cb9b67e73c6cfe2f5b71641d9289a57d80051c4e3e67b22db36574d8 The OpenSSF Package Analysis project identified '@moneyguide-devkit/style-provider' @ 1.0.1 npm as malicious. It is considered malicious because...

CVE-2024-57904

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call inputfreedevice on allocated iiodev Current implementation of at91tsregister calls inputfreedeivce on st-tsinput, however, the err label can be reached before the allocated iiodev is stored to st-tsinput. Thu...

CVE-2024-57923

In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix availin bytes for s390 zlib HW compression path Since the input data length passed to zlibcompressfolios can be arbitrary, always setting strm.availin to a multiple of PAGESIZE may cause read-in bytes to exceed t...

CVE-2024-57911

creationtimestamp| type| source ---|---|--- 2025-01-19 11:58:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2341 2025-01-19 12:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shmqcky2b 2025-01-19 12:54:56+00:00| seen|...

CVE-2024-57917

creationtimestamp| type| source ---|---|--- 2025-01-19 11:58:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2337 2025-01-19 12:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3si2kl2t2t 2026-07-28 16:16:12+00:00| seen|...

CVE-2024-57905

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix information leak in triggered buffer The 'scan' local struct is used to push data to user space from a triggered buffer, but it has a hole between the sample unsigned int and the timestamp. This hole is...