9518 matches found
CVE-2025-21645
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be disabled only in cases where i8042 had actually enabled it, otherwise "wakedepth" for this IRQ will try to drop below zero a...
CVE-2025-21640
In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...
CVE-2025-21650
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed hclgefetchpfreg accesses bar space out of bounds issue The TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs 1024-1279 are in different BAR space addresses. However, hclgefetchpfreg does not...
CVE-2025-21647
In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out ...
CVE-2025-21649
creationtimestamp| type| source ---|---|--- 2025-01-19 10:58:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2318 2025-01-19 11:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3p4pi2jp2h 2025-01-19 11:27:09+00:00| seen|...
CVE-2025-21651
creationtimestamp| type| source ---|---|--- 2025-01-19 10:58:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2316 2025-01-19 11:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3p4udn322t 2025-01-19 11:42:09+00:00| seen|...
CVE-2025-21640
creationtimestamp| type| source ---|---|--- 2025-01-19 10:57:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113854659059377333 2025-01-19 10:58:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2325 2025-01-19 11:15:44+00:00| seen|...
CVE-2025-0565
creationtimestamp| type| source ---|---|--- 2025-01-19 06:11:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113853534516395037 2025-01-19 06:15:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg36cr24es2f 2025-01-19 06:34:32+00:00| seen|...
CVE-2025-0411
creationtimestamp| type| source ---|---|--- 2025-01-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-045/ 2025-01-20 14:30:07+00:00| seen| https://bsky.app/profile/tmjintel.bsky.social/post/3lg6kggbrfp27 2025-01-21 16:22:29+00:00| seen|...
CVE-2025-22620
creationtimestamp| type| source ---|---|--- 2025-01-18 18:08:51+00:00| published-proof-of-concept| https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-fqmf-w4xh-33rh 2025-01-19 05:36:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/10816 2025-01-19 10:00:06+00:00|...
CVE-2024-45662
IBM Safer Payments is affected by CVE-2024-45662 due to improper allocation of resources that can enable a remote attacker to cause a Denial of Service. Affected versions include 6.4.0.00–6.4.2.07, 6.5.0.00–6.5.0.05, and 6.6.0.00–6.6.0.03. IBM’s bulletin lists remediations: update to 6.4.2.08, 6....
US Names One of the Hackers Allegedly Behind Massive Salt Typhoon Breaches
Plus: New details emerge about China’s cyber espionage against the US, the FBI remotely uninstalls malware on 4,200 US devices, and victims of the PowerSchool edtech breach reveal what hackers stole...
CVE-2024-13184
creationtimestamp| type| source ---|---|--- 2025-01-18 08:30:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113848420088684532 2025-01-18 08:58:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2292 2025-01-18 09:15:25+00:00| seen|...
CVE-2024-12385
creationtimestamp| type| source ---|---|--- 2025-01-18 07:08:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113848098341233000 2025-01-18 07:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyr7bb5ib2t 2025-01-18 07:39:16+00:00| seen|...
CVE-2025-0308
creationtimestamp| type| source ---|---|--- 2025-01-18 05:39:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113847749169131968 2025-01-18 05:57:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2272 2025-01-18 06:15:50+00:00| seen|...
CVE-2024-12071 Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletenetworkpost function in all versions up to, and including, 1.4.4. This makes it possible for...
CVE-2024-12071 Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletenetworkpost function in all versions up to, and including, 1.4.4. This makes it possible for...
openSUSE: Security Advisory for the Linux Kernel (Live Patch 14 for SLE 15 SP5) (SUSE-SU-2025:0164-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-9405
In BnDmAgent::onTransact of dmagent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
