CVE-2024-11040

A flaw was found in vLLM. This vulnerability allows a denial of service via the POST endpoints. Enabling usebeamsearch with a high bestof value in POST /v1/completions causes the HTTP connection to time out, blocking new completion requests. Supplying invalid inputs to POST /v1/embeddings results...

CVE-2024-9880

A flaw was found in pandas. This vulnerability allows an attacker to execute arbitrary commands on the server via a crafted query in the pandas.DataFrame.query function when using the 'python' engine...

CVE-2024-12886

A flaw was found in Ollama. This vulnerability allows a denial of service DoS condition via excessive memory consumption when a malicious API server responds with a gzip bomb HTTP response. The makeRequestWithRetry and getAuthorizationToken functions use io.ReadAll to read the response body, whic...

CVE-2025-29807

creationtimestamp| type| source ---|---|--- 2025-03-21 02:48:17+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114198137851141313 2025-03-21 02:55:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114198165753912326 2025-03-21 03:14:25+00:00| seen|...

EUVD-2025-7178

Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...

CVE-2024-54564

creationtimestamp| type| source ---|---|--- 2025-03-21 00:23:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8309 2025-03-21 03:14:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkuandeajf26 2025-03-21 04:16:33+00:00| seen| https://t.me/cvedetector/20784 2025-03-21...

CVE-2025-29641

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via the 'searchinputdata' parameter...

CVE-2025-30334

creationtimestamp| type| source ---|---|--- 2025-03-20 21:16:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196834383227856 2025-03-20 22:18:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8304 2025-03-20 22:30:49+00:00| seen|...

CVE-2025-2557

creationtimestamp| type| source ---|---|--- 2025-03-20 19:08:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196328635864824 2025-03-20 21:34:59+00:00| seen| https://t.me/cvedetector/20760 2025-03-20 23:09:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lktswtmtas...

Tomorrow, and tomorrow, and tomorrow: Information security and the Baseball Hall of Fame

Welcome to this week's edition of the Threat Source newsletter. "Tomorrow, and tomorrow, and tomorrow / Creeps in this petty pace from day to day / To the last syllable of recorded time." - Shakespeare's Macbeth "But I am very poorly today and very stupid and I hate everybody and everything. One...

CVE-2024-2292

Due to a lack of access control, unauthorized users are able to view and modify information pertaining to other users...

Detecting and Mitigating Apache Tomcat CVE-2025-24813

...

CVE-2025-22228

creationtimestamp| type| source ---|---|--- 2025-03-20 06:18:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8177 2025-03-20 07:23:58+00:00| seen| https://bsky.app/profile/snicoll.be/post/3lks64ppwx22n 2025-03-20 07:30:50+00:00| published-proof-of-concept|...

CVE-2024-3032

creationtimestamp| type| source ---|---|--- 2025-03-19 21:02:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lkr3emjbhx2e...

CVE-2025-29926

creationtimestamp| type| source ---|---|--- 2025-03-19 19:06:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114190659236671973 2025-03-19 20:00:51+00:00| published-proof-of-concept| Telegram/pKc-k4S4UpucBi-A8jZui2WxqHw-KLQAnPldAvhIPnjHqVQ 2025-03-19 20:29:48+00:00| seen|...

CVE-2025-29924

creationtimestamp| type| source ---|---|--- 2025-03-19 19:06:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114190659236671973 2025-03-19 20:00:51+00:00| published-proof-of-concept| Telegram/pKc-k4S4UpucBi-A8jZui2WxqHw-KLQAnPldAvhIPnjHqVQ 2025-03-19 20:18:15+00:00|...

CVE-2025-30154

creationtimestamp| type| source ---|---|--- 2025-03-19 15:45:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114189869676629359 2025-03-19 16:30:54+00:00| seen| Telegram/1nxUJd1r2Vli3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU 2025-03-19 17:21:01+00:00| published-proof-of-concept|...

CVE-2025-27018

creationtimestamp| type| source ---|---|--- 2025-03-19 09:49:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8037 2025-03-19 10:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysbitl52j 2025-03-19 12:08:28+00:00| seen|...

GO-2025-3530 Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD in github.com/metal3-io/baremetal-operator/apis

Bare Metal Operator BMO can expose any secret from other namespaces via BMCEventSubscription CRD in github.com/metal3-io/baremetal-operator/apis...

CVE-2024-56347

creationtimestamp| type| source ---|---|--- 2025-03-18 16:53:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114184473948206209 2025-03-18 17:40:21+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lko7n34c5q2u 2025-03-18 17:49:05+00:00| seen|...