1376 matches found
CVE-2024-57822
creationtimestamp| type| source ---|---|--- 2025-01-10 13:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lffblzztly2m 2025-01-10 13:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lffcvjmkbx2w 2025-01-10 14:05:26+00:00|...
MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan
Japan's National Police Agency NPA and National Center of Incident Readiness and Strategy for Cybersecurity NCSC accused a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019. The...
PT-2025-40094
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The do validate mem function lacks error handling for the add interval call. A failure in kmalloc within add interval could lead to a null pointer being added to a linked list, resulting...
DEBIAN-CVE-2024-56703
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6selectpath under high next hop churn Soft lockups have been observed on a cluster of Linux-based edge routers located in a highly dynamic environment. Using the bird service, these routers continuous...
CVE-2024-11938
creationtimestamp| type| source ---|---|--- 2024-12-21 07:11:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113689564924062531 2024-12-21 07:14:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113689577483393499 2024-12-21 07:15:33+00:00| seen|...
CVE-2024-21549
creationtimestamp| type| source ---|---|--- 2024-12-20 05:08:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113683419074715879 2024-12-20 05:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpmy4xntb22 2024-12-20 06:42:37+00:00| seen|...
Malicious code in oj-odcs-linked-text (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d17c600cc0be18696e4ab114d64ad488bd7f257bd8bfe509b372437fb919b0ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Misskey 输入验证错误漏洞
Misskey is a perpetually free open source federated social media platform from Misskey Open Source. An input validation error vulnerability exists in Misskey versions 12.29.0 through prior to 2024.11.0-alpha.3, which stems from a lack of validation and allows an attacker to take control of a targ...
Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms
Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology OT environments in Israel and the United States. The malware has been codenamed IOCONTROL by OT cybersecurity company Claroty, highlighting its ability to attack IoT and...
CVE-2024-43600
creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 17:53:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113629799595211149 2024-12-11 13:04:52+00:00| seen|...
Autodesk Revit 缓冲区错误漏洞
Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that stems from a potential heap-based overflow if a maliciously crafted SKP file is linked or imported into Autodesk Revit. An attacker...
Malicious code in yelp-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f281d7fb655f7083b4004d10fb257b419c7aeaf1ea0b79636721d4724aec51d9 The OpenSSF Package Analysis project identified 'yelp-lib' @ 17.1.2 npm as malicious. It is considered malicious because: - The package...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the synclinkedregs function in the bpf subsystem to preserve the subregdef flag, which could le...
CVE-2024-53375
creationtimestamp| type| source ---|---|--- 2024-12-02 22:04:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113585493417346973 2024-12-02 23:46:40+00:00| seen| https://t.me/cvedetector/11831 2024-12-19 12:33:28+00:00| published-proof-of-concept| https://t.me/proxybar/2436 2024-12-20...
CISA Urges Agencies to Patch Critical "Array Networks" Flaw Amid Active Attacks
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a now-patched critical security flaw impacting Array Networks AG and vxAG secure access gateways to its Known Exploited Vulnerabilities KEV catalog following reports of active exploitation in the wild. The vulnerabilit...
China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike Espionage Campaign
A China-linked nation-state group called TAG-112 compromised Tibetan media and university websites in a new cyber espionage campaign designed to facilitate the delivery of the Cobalt Strike post-exploitation toolkit for follow-on information collection. "The attackers embedded malicious JavaScrip...
Moodle IDOR when deleting OAuth2 linked accounts
A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts...
UBUNTU-CVE-2024-45690
A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts...
CVE-2024-45690
CVE-2024-45690 affects Moodle and concerns an IDOR when deleting OAuth2-linked accounts. The connected sources describe a flaw where additional checks are needed to ensure users can only delete their own OAuth2-linked accounts, indicating insufficient authorization checks in the relevant Moodle f...