Description of the security update for SharePoint Enterprise Server 2016: January 14, 2025 (KB5002672)

None None...

TYPO3 Information Disclosure via Exception Handling/Logger

Problem It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Solution Update to TYPO3 versions 13.4.3 LTS that fixes the problem described. Credits Thanks to TYPO3 core & security team member...

CVE-2024-27397

creationtimestamp| type| source ---|---|--- 2025-01-14 04:20:53+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lfofldj2b22d 2025-01-14 06:20:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfomaubh2k2x 2025-01-14 08:51:49+00:00| seen|...

PT-2025-3142 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 13.4.3 ELTS Description: A problem has been discovered where the install tool password is logged as plaintext if the password hashing mechanism used for the password was incorrect. There are no known workarounds for th...

CVE-2024-55891: Insertion of Sensitive Information into Log File

TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the...

TYPO3 13.4.3 (TYPO3-CORE-SA-2025-001)

The version of TYPO3 installed on the remote host is prior to 13.4.3. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2025-001 advisory. - It has been discovered that the Install Tool password has been logged as plaintext in case the password hashing mechanism use...

SUSE CVE-2024-47809

In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereference when this function is called from requestlock as lkb-lkbresource is not assigned yet, only after validatelockargs by calling...

DEBIAN-CVE-2024-47809

In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereference when this function is called from requestlock as lkb-lkbresource is not assigned yet, only after validatelockargs by calling...

AZL-56166 CVE-2024-47809 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereference when this function is called from requestlock as lkb-lkbresource is not assigned yet, only after validatelockargs by calling...

CVE-2024-47809 dlm: fix possible lkb_resource null dereference

In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereference when this function is called from requestlock as lkb-lkbresource is not assigned yet, only after validatelockargs by calling...

CVE-2024-42172

creationtimestamp| type| source ---|---|--- 2025-01-11 06:50:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113808390690684579 2025-01-11 07:04:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1273 2025-01-11 07:15:30+00:00| seen|...

CVE-2024-9188

creationtimestamp| type| source ---|---|--- 2025-01-10 22:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7svg2do2e 2025-01-10 22:43:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbdde2db25 2025-01-10 22:43:34+00:00| seen|...

Security Bulletin: Vulnerability in Elasticsearch (CVE-2023-49921) affects IBM Watson CP4D Data Stores

Summary A potential vulnerability CVE-2023-49921 has been identified related to Elasticsearch that may affect IBM Watson CP4D Data Stores. This vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-49921 DESCRIPTION: An issue was...

CVE-2024-11939

creationtimestamp| type| source ---|---|--- 2025-01-08 08:19:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113791755008587797 2025-01-08 09:12:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/682 2025-01-08 09:15:31+00:00| seen|...

CVE-2025-0194: Insertion of Sensitive Information into Externally-Accessible File or Directory

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner...

PT-2025-3767 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.4 through 17.5.5 GitLab CE/EE versions 17.6 through 17.6.3 GitLab CE/EE versions 17.7 through 17.7.1 Description: An issue was discovered in GitLab CE/EE where access tokens may have been logged when API requests were...

GitLab 17.4 < 17.5.5 / 17.6 < 17.6.3 / 17.7 < 17.7.1 (CVE-2025-0194)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions,...

OPENSUSE-SU-2025:0003-1 Security update for etcd

This update for etcd fixes the following issues: Update to version 3.5.12: Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795 test: fix TestHashKVWhenCompacting: ensure all goroutine finished print error log when creating peer listener failed mvcc: Printing etcd backend database related...

CVE-2025-21618

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...

Malicious code in walletcore-gen (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...