GHSA-36GQ-35J3-P9R9

creationtimestamp| type| source ---|---|--- 2025-01-23 15:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113878382100891566 2025-01-23 15:34:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113878400720241278 2025-04-26 00:07:36+00:00| published-proof-of-concept|...

USN-7226-1: Cacti vulnerability

It was discovered that Cacti did not properly sanitize the 'pollerid' parameter in the "remoteagent.php" file. A remote attacker could possibly use this issue to achieve remote code execution...

CVE-2025-0432

creationtimestamp| type| source ---|---|--- 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-06 2025-01-28 16:01:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113906816185786379 2025-01-28 16:16:26+00:00| seen|...

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Monitoring.

Summary ulnerabilities in IBM® SDK Java™ Technology Edition that is shipped as part of multiple IBM Tivoli Monitoring ITM components. CVEs: CVE-2024-21235, CVE-2024-21217, CVE-2024-21210, CVE-2024-21208 and CVE-2024-10917 Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Ja...

CVE-2025-21524

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics SEC. Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD...

CVE-2025-21524

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics SEC. Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD...

Imperva Protects Against the Exploited CVEs in the Cleo Data Theft Attacks

The Clop ransomware group has once again demonstrated its ability to exploit vulnerabilities to compromise sensitive systems. As Cleo—a managed file transfer provider for businesses—grapples with the aftermath of Clop’s targeted attack on their systems, the spotlight turns to CVE-2024-50623 and...

CVE-2024-45687

creationtimestamp| type| source ---|---|--- 2025-01-21 16:42:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113867340763127015 2025-01-21 17:00:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2427 2025-01-21 17:15:59+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release

A new version of Red Hat OpenShift distributed tracing platform Jaeger has been released Red Hat OpenShift distributed tracing platform based on Jaeger. Jaeger is a project inspired by Dapper and OpenZipkin. It is a distributed tracing system released as open source by Uber Technologies. It is us...

CVE-2025-21656

In the Linux kernel, the following vulnerability has been resolved: hwmon: drivetemp Fix driver producing garbage data when SCSI errors occur scsiexecutecmd function can return both negative linux codes and positive scsicmnd result field error codes. Currently the driver just passes error codes o...

You Can’t Improve What You Can’t See: API Monitoring Is Crucial

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the drivetemp driver in the hwmon module returning the wrong error code on a SCSI error. This could cause...

CVE-2025-23214 Cosmos userbase checking vulnerability

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7...

CVE-2025-23214 Cosmos userbase checking vulnerability

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7...

CVE-2024-22347

creationtimestamp| type| source ---|---|--- 2025-01-20 18:01:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2371 2025-01-20 18:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzffje22p 2025-01-20 19:14:34+00:00| seen|...

CVE-2024-56144

CVE-2024-56144 / Librenms: A stored XSS in the display parameter of the /device/$DEVICE_ID/edit endpoint affects Librenms up to version 24.11.0. The underlying issue is insufficient input sanitization that allows injected scripts to execute when users view or interact with the affected page. The ...

CVE-2024-56144 Stored XSS-LibreNMS-Display Name 2 in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters Replace $DEVICEID with your specific $DEVICEID value:/device/$DEVICEID/edit - param: display. Librenms versions up to 24.11.0 allow remote attackers to inject...

CVE-2024-56144 Stored XSS-LibreNMS-Display Name 2 in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters Replace $DEVICEID with your specific $DEVICEID value:/device/$DEVICEID/edit - param: display. Librenms versions up to 24.11.0 allow remote attackers to inject...

CVE-2025-23198

Librenms (LibreNMS) is affected by a stored XSS in the /device/$DEVICE_ID/edit endpoint where the display parameter is not properly sanitized. Affected: Librenms versions up to 24.10.1. Impact: remote attackers can inject scripts that execute when a user views/interacts with the affected page, po...

CVE-2025-23198 Stored-XSS-LibreNMS-Display-Name in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters Replace $DEVICEID with your specific $DEVICEID value:/device/$DEVICEID/edit - param: display. Librenms versions up to 24.10.1 allow remote attackers to inject...