18 matches found
CVE-2022-50419 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times deviceadd shall not be called multiple times as stated in its documentation: 'Do not call this routine or deviceregister more than once for any device structure...
CVE-2025-9709
creationtimestamp| type| source ---|---|--- 2025-09-05 18:11:13+00:00| seen| https://t.me/canyoupwnme/6895 2025-09-05 19:02:30+00:00| seen| https://t.me/canyoupwnme/6901 2025-09-05 20:10:42+00:00| seen| https://t.me/canyoupwnme/6910...
CVE-2024-20528
creationtimestamp| type| source ---|---|--- 2024-11-06 19:10:51+00:00| seen| https://t.me/cvedetector/10028 2024-11-07 14:20:08+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113442108664352339 2024-11-07 14:20:08+00:00| seen|...
CVE-2024-40899 cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemandgetfd We got the following issue in a fuzz test of randomly issuing the restore command: ================================================================== BUG: KASAN:...
CVE-2019-0344
creationtimestamp| type| source ---|---|--- 2024-01-06 16:24:23+00:00| seen| https://t.me/arpsyndicate/2557 2024-09-30 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-10-24 20:07:01+00:00| seen| MISP/15375888-1ca5-4ba9-b060-2f6c78753556 2025-02-23 02:10:59+00:00| seen|...
addRewardToken() does note remove old entries before adding new ones
Lines of code 455, 280, 378, 411 Vulnerability details Each time addRewardToken is called, new entries are added to the array, but doing so does not remove any old entries. By calling the function multiple times, an attacker can can increase their voting power indefinitely, without having to...
addRewardToken() does note remove old entries before adding new ones
Lines of code 455, 280, 378, 411 Vulnerability details Each time addRewardToken is called, new entries are added to the array, but doing so does not remove any old entries. By calling the function multiple times, an attacker can can increase their voting power indefinitely, without having to...
YOP Poll < 6.5.29 - Reusable Captcha via validateImage
Description The YOP Poll plugin for WordPress is vulnerable to captcha bypass due to a reusable captcha bypass in the validateImage function in all versions up to, and including, 6.5.28. This makes it possible for unauthenticated attackers to vote multiple times using the same captcha image...
CVE-2015-4068
creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-24 04:36:44+00:00| seen| https://t.me/arpsyndicate/2149 2024-12-24 20:28:55+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971410 2025-02-06 02:42:30+00:00|...
Can reclaim the same incentive multiple times
Handle pauliax Vulnerability details Impact function reclaimIncentive can be invoked more than once for the same incentiveId. If there were multiple incentives for the same token it would allow to drain these tokens by repeatedly calling reclaimIncentive. Recommended Mitigation Steps Simple...
CVE-2019-15954
creationtimestamp| type| source ---|---|--- 2019-10-21 20:43:35+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/totaljscmswidgetexec.rb 2019-10-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47531 2025-02-06 03:13:44+00:00|...
CVE-2015-1172
creationtimestamp| type| source ---|---|--- 2015-02-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41698 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpholdingpatternfileupload.rb 2025-02-06...
Immunity Canvas: OSX_STICKYKEYSFREE
Name| osxstickykeysfree ---|--- CVE| CVE-2014-4405 Exploit Pack| CANVAS Description| IOHIKeyboardMapper::stickyKeysfree local privilege escalation Notes| CVE Name: CVE-2014-4405 VENDOR: Apple Notes: Tested on: - 10.9 - 10.9.1 - 10.9.2 - 10.9.3 - 10.9.4 - 10.9.5 Repeatability: Multiple Times...
CVE-2014-0980
creationtimestamp| type| source ---|---|--- 2014-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31461 2014-02-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31524 2015-02-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36104 2015-03-19...
CVE-2005-0768
creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16817 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/telnet/goodtechtelnet.rb 2025-02-06 03:13:38+00:00| seen...
Design/Logic Flaw
Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service daemon hang via a series of long, malformed connect packets, related to these packets being "parsed multiple times."...
CVE-2008-2748
Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service daemon hang via a series of long, malformed connect packets, related to these packets being "parsed multiple times."...
CVE-2005-4051
e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php...