CVE-2022-49035

creationtimestamp| type| source ---|---|--- 2025-01-02 15:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerelgfpx62m 2025-01-02 15:57:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lergwwe6e52h 2025-01-02 16:46:16+00:00| seen|...

CVE-2022-43476

creationtimestamp| type| source ---|---|--- 2025-01-02 15:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerelbb2us2f 2025-01-02 15:58:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lergwwkrid2g 2025-01-02 16:46:16+00:00| seen|...

CVE-2024-37438

creationtimestamp| type| source ---|---|--- 2025-01-02 14:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerba5q55425 2025-01-02 14:42:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lercqkdyoj2k 2025-01-02 15:55:50+00:00| seen|...

CVE-2024-37241

creationtimestamp| type| source ---|---|--- 2025-01-02 14:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerba3nhnb2i 2025-01-02 14:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lercqkvgun2e 2025-01-02 15:55:49+00:00| seen|...

CVE-2024-37237

creationtimestamp| type| source ---|---|--- 2025-01-02 14:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerb7z3yuj2o 2025-01-02 14:42:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lercqkypja2q 2025-01-02 15:55:48+00:00| seen|...

PT-2026-1887

Name of the Vulnerable Software and Affected Versions TLP versions prior to 1.9.1 TLP version 1.9.0 Description TLP version 1.9.0 introduces a profiles daemon that provides a D-Bus interface. A flaw exists in this daemon that allows local attackers to bypass Polkit authentication. This bypass is...

CVE-2024-53353

creationtimestamp| type| source ---|---|--- 2024-12-28 04:59:57+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ledpthpf7k2y 2024-12-28 05:52:16+00:00| seen| https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ledsr7clzs22 2024-12-28 09:30:28+00:00| seen|...

CVE-2024-12744

creationtimestamp| type| source ---|---|--- 2024-12-24 16:24:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113708724559281732 2024-12-24 17:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x36pzu32l 2024-12-24 19:25:28+00:00| seen|...

CVE-2024-12096

creationtimestamp| type| source ---|---|--- 2024-12-24 06:01:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113706276341258936 2024-12-24 06:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7r2ere22 2024-12-24 07:42:45+00:00| seen|...

CVE-2024-11938

creationtimestamp| type| source ---|---|--- 2024-12-21 07:11:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113689564924062531 2024-12-21 07:14:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113689577483393499 2024-12-21 07:15:33+00:00| seen|...

CVE-2024-56329

creationtimestamp| type| source ---|---|--- 2024-12-20 20:01:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113686930684976106 2024-12-20 20:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr7cgknk72a 2024-12-20 21:46:09+00:00| seen|...

CVE-2024-21549

creationtimestamp| type| source ---|---|--- 2024-12-20 05:08:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113683419074715879 2024-12-20 05:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpmy4xntb22 2024-12-20 06:42:37+00:00| seen|...

CVE-2024-12727

creationtimestamp| type| source ---|---|--- 2024-12-19 20:32:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681389646115127 2024-12-19 21:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos5xymum2s 2024-12-19 23:11:05+00:00| seen|...

CVE-2024-25131

creationtimestamp| type| source ---|---|--- 2024-12-19 14:19:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113679923344883938 2024-12-19 15:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo62oxcw22r 2024-12-19 17:19:37+00:00| seen|...

CVE-2024-52590

Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...

CVE-2024-52590

Misskey vulnerability CVE-2024-52590 is caused by missing validation in ApRequestService.signedGet, enabling an attacker to create spoofed profiles that appear to originate from another instance. Affected Misskey versions prior to 2024.11.0-alpha.3 allow impersonation of existing users on the tar...

CVE-2024-52590 Missing validation allows spoofed profiles in Misskey

Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...

CVE-2024-52590 Missing validation allows spoofed profiles in Misskey

Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...

CVE-2024-52590 Missing validation allows spoofed profiles in Misskey

Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...

CVE-2024-52591 Missing validation allows spoofed profiles and notes in Misskey

Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different instance...