DoS in Cilium agent DNS proxy from crafted DNS responses

Impact In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an attacker can crash Cilium agents by sending a crafted DNS response to workloads from outside the cluster. For traffic that is allowed but without using DNS-based policy, the dataplane will continue to pass traffic ...

CVE-2025-0377 HashiCorp go-slug Vulnerable to Zip Slip Attack

HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry...

CVE-2025-0377 HashiCorp go-slug Vulnerable to Zip Slip Attack

HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry...

CVE-2025-0377 HashiCorp go-slug Vulnerable to Zip Slip Attack

HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry...

CVE-2025-23710

creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43umgyv2n 2025-01-16 22:05:42+00:00| seen| https://t.me/cvedetector/15626 2025-01-17 00:53:24+00:00| seen|...

CVE-2024-57889

creationtimestamp| type| source ---|---|--- 2025-01-15 13:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyod23z2c 2025-01-15 14:27:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1757 2025-01-15 15:07:02+00:00| seen|...

PT-2025-34632

Name of the Vulnerable Software and Affected Versions: PhpOffice/PhpSpreadsheet versions prior to 1.30.0 PhpOffice/PhpSpreadsheet versions prior to 2.1.12 PhpOffice/PhpSpreadsheet versions prior to 2.4.0 PhpOffice/PhpSpreadsheet versions prior to 3.10.0 PhpOffice/PhpSpreadsheet versions prior to...

CVE-2024-3605

creationtimestamp| type| source ---|---|--- 2025-01-14 12:49:54+00:00| seen| https://infosec.exchange/users/randomrobbie/statuses/113826790893332300 2025-01-20 21:02:14+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6vcjx22 2026-02-12 21:03:27+00:00| seen|...

CVE-2024-13299

creationtimestamp| type| source ---|---|--- 2025-01-09 21:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyimfca25 2025-01-09 21:38:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnazajr42g 2025-01-09 22:48:18+00:00| seen|...

CVE-2024-55556

creationtimestamp| type| source ---|---|--- 2025-01-07 16:07:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113787932627494304 2025-01-07 16:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62crdegm2i 2025-03-12 04:51:28+00:00| confirmed|...

PT-2025-1984 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves an invalid security candidate ID being issued in error. No further details are provided about the nature of the issue or its potential impact. Recommendations: At the...

PT-2025-3968

Name of the Vulnerable Software and Affected Versions No information available Description No details are provided about the issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-30631 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue allows software installed and run as a non-privileged user to trigger the GPU kernel driver to write to arbitrary read-only system files...

File Manipulation

drupal/core is vulnerable to File Manipulation. The vulnerability is due to insufficient validation and sanitization of user-provided file paths, which can lead to unauthorized file access or manipulation...

CVE-2018-9418

CVE-2018-9418 involves a possible stack buffer overflow in the Android kernel/user-space component described as dtif_rc.cc:handle_app_cur_val_response, caused by a missing bounds check. The Red Hat/NVD/CVE records align with the Android Pixel/Nexus security bulletin noting this issue as a Remote ...

CVE-2024-53860 Potential Abuse for Sending Arbitrary Emails in sp-php-email-handler

sp-php-email-handler is a PHP package for handling contact form submissions. Messages sent using this script are vulnerable to abuse, as the script allows anybody to specify arbitrary email recipients and include user-provided content in confirmation emails. This could enable malicious actors to...

CVE-2021-30299

Possible out of bound access in audio module due to lack of validation of user provided input...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel has a security vulnerability. An attacker exploiting the vulnerability can cause the kernel to crash. No details of the vulnerability are provided at this time...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with flexspi compatibility strings. No details of the vulnerability are provided at this time...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized hanging pointer in vsk-trans. No details of the vulnerability are provided at this time...