OSV-2025-92 Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393523566 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...

CVE-2024-53962

creationtimestamp| type| source ---|---|--- 2025-02-04 23:43:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113948269377814543 2025-02-05 00:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc6wjx3s2r 2025-02-05 03:16:23+00:00| seen|...

CVE-2024-48878

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report...

CVE-2024-8015

In Progress Telerik Report Server versions prior to 2024 Q3 10.2.24.924, a remote code execution attack is possible through object injection via an insecure type resolution vulnerability...

CVE-2024-35224

OpenProject is the leading open source project management software. OpenProject utilizes tablesorter inside of the Cost Report feature. This dependency, when misconfigured, can lead to Stored XSS via icon substitution in table header values. This attack requires the permissions "Edit work package...

GHSA-RX8M-JQM7-VCGP

creationtimestamp| type| source ---|---|--- 2025-02-04 18:57:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113947144108335156...

CVE-2024-48019

creationtimestamp| type| source ---|---|--- 2025-02-04 16:19:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhehjt2dre24 2025-02-04 19:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhereymg5y2j 2025-02-04 22:15:27+00:00| seen|...

CVE-2025-1011

creationtimestamp| type| source ---|---|--- 2025-02-04 14:06:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113946000562637386 2025-02-04 14:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheanjkwfe2w 2025-02-04 16:23:45+00:00| seen|...

CVE-2024-13510

creationtimestamp| type| source ---|---|--- 2025-02-04 09:27:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113944905529847273 2025-02-04 10:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt6xxmf62c 2025-02-04 12:12:58+00:00| seen|...

CVE-2025-20904

creationtimestamp| type| source ---|---|--- 2025-02-04 07:29:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113944437768898733 2025-02-04 08:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmkzraad2t 2025-02-04 10:32:26+00:00| seen|...

CVE-2025-0413

creationtimestamp| type| source ---|---|--- 2025-02-04 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-082/ 2025-02-04 23:16:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113948163353121381 2025-02-05 00:16:47+00:00| seen|...

wasmvm: Malicious smart contract can slow down block production

CWA-2025-002 Severity Medium Moderate + Likely^1 Affected versions: - wasmvm = 2.2.0, = 2.1.0, = 2.0.0, 2.0.6 - wasmvm 1.5.8 Patched versions: - wasmvm 1.5.8, 2.0.6, 2.1.5, 2.2.2 Description of the bug The vulnerability can be used to slow down block production. The attack requires a malicious...

CVE-2025-24029

creationtimestamp| type| source ---|---|--- 2025-02-03 21:31:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113942086561998142 2025-02-03 22:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhckyj5t2b2i 2025-02-03 23:40:46+00:00| seen|...

CVE-2023-52164

creationtimestamp| type| source ---|---|--- 2025-02-03 21:15:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113942024374909367 2025-02-03 21:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchm6w73j2r 2025-02-03 22:08:28+00:00| seen|...

GHSA-QWP8-X4FF-5H87

creationtimestamp| type| source ---|---|--- 2025-02-03 21:08:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113941997439072239...

CVE-2025-24959

creationtimestamp| type| source ---|---|--- 2025-02-03 21:08:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113941997439072239 2025-02-03 21:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchn6jt5r2r 2025-02-03 22:08:28+00:00| seen|...

CVE-2024-12859

creationtimestamp| type| source ---|---|--- 2025-02-03 19:44:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113941668012938469 2025-02-03 20:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecc4zhb2t 2025-02-03 20:48:37+00:00| seen|...

CVE-2024-56921

creationtimestamp| type| source ---|---|--- 2025-02-03 19:44:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113941668027673601 2025-02-03 20:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhceceluqv2w 2025-02-03 22:00:12+00:00| seen|...

CVE-2024-57237

creationtimestamp| type| source ---|---|--- 2025-02-03 19:06:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113941520017397058 2025-02-03 19:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcax2xa2y2b 2025-02-03 22:00:21+00:00| seen|...

GHSA-2CCP-VQMV-4R4X S3Proxy allows insecure path traversal in filesystem and filesystem-nio2 storage backends

Impact Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to authenticated clients. Patches Upgrade to S3Proxy 2.6.0 which includes apache/jclouds@b0819e0ef5e08c792a4d1724b938714ce9503aa3 and 86b6ee4749aa163a78e7898efc063617ed171980. Workarounds...