certiferme.com Cross Site Scripting vulnerability OBB-4035281

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-25907

creationtimestamp| type| source ---|---|--- 2025-03-11 00:54:12+00:00| seen| https://t.me/cvedetector/20006 2025-03-11 03:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114141752650435125 2025-03-11 04:41:13+00:00| seen|...

OSV-2025-190 Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=401712861 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ParallelJob::execute...

Zucchetti Ad Hoc Infinity 安全漏洞

Zucchetti Ad Hoc Infinity is an ERP software from Zucchetti. A security vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4 that originates from a local file inclusion in /servlet/Report and could lead to remote code execution...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50302)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50302 advisory. - In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report...

SAP S4 HANA 安全漏洞

SAP S4 HANA is a software for improving database efficiency from SAP, a German company. An access control error vulnerability exists in SAP S4 HANA that stems from a failure to perform required access control checks and can be exploited by an attacker to delete attachments...

LiteLLM Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible LiteLLM instance on the target application. LiteLLM is a LLM Gateway to provide model access in the OpenAI format. This detection is included in the AI and LLM category. No source data...

CVE-2025-0660 Stored XSS in Folder Function by Rogue Admin

Concrete CMS versions 9.0.0 through 9.3.9 are affected by a stored XSS in Folder Function.The "Add Folder" functionality lacks input sanitization, allowing a rogue admin to inject XSS payloads as folder names. The Concrete CMS security team gave this vulnerability a CVSS 4.0 Score of 4.8 with...

Important: Red Hat Security Advisory: ACS 4.6 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. This release of RHACS 4.6 provides these changes: - Fix rhacs-main-container: Unexpected memory consumption during token parsing in golang.org/x/oauth2 CVE-2025-22868 - ROX-27347: Fix vulnerability report job getting...

CVE-2025-26695

creationtimestamp| type| source ---|---|--- 2025-03-10 19:46:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114139855050514721 2025-03-10 21:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2jmu7xjt2m 2025-03-10 23:13:47+00:00| seen| https://t.me/cvedetector/199...

CVE-2024-54546

creationtimestamp| type| source ---|---|--- 2025-03-10 19:38:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7034 2025-03-10 21:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2jmtz7wc2n 2025-03-11 04:41:14+00:00| seen|...

CVE-2024-54467

creationtimestamp| type| source ---|---|--- 2025-03-10 19:38:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7031 2025-03-10 21:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2jmudumm2f 2025-03-11 04:41:14+00:00| seen|...

CVE-2025-25382

creationtimestamp| type| source ---|---|--- 2025-03-10 19:02:29+00:00| seen| https://t.me/cvedetector/19963 2025-03-10 19:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cvze45e26...

CLSA-2025-1741624133 kernel: Fix of 5 CVEs

HID: core: zero-initialize the report buffer CVE-2024-50302 - Revert "drm/amdgpu: add missing size check in amdgpudebugfsgprwaveread" - drm/amd/amdgpu: Fix GPR read from debugfs v2 CVE-2024-50282 - USB: serial: ioedgeport: fix use after free in debug printk CVE-2024-50267 - wifi: iwlegacy: Clear...

kernel: HID: core: zero-initialize the report buffer

A vulnerability was found in the Linux kernel's driver for Human Interface Devices. This flaw allows an attacker to use a malicious input device to read information from the report buffer. This could be used to leak kernel memory, enabling the exploitation of additional vulnerabilities...

Important: Red Hat Security Advisory: ACS 4.5 enhancement update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. This release of RHACS 4.5 provides these changes: - Fix rhacs-main-container: Unexpected memory consumption during token parsing in golang.org/x/oauth2 CVE-2025-22868 - ROX-27347: Fix vulnerability report job getting...

kernel: HID: core: zero-initialize the report buffer

A vulnerability was found in the Linux kernel's driver for Human Interface Devices. This flaw allows an attacker to use a malicious input device to read information from the report buffer. This could be used to leak kernel memory, enabling the exploitation of additional vulnerabilities...

kernel: HID: core: zero-initialize the report buffer

A vulnerability was found in the Linux kernel's driver for Human Interface Devices. This flaw allows an attacker to use a malicious input device to read information from the report buffer. This could be used to leak kernel memory, enabling the exploitation of additional vulnerabilities...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

kernel: HID: core: zero-initialize the report buffer

A vulnerability was found in the Linux kernel's driver for Human Interface Devices. This flaw allows an attacker to use a malicious input device to read information from the report buffer. This could be used to leak kernel memory, enabling the exploitation of additional vulnerabilities...