org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed CRLF sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-bas...

GHSA-G72G-R7M4-9X4G NocoDB: OAuth Tokens Persist Through Security Events

Summary OAuth access and refresh tokens were not revoked when the user changed, reset, or recovered their password, leaving an attacker-issued OAuth grant valid after the user believed they had locked the attacker out. Details revokeAllOAuthTokensByUser in the users service was an empty stub bein...

CVE-2026-26366

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116077365893464051 2026-02-16 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mewqmppu3d2s 2026-02-16 22:57:18+00:00| seen|...

CVE-1999-0575

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking...

UBUNTU-CVE-2025-40238

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device When we do mlx5edetachnetdev we eventually disable blocking events notifier, among those events are IPsec MPV events from IB to core. So before disabling those blocking events, make sur...

EventHunter: Dynamic Clustering and Ranking of Security Events from Hacker Forum Discussions

Hacker forums provide critical early warning signals for emerging cybersecurity threats, but extracting actionable intelligence from their unstructured and noisy content remains a significant challenge. This paper presents an unsupervised framework that automatically detects, clusters, and...

CVE-2025-2171

creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19213 2025-06-23 15:31:00+00:00| published-proof-of-concept| Telegram/S7RPzkaVu9rMwdZrCAlLyJw5bBMvrbhCFuoMTi2UNDrM6ko 2025-06-24 07:20:07+00:00| seen|...

CVE-2025-5262

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17631 2025-05-27 14:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq5tzngqwq2s 2025-05-28 16:03:10+00:00| seen|...

A Collaborative Intrusion Detection System Using Snort IDS Nodes

Intrusion Detection Systems IDSs are integral to safeguarding networks by detecting and responding to threats from malicious traffic or compromised devices. However, standalone IDS deployments often fall short when addressing the increasing complexity and scale of modern cyberattacks. This paper...

CVE-2025-36625

creationtimestamp| type| source ---|---|--- 2025-04-18 19:56:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114360724984751686 2025-04-18 19:59:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12534 2025-04-18 20:33:46+00:00| seen|...

CVE-2025-3106

creationtimestamp| type| source ---|---|--- 2025-04-18 09:58:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12412 2025-04-18 11:16:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3ilsuwtjj2 2025-04-18 16:34:34+00:00| seen|...

CVE-2025-32445

creationtimestamp| type| source ---|---|--- 2025-04-13 19:24:37+00:00| published-proof-of-concept| https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq 2025-04-15 20:06:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114343777087123748 2025-04-15...

CVE-2025-2619

creationtimestamp| type| source ---|---|--- 2025-03-22 14:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114206633004296817 2025-03-22 15:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lky2s4glxd2n 2025-03-22 16:00:37+00:00| seen|...

RHSA-2023:7857

creationtimestamp| type| source ---|---|--- 2025-03-15 03:48:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7651 2025-04-03 03:33:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10160...

CVE-2025-29891

creationtimestamp| type| source ---|---|--- 2025-03-12 15:58:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114150283427551221 2025-03-12 16:03:09+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/114150301427230872 2025-03-12 16:07:40+00:00| seen|...

CVE-2025-1539

creationtimestamp| type| source ---|---|--- 2025-02-21 15:23:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4903 2025-02-21 16:31:34+00:00| published-proof-of-concept| Telegram/tDCBdMcOgnZL82yA9NlC0UZrhiY4fZOvmxRMeD3Avyss0s 2025-02-21 17:48:35+00:00| seen|...

CVE-2008-1104

creationtimestamp| type| source ---|---|--- 2025-02-14 10:00:30+00:00| seen| Telegram/9hWNtUgCkSlmuFM74JGegYdh6v77GMOUobVcXNNji5i72ed- 2025-03-08 04:34:56+00:00| seen| Telegram/pI8S6ayohxQ4zR9VKc1xFdhDE88P2VM1CRs616vVbvFEo0k7...

CVE-2024-13227

creationtimestamp| type| source ---|---|--- 2025-02-13 04:32:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113994705614223180 2025-02-13 04:37:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113994723785203829 2025-02-13 05:15:44+00:00| seen|...

GHSA-38W6-VX8G-67PP

creationtimestamp| type| source ---|---|--- 2025-02-11 15:40:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113986005583376363 2025-02-28 05:39:56+00:00| seen| https://bsky.app/profile/bsky.amase.xyz/post/3lj7oxwt34sq2...

CVE-2021-458439

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-10-23 21:13:00+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...