6659 matches found
CVE-2025-21282
creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:19:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuhwxz6y2t 2025-01-14 18:48:47+00:00| seen|...
CVE-2024-48890
creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwyuidj2r 2025-01-14 15:39:39+00:00| seen| https://t.me/cvedetector/15255 2025-01-14 16:28:27+00:00| seen|...
CISA Releases the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet
Today, CISA released the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet to foster operational collaboration among government, industry, and international partners and strengthen artificial intelligence AI cybersecurity. The playbook provides voluntary information-sharing processes...
CVE-2025-0143
creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5ii6gue24 2025-01-30 19:43:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113919014869578265 2025-01-30 20:16:12+00:00| seen|...
Discourse AI 跨站脚本漏洞
Discourse AI is an open source AI plugin for Discourse. Discourse AI suffers from a cross-site scripting vulnerability that stems from the fact that when sharing a Discourse AI Bot conversation into a post, if there are HTML entities in the conversation, these entities may be leaked to the...
PT-2025-3019 · Discourse · Discourse Ai
Name of the Vulnerable Software and Affected Versions: Discourse AI affected versions not specified Description: The issue concerns the Discourse AI plugin, which provides AI features. When sharing conversations from the Discourse AI Bot into posts, HTML entities from the conversation could leak...
CVE-2024-52935 GPU DDK - psContext->eDM gives OOB write
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...
MGASA-2025-0004 Updated opencontainers-runc packages fix security vulnerability
runc 1.1.13 and earlier as well as 1.2.0-rc2 and earlier can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with os.MkdirAll. While this can be used to create empty files, existing...
CVE-2024-13311
creationtimestamp| type| source ---|---|--- 2025-01-09 20:49:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113800364263646320 2025-01-09 21:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzcqtmp2m 2025-01-09 21:17:25+00:00| seen|...
CVE-2025-21599
creationtimestamp| type| source ---|---|--- 2025-01-09 16:48:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113799417683833601 2025-01-09 17:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd6kb3fkl25 2025-01-09 17:21:06+00:00| seen|...
CVE-2025-22137
Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated if anonymous shares are allowed user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issu...
CVE-2025-22137 Arbitrary File Overwrite via HTTP POST in Pingvin Share
Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated if anonymous shares are allowed user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issu...
Pingvin Share 代码问题漏洞
Pingvin Share is a self-hosted file sharing platform by Elias Schneider Personal Developer. A code issue vulnerability exists in Pingvin Share versions 0.6.0 through 1.3.0. An attacker can exploit the vulnerability to overwrite arbitrary files on the server via an HTTP POST request...
CVE-2024-52831
creationtimestamp| type| source ---|---|--- 2025-01-07 18:39:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/521 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:33+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...
CVE-2024-56283
creationtimestamp| type| source ---|---|--- 2025-01-07 11:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jjx2h6a2l 2025-01-07 11:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jjx2h6a2l 2025-01-07 11:39:50+00:00|...
USN-7186-1: Linux kernel (Intel IoTG) vulnerabilities
Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...
Apple to Pay Siri Users $20 Per Device in Settlement Over Accidental Siri Privacy Violations
Apple has agreed to pay $95 million to settle a proposed class action lawsuit that accused the iPhone maker of invading users' privacy using its voice-activated Siri assistant. The development was first reported by Reuters. The settlement applies to U.S.-based individuals current or former owners...
CVE-2024-38754
creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2r4sk3j2l 2025-01-02 18:38:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113760213907315712...
Information Exposure
Overview collaborative-article-sharing is a Command-line interface for interacting with the CAS API Affected versions of this package are vulnerable to Information Exposure because the Flask application runs in debug mode in a production environment. Remediation Upgrade...