CVE-2024-54423

Cross-Site Request Forgery CSRF vulnerability in Jesse Overright Social Media Sharing social-media-sharing allows Stored XSS.This issue affects Social Media Sharing: from n/a through = 1.1...

CVE-2023-39943

creationtimestamp| type| source ---|---|--- 2025-02-04 22:27:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113947969898021530 2025-02-04 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf6rw6zjj2e 2025-02-05 02:23:53+00:00| seen|...

CVE-2024-57520

creationtimestamp| type| source ---|---|--- 2025-02-04 05:25:45+00:00| seen| https://gist.github.com/hyp164D1/ae76ab25acfbe263b2ed7b24b6e5c621 2025-02-05 22:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlyhocd42e 2025-02-06 01:51:04+00:00| seen|...

CVE-2025-0088

creationtimestamp| type| source ---|---|--- 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c 2025-08-18 18:30:59+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...

AZL-56381 CVE-2025-21673 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

CVE-2025-0809

creationtimestamp| type| source ---|---|--- 2025-01-31 05:38:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113921353212036749 2025-01-31 06:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdy3lfcp2f 2025-01-31 07:24:00+00:00| seen|...

CVE-2022-1736

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...

DEBIAN-CVE-2022-1736

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...

CVE-2022-1736

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...

CVE-2022-1736

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...

CVE-2022-1736

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...

The vulnerability of the fs/cifs/smb2ops.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/cifs/smb2ops.c component in the Linux operating system is related to the return of incorrect status codes. Exploiting this vulnerability can allow an attacker to cause a service failure...

Three privacy rules for 2025 (Lock and Code S06E02)

This week on the Lock and Code podcast… It’s Data Privacy Week right now, and that means, for the most part, that you’re going to see a lot of well-intentioned but clumsy information online about how to protect your data privacy. You’ll see articles about iPhone settings. You’ll hear acronyms for...

Three privacy rules for 2025 (Lock and Code S06E02)

This week on the Lock and Code podcast… It’s Data Privacy Week right now, and that means, for the most part, that you’re going to see a lot of well-intentioned but clumsy information online about how to protect your data privacy. You’ll see articles about iPhone settings. You’ll hear acronyms for...

Texas scrutinizes four more car manufacturers on privacy issues (updated)

The Texas Attorney General’s Office has started an investigation into how Ford, Hyundai, Toyota, and Fiat Chrysler collect, share, and sell consumer data, expanding an earlier probe launched last year into how modern automakers are potentially using customer driving data. We've addressed cars and...

CVE-2025-24353 Directus privilege escalation vulnerability using Share feature

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.2.0, when sharing an item, a typical user can specify an arbitrary role. It allows the user to use a higher-privileged role to see fields that otherwise the user should not be able to see. Instanc...

PT-2025-5336 · Directus · Directus

Name of the Vulnerable Software and Affected Versions: Directus versions prior to 11.2.0 Description: The issue allows a typical user to specify an arbitrary role when sharing an item, enabling them to use a higher-privileged role to view fields they should not be able to see. This affects...

Directus 安全漏洞

Directus is a real-time Api and application dashboard open-sourced by Directus. It is used to manage Sql database content. A security vulnerability exists in Directus versions prior to 11.2.0 that stems from the ability of a user to specify arbitrary roles when sharing a project, resulting in a...

CVE-2024-57942

creationtimestamp| type| source ---|---|--- 2025-01-21 12:28:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113866342006435319 2025-01-21 13:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqjaufk2e 2025-01-21 13:39:32+00:00| seen|...

CVE-2024-22348

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...