CVE-2022-49546

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: fix memory leak of elf header buffer This is reported by kmemleak detector: unreferenced object 0xffffc900002a9000 size 4096: comm "kexec", pid 14950, jiffies 4295110793 age 373.951s hex dump first 32 bytes: 7f 45 4c 4...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from not maintaining the MSRRI setting when calling RTAS...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the improper application of the TSX quirk, which could result in an unchecked MSR access error...

CVE-2025-1067

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the fil...

openSUSE Security Advisory (SUSE-SU-2024:0893-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 9 : mysql (ALSA-2025:1671)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:1671 advisory. openssl: SSLselectnextproto buffer overread CVE-2024-5535 krb5: GSS message token handling CVE-2024-37371 curl: libcurl: ASN.1 date parser overread...

DocsGPT Allows Remote Code Execution

A vulnerability, that could result in Remote Code Execution RCE, has been found in DocsGPT. Due to improper parsing of JSON data using eval an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint. This issue affects DocsGPT: from 0.8.1 through 0.12.0...

CVE-2025-25946

creationtimestamp| type| source ---|---|--- 2025-02-20 01:27:51+00:00| seen| https://bsky.app/profile/will.willofmiletus.com/post/3lil5654vzc2d 2025-02-20 02:16:41+00:00| seen| https://t.me/cvedetector/18495...

CVE-2024-24888

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:44+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likods2wbx25...

CVE-2025-26580

Cross-Site Request Forgery CSRF vulnerability in Complete SEO Page/Post Specific Social Share Buttons pagepost-specific-social-share-buttons allows Stored XSS.This issue affects Page/Post Specific Social Share Buttons: from n/a through = 2.1...

CVE-2025-26580: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Complete SEO Page/Post Specific Social Share Buttons pagepost-specific-social-share-buttons allows Stored XSS.This issue affects Page/Post Specific Social Share Buttons: from n/a through = 2.1...

PT-2025-7200

Name of the Vulnerable Software and Affected Versions: CompleteWebResources Page/Post Specific Social Share Buttons versions prior to 2.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This problem affects the social share buttons...

DRUPAL-CONTRIB-2025-017

This module enables you to create super sets of configuration and enable them conditionally, for example have some modules installed only in some environments. The module does not use Cross Site Request Forgery CSRF tokens to protect routes for enabling or disabling a split. This vulnerability is...

ABB Cylon FLXeon 9.3.4 Cross Site Request Forgery

ABB Cylon FLXeon version 9.3.4 suffers from a cross site request forgery vulnerability. However, exploitation is limited to specific conditions due to the server's CORS configuration. !-- ABB Cylon FLXeon 9.3.4 Limited Cross-Site Request Forgery RCE Vendor: ABB Ltd. Product web page:...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from the presence of an authenticated file read vulnerability, which could allow an attacker to read specific...

CVE-2024-53648

A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions V9.90, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions V9.90, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions V9.90, SIPROTEC 5 6MD89 CP300 All versions V9.90, SIPROTEC 5...

CVE-2024-9010

creationtimestamp| type| source ---|---|--- 2025-02-11 02:20:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulvglveg2x 2025-02-11 06:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhuyyp3p6e2m...

SAP ABAP Platform 安全漏洞

SAP ABAP Platform is an ABAP-based SAP solution from SAP, Germany. A security vulnerability exists in SAP ABAP Platform that stems from an authentication flaw that could lead to unauthorized access to specific transactions...

CVE-2025-1107

Unverified password change vulnerability in Janto, versions prior to r12. This could allow an unauthenticated attacker to change another user's password without knowing their current password. To exploit the vulnerability, the attacker must create a specific POST request and send it to the endpoi...

GHSA-VJ7W-3M8C-6VPX

creationtimestamp| type| source ---|---|--- 2025-02-07 21:03:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3834 2025-02-07 21:18:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113964685545907240...