CERTFR-2019-ALE-014

creationtimestamp| type| source ---|---|--- 2025-01-29 16:31:26+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvffo5kah2k...

mySCADA myPRO 操作系统命令注入漏洞

mySCADA myPRO is a professional HMI/SCADA system from mySCADA, Inc. designed for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO that stems from an inability to properly neutralize a POST request with an email...

CVE-2025-23385

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible...

CVE-2025-24743

creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqadhxvw42t 2025-01-27 17:40:41+00:00| seen| https://t.me/cvedetector/16481...

Medium: grpc

Issue Overview: There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPYENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission...

CVE-2025-22450

Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific ports...

BIT-PYTHON-MIN-2022-42919

Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network...

SUSE CVE-2024-57899

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems On 32-bit systems, the size of an unsigned long is 4 bytes, while a u64 is 8 bytes. Therefore, when using oreachsetbitbit, &bits, sizeofchanged BITSPERBYTE, the...

SUSE CVE-2025-0439

Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2025-0442

Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-57885 mm/kmemleak: fix sleeping function called from invalid context at print message

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: fix sleeping function called from invalid context at print message Address a bug in the kernel that triggers a "sleeping function called from invalid context" warning when /sys/kernel/debug/kmemleak is printed under...

DEBIAN-CVE-2025-0442

Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Genivia gSOAP 安全漏洞

Genivia gSOAP is a C/C++ software development kit with automatic coding from Genivia, Inc. A security vulnerability exists in Genivia gSOAP, which originates from a denial of service due to a high CPU load caused by an unauthenticated, remote attacker forcing the parsing of XML with duplicate ID...

BIT-PHP-MIN-2024-8932 OOB access in ldap_escape

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

CVE-2024-50857

The ipdojob request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting XSS. It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully...

CVE-2024-51491

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List CRL based revocation check feature. After retrieving the CRL, notation-go...

CVE-2024-13294

creationtimestamp| type| source ---|---|--- 2025-01-09 21:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdly4boqj27...

CVE-2024-12496

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhgm2jr2a 2025-01-09 12:14:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113798341295943036 2025-01-09 12:17:02+00:00| seen|...

Iocharger 安全漏洞

Iocharger is an electric vehicle charging and smart energy management solution from Galaxy Zhangtan iocharger, a Chinese company. Iocharger has a security vulnerability that stems from improper neutralization of specific elements...

CVE-2024-12337

creationtimestamp| type| source ---|---|--- 2025-01-08 11:13:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113792436170808261 2025-01-08 11:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7zxsnpbw2a 2025-01-08 11:53:50+00:00| seen|...