Vulnerability of the pam_sm_authenticate() function in the Yubico PAM module, pam-u2f, which allows a intruder to elevate their privileges

The vulnerability of the pamsmauthenticate function in the Yubico PAM module, specifically in pam-u2f, is related to the return of an incorrect status code. Exploiting this vulnerability could allow attackers to increase their privileges...

CVE-2025-2002

creationtimestamp| type| source ---|---|--- 2025-03-12 20:23:01+00:00| seen| https://t.me/cvedetector/20151 2025-03-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-077-04...

CVE-2025-20142

creationtimestamp| type| source ---|---|--- 2025-03-12 17:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114150716950392585 2025-03-12 20:23:19+00:00| seen| https://t.me/cvedetector/20165 2025-03-15 00:18:54+00:00| seen|...

CVE-2025-2205

creationtimestamp| type| source ---|---|--- 2025-03-12 03:44:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7265 2025-03-12 06:26:29+00:00| seen| https://infosec.exchange/users/adulau/statuses/114148035015217191...

PT-2025-11070 · Google · Android

Name of the Vulnerable Software and Affected Versions: Linux Kernel Hidd Component affected versions not specified Description: A use-after-free issue exists in the hidd check config done function within hidd conn.cc. This could allow for arbitrary code execution, potentially leading to local...

PT-2025-11060 · Google · Android

Name of the Vulnerable Software and Affected Versions: StatusHint affected versions not specified TelecomServiceImpl affected versions not specified Description: Multiple functions within StatusHint.java and TelecomServiceImpl.java may reveal images across users due to a confused deputy condition...

CVE-2025-2210

creationtimestamp| type| source ---|---|--- 2025-03-11 22:39:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7250 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2025-24450

creationtimestamp| type| source ---|---|--- 2025-03-11 17:39:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7181...

CVE-2025-24079

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 18:42:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7208...

CVE-2025-27363

creationtimestamp| type| source ---|---|--- 2025-03-11 13:39:52+00:00| exploited| https://t.me/DarkWebInformerCVEAlerts/7135 2025-03-11 14:39:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144309421820947 2025-03-11 15:48:20+00:00| seen|...

CERTFR-2025-CTI-003

creationtimestamp| type| source ---|---|--- 2025-03-11 11:00:07+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114143448644988715...

CVE-2025-27912

creationtimestamp| type| source ---|---|--- 2025-03-11 08:38:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7120 2025-03-11 09:31:03+00:00| seen| Telegram/VmMuGE7Rb8M0CTKtbBCx8A-ZtXlhfTER7CBMGSEtWA4Slk 2025-03-11 09:48:37+00:00| seen|...

CVE-2025-26704

creationtimestamp| type| source ---|---|--- 2025-03-11 07:39:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7112 2025-03-11 09:15:49+00:00| seen| https://t.me/cvedetector/20043...

CVE-2025-26471

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...

Vulnerability eliminated

...

CVE-2025-2013

creationtimestamp| type| source ---|---|--- 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-120/...

The vulnerability of the uvc_status_init() function in the USB Video Class driver (drivers/media/usb/uvc/uvc_status.c) in Linux kernel allows a hacker to induce a service failure.

The vulnerability of the uvcstatusinit function in the USB Video Class driver drivers/media/usb/uvc/uvcstatus.c in Linux kernels is related to improper resource locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2023-52969

creationtimestamp| type| source ---|---|--- 2025-03-08 23:37:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6951 2025-03-09 01:13:25+00:00| seen| https://t.me/cvedetector/19906 2025-03-09 02:45:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljvzggv2t62e 2025-03-09...

Advisory ROSA-SA-2025-2769

Software: python-jinja2 2.10.1 OS: ROSA Virtualization 3.0 packageevrstring: python-jinja2-2.10.1-5.rv30 CVE-ID: CVE-2024-22195 BDU-ID: 2024-00884 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the xmlattr filter of the Jinja2 templating engine for the Python programming language is related to a...

Advisory ROSA-SA-2025-2768

Software: python-jinja2 2.10.1 OS: ROSA Virtualization 3.0 packageevrstring: python-jinja2-2.10.1-6.rv30 CVE-ID: CVE-2024-56326 BDU-ID: 2025-00113 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the str.format method of the html template tool jinja is related to a failure to neutralize special...