ElasticNinja CVE News and Updates

2025-05-17

CVE-2025-4428

EPMM: Remote Code Execution via API component in Ivanti Endpoint Manager Mobile (CVE-2025-4428) #shorts

2025-05-16

CVE-2025-4427

EPMM: authentication bypass in Ivanti Endpoint Manager Mobile API (CVE-2025-4427) #shorts

2025-05-16

CVE-2025-32756

Fortinet security appliances: stack-based buffer overflow in Fortinet FortiVoice, FortiRecorder, FortiMail, FortiNDR and FortiCamera (CVE-2025-32756) #shorts

2025-05-16

CVE-2024-10041

PAM: PAM speculative execution information leak (CVE-2024-10041) #shorts

2025-05-15

CVE-2025-30194

dnsdist: critical buffer overflow (double-free) in PowerDNS DNSdist DoH provider (CVE-2025-30194) #shorts

2025-05-13

CVE-2025-20188

Cisco IOS XE WLC: Hard-coded JSON Web Token in Out-of-Band AP Image Download feature (CVE-2025-20188) #shorts

2025-05-11

CVE-2025-23359

NVIDIA Container Toolkit: Time-of-Check Time-of-Use (TOCTOU) race condition in NVIDIA Container Toolkit for Linux (CVE-2025-23359) #shorts

2025-05-11

CVE-2024-11477

7-Zip: Integer underflow in Zstandard decompression leading to remote code execution in 7-Zip (CVE-2024-11477) #shorts

2025-05-11

CVE-2025-21756

vsock: Use-after-free in Linux vsock binding (CVE-2025-21756) #shorts

2025-05-10

CVE-2025-1731

Zyxel USG FLEX H: incorrect permission assignment in PostgreSQL commands leading to local privilege escalation (CVE-2025-1731) #shorts

2025-05-10

CVE-2025-24251

Apple OS: local network denial of service in Apple operating systems causing unexpected app termination (CVE-2025-24251) #shorts

2025-05-10

CVE-2021-20035

SonicWall SMA100: OS command injection in SonicWall SMA100 management interface (CVE-2021-20035) #shorts

2025-05-09

CVE-2024-7399

MagicINFO 9 Server: Path traversal and unrestricted file upload in Samsung MagicINFO 9 Server allowing remote code execution (CVE-2024-7399) #shorts

2025-05-08

CVE-2025-24054

Windows NTLM: External control of file name or path in Windows NTLM (CVE-2025-24054) (CVE-2025-24054) #shorts

2025-05-07

CVE-2025-3248

Langflow: Missing authentication leading to code injection in Langflow (CVE-2025-3248) #shorts

2025-05-06

CVE-2025-34028

Commvault Command Center: path traversal in Commvault Command Center Innovation Release leading to remote code execution (CVE-2025-34028) #shorts

2025-05-05

CVE-2025-29824

Windows CLFS driver: Use-after-free in Windows Common Log File System Driver leading to privilege escalation (CVE-2025-29824) #shorts

2025-05-05

CVE-2025-30406

CentreStack: Gladinet CentreStack deserialization RCE via hardcoded machineKey (CVE-2025-30406) #shorts

2025-05-05

CVE-2025-31324

SAP NetWeaver Visual Composer: Unrestricted file upload in SAP NetWeaver Visual Composer Metadata Uploader (CVE-2025-31324) #shorts

2025-05-05

CVE-2025-32433

Erlang/OTP SSH: Erlang/OTP SSH unauthenticated remote code execution (CVE-2025-32433) #shorts

2025-06-23

CVE-2025-48734

commons-beanutils: Improper Access Control in Apache Commons BeanUtils allowing unauthorized enum property access (CVE-2025-48734) #shorts

2025-06-20

CVE-2025-6019

libblockdev: Local Privilege Escalation in libblockdev via Polkit/udisks allow_active (CVE-2025-6019) #shorts

2025-06-19

CVE-2025-5054

Apport: Race condition in Canonical Apport allowing sensitive information leak via PID-reuse (CVE-2025-5054) #shorts

2025-06-18

CVE-2025-4598

systemd-coredump: SUID process race condition in systemd-coredump (CVE-2025-4598) #shorts

2025-06-17

CVE-2024-3721

TBK DVR: Critical OS command injection in TBK DVR-4104 and DVR-4216 via /device.rsp?opt=sys&cmd parameter (CVE-2024-3721) #shorts

2025-06-16

CVE-2024-47081

requests: Netrc credential leak in PSF requests library (CVE-2024-47081) #shorts

2025-06-15

CVE-2025-48828

vBulletin: vBulletin template engine arbitrary PHP code execution (CVE-2025-48828) #shorts

2025-06-14

CVE-2025-4574

crossbeam-channel: double-free race condition in crossbeam-channel Rust crate (CVE-2025-4574) #shorts

2025-06-13

CVE-2025-33073

Windows SMB client: Improper access control in Windows SMB allowing privilege escalation via Reflective Kerberos Relay (CVE-2025-33073) #shorts

2025-06-12

CVE-2025-33053

Windows WebDAV: External control of file name/path in WebDAV leading to RCE (CVE-2025-33053) #shorts

2025-06-11

CVE-2025-48827

vBulletin: Unauthenticated access to protected API controllers in vBulletin (CVE-2025-48827) #shorts

2025-06-10

CVE-2025-4632

MagicINFO 9 Server: CWE-22 Path Traversal in Samsung MagicINFO 9 Server (CVE-2025-4632) #shorts

2025-06-09

CVE-2024-43420

Intel Atom: Information disclosure via shared microarchitectural predictor state in Intel Atom processors (CVE-2024-43420) #shorts

2025-06-07

CVE-2025-5419

Chrome: Out of bounds read and write in V8 engine (CVE-2025-5419) #shorts

2025-06-06

CVE-2024-28956

Intel CPUs: Information Disclosure in Intel Processors via transient microarchitectural exposure (CVE-2024-28956) (CVE-2024-28956) #shorts

2025-06-05

CVE-2025-22247

VMware Tools: VMware Tools insecure file handling (CVE-2025-22247) #shorts

2025-06-03

CVE-2025-47273

setuptools: path traversal in setuptools PackageIndex (CVE-2025-47273) #shorts

2025-06-02

CVE-2025-3887

GStreamer H265 plugin: GStreamer H265 Codec Parsing Stack-based Buffer Overflow (CVE-2025-3887) #shorts

2025-05-22

CVE-2025-3155

yelp: arbitrary file-read and script execution in Yelp Help Viewer (CVE-2025-3155) (CVE-2025-3155) #shorts

2025-05-21

CVE-2010-1028

firefox: integer overflow in the Web Open Fonts Format (WOFF) decoder of Mozilla Firefox leading to a buffer overflow (CVE-2010-1028) #shorts

2025-05-19

CVE-2025-4664

Chrome: Insufficient policy enforcement in Loader in Google Chrome (CVE-2025-4664) #shorts

2025-05-17

CVE-2025-32756

Fortinet products: stack-based buffer overflow (CVE-2025-32756) #shorts

2025-05-17

CVE-2025-4428

Ivanti EPMM: Remote Code Execution in Ivanti Endpoint Manager Mobile API (CVE-2025-4428) #shorts

2025-05-16

CVE-2024-10041

PAM: PAM insecure storage of secret information leading to speculative ROP chain exploitation (CVE-2024-10041) #shorts

2025-05-16

CVE-2025-4427

EPMM: authentication bypass in API leading to remote code execution in Ivanti Endpoint Manager Mobile (CVE-2025-4427) #shorts

2025-05-15

CVE-2025-30194

DNSdist: double-free (user-after-free) denial of service in PowerDNS DNSdist DoH via nghttp2 (CVE-2025-30194) #shorts

2025-05-13

CVE-2025-20188

IOS XE WLC: hard-coded JSON Web Token in Out-of-Band AP Image Download feature (CVE-2025-20188) #shorts

2025-05-09

CVE-2024-11477

7-Zip: 7-Zip Zstandard decompression integer underflow remote code execution (CVE-2024-11477) #shorts

2025-05-07

CVE-2024-7399

MagicINFO Server: Path traversal and unrestricted file upload in Samsung MagicINFO 9 Server (CWE-22, CWE-434) (CVE-2024-7399) #shorts

2025-05-03

CVE-2025-23359

NVIDIA toolkit: Time-of-Check Time-of-Use (TOCTOU) race condition in NVIDIA Container Toolkit and GPU Operator (CVE-2025-23359) #shorts

2025-05-02

CVE-2025-21756

vsock: Use-after-free in Linux kernel vsock (CVE-2025-21756) (CVE-2025-21756) #shorts

2025-04-30

CVE-2025-24251

Apple OSes: Apple local network denial of service (CVE-2025-24251) #shorts

2025-04-29

CVE-2025-31324

Visual Composer: SAP NetWeaver Visual Composer Metadata Uploader unrestricted file upload (CVE-2025-31324) (CVE-2025-31324) #shorts

2025-04-25

CVE-2025-34028

Commvault Command Center: path traversal in Commvault Command Center leading to remote code execution (CVE-2025-34028) #shorts

2025-04-24

CVE-2025-1731

Zyxel USG FLEX H: local privilege escalation via incorrect permission assignment in PostgreSQL commands (CVE-2025-1731) #shorts

2025-04-20

CVE-2021-20035

SMA100: OS command injection in SonicWall SMA100 management interface (CVE-2021-20035) #shorts

2025-04-20

CVE-2025-32433

Erlang/OTP SSH: Unauthenticated remote code execution in Erlang/OTP SSH server (CVE-2025-32433) #shorts

2025-04-20

CVE-2025-30401

WhatsApp for Windows: spoofing issue in WhatsApp Desktop for Windows (CVE-2025-30401) #shorts

2025-04-19

CVE-2025-3248

Langflow: code injection in /api/v1/validate/code endpoint of Langflow AI (CVE-2025-3248) #shorts

2025-04-19

CVE-2025-31344

giflib: heap-based buffer overflow in giflib (DumpScreen2RGB) (CVE-2025-31344) #shorts

2025-04-18

CVE-2024-41710

Mitel SIP phones: argument injection during boot process (CVE-2024-41710) #shorts

2025-04-18

CVE-2024-12905

tar-fs: improper link resolution and path traversal (CVE-2024-12905) #shorts

2025-04-18

CVE-2024-6104

go-retryablehttp: Insertion of Sensitive Information into Log File (CVE-2024-6104) #shorts

2025-04-18

CVE-2025-24054

Microsoft Windows: External Control of File Name or Path in Windows NTLM (CVE-2025-24054) #shorts

2025-04-17

CVE-2025-3066

Chrome: use after free (CVE-2025-3066) #shorts

2025-04-16

CVE-2025-30406

CentreStack: deserialization vulnerability due to hardcoded cryptographic key (CVE-2025-30406) #shorts

2025-04-15

CVE-2025-1097

ingress-nginx: Configuration injection via auth-tls-match-cn (CVE-2025-1097) #shorts

2025-04-14

CVE-2024-54471

macOS: macOS credential leakage (CVE-2024-54471) #shorts

2025-04-13

CVE-2024-54551

Apple devices: Web content denial-of-service (CVE-2024-54551) #shorts

2025-04-12

CVE-2025-31161

CrushFTP: Authentication Bypass by AWS4-HMAC Weakness (CVE-2025-31161) #shorts

2025-04-11

CVE-2025-29824

Windows OS: Use after free in Windows Common Log File System Driver (CVE-2025-29824) #shorts

2025-04-10

CVE-2024-20439

CSLU: static administrative credential (CVE-2024-20439) #shorts

2025-04-09

CVE-2025-0927

Linux Kernel: heap overflow (CVE-2025-0927) #shorts

2025-04-08

CVE-2024-55963

Appsmith: unauthenticated RCE and denial of service via Restart API (CVE-2024-55963) #shorts

2025-04-07

CVE-2025-30472

Corosync: corosync buffer overflow (CVE-2025-30472) #shorts

2025-04-06

CVE-2025-2588

Augeas: NULL pointer dereference (CVE-2025-2588) #shorts

2025-04-05

CVE-2025-26699

Django: Denial of Service in django.utils.text.wrap (CVE-2025-26699) #shorts

2025-04-04

CVE-2025-22457

Ivanti products: stack-based buffer overflow (CVE-2025-22457) #shorts

2025-04-03

CVE-2025-29768

vim: vim ZIP argument injection (CVE-2025-29768) #shorts

2025-04-02

CVE-2025-2825

CrushFTP: CrushFTP authentication bypass (CVE-2025-2825) #shorts

2025-04-01

CVE-2025-26633

Microsoft Windows: Improper neutralization in Microsoft Management Console (CVE-2025-26633) #shorts

2025-03-31

CVE-2025-27363

FreeType: FreeType buffer overflow (CVE-2025-27363) #shorts

2025-03-30

CVE-2025-22230

VMware Tools: authentication bypass (CVE-2025-22230) #shorts

2025-03-29

CVE-2025-1974

ingress-nginx: Improper Isolation or Compartmentalization leading to remote code execution (CVE-2025-1974) #shorts

2025-03-28

CVE-2025-22869

crypto-ssh for Go: denial of service via slow key exchange (CVE-2025-22869) #shorts

2025-03-27

CVE-2025-2783

Chrome: sandbox escape in Mojo (CVE-2025-2783) #shorts

2025-03-26

CVE-2025-22868

x-oauth2-jws: Improper Validation of Syntactic Correctness of Input (CVE-2025-22868) #shorts

2025-03-25

CVE-2024-44192

Apple platforms: Web Denial of Service (CVE-2024-44192) #shorts

2025-03-24

CVE-2025-29927

Next.js: Next.js authorization bypass (CVE-2025-29927) #shorts

2025-03-23

CVE-2025-24071

Windows File Explorer: Windows File Explorer spoofing vulnerability (CVE-2025-24071) #shorts

2025-03-22

CVE-2025-24201

Apple devices and Safari: Web Content sandbox breakout (CVE-2025-24201) #shorts

2025-03-21

CVE-2025-23120

Veeam Backup and Recovery: remote code execution in domain user handler (CVE-2025-23120) #shorts

2025-03-20

CVE-2025-30066

tj-actions:changed-files: information disclosure in tj-actions changed-files GitHub Action (CVE-2025-30066) #shorts

2025-03-19

CVE-2024-50302

Linux and Android: report buffer leak (CVE-2024-50302) #shorts

2025-03-18

CVE-2025-24928

libxml2: libxml2 stack-based buffer overflow (CVE-2025-24928) #shorts

2025-03-17

CVE-2025-27840

ESP32: hidden HCI commands allowing unauthorized access (CVE-2025-27840) #shorts

2025-03-16

CVE-2025-27636

Apache Camel: bypass/injection (CVE-2025-27636) #shorts

2025-03-15

CVE-2024-8176

libexpat: libexpat stack overflow (CVE-2024-8176) #shorts

2025-03-14

CVE-2025-24813

Tomcat: Path Equivalence leading to remote code execution and information disclosure (CVE-2025-24813) #shorts

2025-03-13

CVE-2024-54467

Apple systems and Safari: privilege escalation via cookie management issue (CVE-2024-54467) #shorts

2025-03-12

CVE-2025-1316

Edimax IP Camera: OS Command Injection (CVE-2025-1316) #shorts

2025-03-11

CVE-2024-28989

SolarWinds Web Help Desk: hardcoded cryptographic key (CVE-2024-28989) #shorts

2025-03-09

CVE-2025-27154

spotipy: incorrect default permissions (CVE-2025-27154) #shorts

2025-03-08

CVE-2025-22224

VMware products: heap-overflow (CVE-2025-22224) #shorts

2025-03-07

CVE-2025-27423

Vim: Vim command injection vulnerability (CVE-2025-27423) #shorts

2025-03-06

CVE-2025-27144

Go JOSE: Go JOSE memory exhaustion (CVE-2025-27144) #shorts

2025-03-04

CVE-2025-26597

RHEL 6/7/8/9 X.org X11 Server/TigerVNC: heap-based buffer overflow (CVE-2025-26597) #shorts

2025-03-03

CVE-2025-26466

OpenSSH: OpenSSH denial of service (CVE-2025-26466) #shorts

2025-03-02

CVE-2025-21391

Microsoft Windows: Windows Storage Elevation of Privilege Vulnerability (CVE-2025-21391) #shorts

2025-03-01

CVE-2024-12243

GnuTLS: Inefficient Algorithmic Complexity leading to denial of service (CVE-2024-12243) #shorts

2025-02-28

CVE-2025-24898

rust-openssl: use after free in ssl::select_next_proto (CVE-2025-24898) #shorts

2025-02-27

CVE-2024-21966

AMD Ryzen: DLL hijacking (CVE-2024-21966) #shorts

2025-02-26

CVE-2025-21418

Windows systems: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVE-2025-21418) #shorts

2025-02-25

CVE-2024-53104

Linux kernel: out of bounds write in Linux kernel (CVE-2024-53104) #shorts

2025-02-24

CVE-2025-26603

vim: vim use after free (CVE-2025-26603) #shorts

2025-02-23

CVE-2025-26465

OpenSSH: OpenSSH VerifyHostKeyDNS issue (CVE-2025-26465) #shorts

2025-02-22

CVE-2025-1244

Emacs: OS Command Injection (CVE-2025-1244) #shorts

2025-02-21

CVE-2025-23114

Veeam Backup products: TLS certificate validation failure (CVE-2025-23114) #shorts

2025-02-20

CVE-2024-12797

OpenSSL clients using RPKs: OpenSSL TLS/DTLS RFC7250 Raw Public Key Handler flaw (CVE-2024-12797) #shorts

2025-02-19

CVE-2025-1094

PostgreSQL: SQL injection (CVE-2025-1094) #shorts

2025-02-18

CVE-2024-57968

VeraCore: Unrestricted Upload of File with Dangerous Type (CVE-2024-57968) #shorts

2025-02-17

CVE-2024-53704

SonicWall firewalls: Improper Authentication in the SSLVPN authentication mechanism (CVE-2024-53704) #shorts

2025-02-16

CVE-2025-25181

VeraCore: SQL injection (CVE-2025-25181) #shorts

2025-02-15

CVE-2025-0108

PAN-OS: authentication bypass (CVE-2025-0108) #shorts

2025-02-14

CVE-2025-0938

Python URL Parser: Improper Input Validation in Python URL Parser (CVE-2025-0938) #shorts

2025-02-13

CVE-2025-0693

AWS IAM Login: AWS IAM User Enumeration (CVE-2025-0693) #shorts

2025-02-12

CVE-2025-24200

iOS/iPadOS: iOS/iPadOS USB Restricted Mode privilege escalation (CVE-2025-24200) #shorts

2025-02-11

CVE-2024-11187

BIND: Denial of Service in BIND's Additional Section Record Handler (CVE-2024-11187) #shorts

2025-02-09

CVE-2023-45288

Go HTTP/2: HTTP/2 excessive CONTINUATION frames leading to uncontrolled resource consumption (CVE-2023-45288) #shorts

2025-02-08

CVE-2025-0781

SimGear: incorrect authorization allowing arbitrary file write (CVE-2025-0781) #shorts

2025-02-07

CVE-2022-49043

libxml2: use after free in libxml2 (CVE-2022-49043) #shorts

2025-02-06

CVE-2025-21298

Windows: Windows OLE Remote Code Execution Vulnerability (CVE-2025-21298) #shorts

2025-02-05

CVE-2024-40891

Zyxel CPE devices: post-authentication command injection (CVE-2024-40891) #shorts

2025-02-04

CVE-2024-11218

podman/buildah on Red Hat products: container breakout using podman/buildah (CVE-2024-11218) #shorts

2025-02-03

CVE-2025-23084

node.js: node.js drive name handler (CVE-2025-23084) #shorts

2025-02-02

CVE-2024-55591

Fortinet products: Authentication Bypass Using an Alternate Path or Channel (CVE-2024-55591) #shorts

2025-02-01

CVE-2025-0282

Ivanti products: stack-based buffer overflow (CVE-2025-0282) #shorts

2025-01-28

CVE-2025-24117

Apple devices: information disclosure (CVE-2025-24117) #shorts

2025-01-27

CVE-2025-22150

undici: weak encryption in Math.random function (CVE-2025-22150) #shorts

2025-01-26

CVE-2025-0411

7-Zip: Mark-of-the-Web bypass (CVE-2025-0411) #shorts

2025-01-25

CVE-2024-53263

git-lfs: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CVE-2024-53263) #shorts

2025-01-24

CVE-2025-23006

SMA 1000: pre-authentication deserialization of untrusted data (CVE-2025-23006) #shorts

2025-01-23

CVE-2024-54887

TP-Link TL-WR940N routers: buffer overflow via dnsserver1 and dnsserver2 parameters (CVE-2024-54887) #shorts

2025-01-22

CVE-2025-22376

Net::OAuth: Net::OAuth use of weak PRNG (CVE-2025-22376) #shorts

2025-01-21

CVE-2025-0283

Ivanti products: stack-based buffer overflow (CVE-2025-0283) #shorts

2025-01-20

CVE-2024-50603

Aviatrix Controller: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CVE-2024-50603) #shorts

2025-01-19

CVE-2024-56326

Jinja: Python code execution via str.format in Jinja (CVE-2024-56326) #shorts

2025-01-18

CVE-2024-7344

Howyar Reloader UEFI Application: UEFI Secure Boot bypass (CVE-2024-7344) #shorts

2025-01-17

CVE-2024-44243

macOS: bypass System Integrity Protection (CVE-2024-44243) #shorts

2025-01-16

CVE-2024-56201

jinja: Jinja improper neutralization of escape sequences (CVE-2024-56201) #shorts

2025-01-14

CVE-2024-45338

x-net-html: Asymmetric Resource Consumption (Amplification) in x-net-html (CVE-2024-45338) #shorts

2025-01-13

CVE-2024-12356

BeyondTrust: command injection (CVE-2024-12356) #shorts

2025-01-13

CVE-2024-47606

gstreamer: integer overflow or wraparound (CVE-2024-47606) #shorts

2025-01-10

CVE-2024-49113

Windows: Windows LDAP Denial of Service (CVE-2024-49113) #shorts

2025-01-05

CVE-2024-49112

Windows: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2024-49112) #shorts

2025-01-02

CVE-2024-40896

libxml2: XML External Entity (XXE) in SAX Parser (CVE-2024-40896) #shorts

2025-01-01

CVE-2024-12856

Four-Faith routers: OS command injection (CVE-2024-12856) #shorts

2024-12-31

CVE-2024-56378

Poppler: out-of-bounds read (CVE-2024-56378) #shorts

2024-12-29

CVE-2024-3393

Palo Alto Networks PAN-OS: Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS (CVE-2024-3393) #shorts

2024-12-27

CVE-2024-53961

ColdFusion: Adobe ColdFusion file directory traversal (CVE-2024-53961) #shorts

2024-12-20

CVE-2024-50379

Apache Tomcat: Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2024-50379) #shorts

2024-12-18

CVE-2024-45337

x-crypto: authorization bypass via misuse of ServerConfig.PublicKeyCallback (CVE-2024-45337) #shorts

2024-12-17

CVE-2024-53677

Apache Struts: file upload logic is flawed (CVE-2024-53677) #shorts

2024-12-16

CVE-2024-54508

Apple devices and Safari: buffer overflow (CVE-2024-54508) #shorts

2024-12-15

CVE-2024-54505

Apple products: type confusion in web handler (CVE-2024-54505) #shorts

2024-12-14

CVE-2024-49138

Microsoft Windows: Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVE-2024-49138) #shorts

2024-12-13

CVE-2024-50623

Cleo software: JavaScript Injection and unrestricted file upload/download (CVE-2024-50623) #shorts

2024-12-11

CVE-2024-50623

Cleo software: unrestricted file upload and JavaScript injection (CVE-2024-50623) #shorts

2024-12-05

CVE-2024-5020

WordPress plugins: Cross Site Scripting in WordPress plugins (CVE-2024-5020) #shorts

2024-12-04

CVE-2024-44308

Apple devices: arbitrary code execution via malicious web content (CVE-2024-44308) #shorts

2024-12-02

CVE-2024-2550

PAN-OS: null pointer dereference (CVE-2024-2550) #shorts #breaking

2024-12-01

CVE-2024-47533

cobbler: improper authentication (CVE-2024-47533) #shorts #breaking

2024-11-30

CVE-2023-52921

amdgpu: use-after-free in amdgpu (CVE-2023-52921) #shorts #breaking

2024-11-28

CVE-2024-44309

Apple products: Critical cross-site scripting vulnerability (CVE-2024-44309) #shorts #breaking

2024-11-27

CVE-2024-9474

PAN-OS: privilege escalation (CVE-2024-9474) #shorts #breaking

2024-11-26

CVE-2024-52533

glib: glib buffer overflow (CVE-2024-52533) #shorts #breaking

2024-11-25

CVE-2024-0012

PAN-OS: authentication bypass in PAN-OS management web interface (CVE-2024-0012) #shorts #breaking

2024-11-24

CVE-2024-11305

Altenergy Power Control Software: SQL Injection (CVE-2024-11305) #shorts #breaking

2024-11-23

CVE-2024-49039

Microsoft Windows: Windows Task Scheduler Elevation of Privilege (CVE-2024-49039) #shorts #breaking

2024-11-21

CVE-2024-10914

D-Link NAS devices: os command injection (CVE-2024-10914) #shorts #breaking

2024-11-20

CVE-2024-43093

Android: bypass of file path filter (CVE-2024-43093) #shorts #breaking

2024-11-19

CVE-2024-10477

pb-cms: Cross Site Scripting (CVE-2024-10477) #shorts #breaking

2024-11-18

CVE-2024-9632

X.org: heap-based buffer overflow (CVE-2024-9632) #shorts #breaking

2024-11-17

CVE-2024-20418

Cisco Aironet: command injection (CVE-2024-20418) #shorts #breaking

2024-11-16

CVE-2024-10091

ElementsKit: stored cross-site scripting (XSS) (CVE-2024-10091) #shorts #breaking

2024-11-15

CVE-2024-44239

apple platforms: information disclosure vulnerability (CVE-2024-44239) #shorts #breaking

2024-11-15

CVE-2024-43451

Windows: NTLM Hash Disclosure Spoofing (CVE-2024-43451) #shorts #breaking

2024-10-24

CVE-2024-47575

FortiManager: missing authentication for critical function (CVE-2024-47575) #shorts #breaking

2024-10-18

CVE-2024-9381

Ivanti CSA: path traversal (CVE-2024-9381) #shorts #breaking

2024-10-14

CVE-2024-47177

cups-filters: command injection (CVE-2024-47177) #shorts #breaking

2024-10-13

CVE-2024-47175

libppd: CUPS libppd improper input validation (CVE-2024-47175) #shorts #breaking

2024-10-12

CVE-2024-20017

MediaTek chipsets: wlan service out of bounds write (CVE-2024-20017) #shorts #breaking

2024-10-11

CVE-2024-7593

Ivanti vTM: authentication bypass (CVE-2024-7593) #shorts #breaking

2024-10-10

CVE-2024-28987

SolarWinds Web Help Desk: hardcoded credential vulnerability (CVE-2024-28987) #shorts #breaking

2024-10-09

CVE-2024-47076

libcupsfilters: improper input validation in libcupsfilters (CVE-2024-47076) #shorts #breaking

2024-10-08

CVE-2024-38812

VMware products: heap-based buffer overflow (CVE-2024-38812) #shorts #breaking

2024-10-07

CVE-2024-29847

Ivanti EPM: deserialization of untrusted data (CVE-2024-29847) #shorts #breaking

2024-10-06

CVE-2024-40766

SonicOS: improper access control (CVE-2024-40766) #shorts #breaking

2024-10-05

CVE-2024-8190

Ivanti CSA: OS command injection (CVE-2024-8190) #shorts #breaking

2024-10-04

CVE-2024-45195

Apache OFBiz: Direct Request ('Forced Browsing') (CVE-2024-45195) #shorts #breaking

2024-10-03

CVE-2024-45519

Zimbra Collaboration: remote command execution vulnerability (CVE-2024-45519) #shorts #breaking

2024-09-11

CVE-2024-7348

PostgreSQL: Time-of-check Time-of-use (TOCTOU) race condition (CVE-2024-7348) #shorts #breaking

2024-09-06

CVE-2024-8088

CPython zipfile.Path: Infinite loop in Python zipfile module (CVE-2024-8088) #shorts #breaking

2024-09-05

CVE-2024-21302

Windows and Azure VM: elevation of privilege (CVE-2024-21302) #shorts #breaking

2024-09-03

CVE-2024-38063

Microsoft Windows systems: Windows TCP/IP Remote Code Execution (CVE-2024-38063) #shorts #breaking

2024-08-08

CVE-2013-4235

shadow: TOCTOU race condition (CVE-2013-4235) #shorts #breaking

2024-08-07

CVE-2024-36971

Linux Kernel: Linux kernel race condition (CVE-2024-36971) #shorts #breaking

2024-08-02

CVE-2024-37085

VMware ESXi, VMware Cloud Foundation: authentication bypass (CVE-2024-37085) #shorts #breaking

2024-08-01

CVE-2024-40779

multiple Apple platforms: out-of-bounds read (CVE-2024-40779) #shorts #breaking

2024-07-31

CVE-2024-40787

Apple devices: Internet permission bypass via shortcut (CVE-2024-40787) #shorts #breaking

2024-07-16

CVE-2024-6409

RHEL 9: Signal Handler Race Condition (CVE-2024-6409) #shorts #breaking

2024-07-14

CVE-2024-5569

jaraco/zipp: Denial of Service (DoS) (CVE-2024-5569) #shorts #breaking

2024-07-13

CVE-2024-38112

Windows: Windows MSHTML Platform Spoofing (CVE-2024-38112) #shorts #breaking

2024-07-11

CVE-2024-3596

RADIUS: RADIUS Response Forgery (CVE-2024-3596) #shorts #breaking

2024-07-09

CVE-2024-24791

Go net/http: Denial of Service (CVE-2024-24791) #shorts #breaking

2024-07-04

CVE-2024-29510

Ghostscript: format string injection (CVE-2024-29510) #shorts #breaking

2024-07-03

CVE-2024-0444

GStreamer: GStreamer AV1 Video Parsing Stack-based Buffer Overflow (CVE-2024-0444) #shorts #breaking

2024-07-02

CVE-2024-6387

OpenSSH on RHEL: signal handler race condition in OpenSSH (CVE-2024-6387) #shorts #breaking

2024-06-27

CVE-2024-5806

MOVEit Transfer: Improper Authentication (CVE-2024-5806) #shorts #breaking

2024-06-26

CVE-2024-6297

multiple WordPress plugins: embedded malicious PHP code (CVE-2024-6297) #shorts #breaking

2024-06-22

CVE-2024-0762

Potential buffer overflow in unsafe UEFI variable handling (CVE-2024-0762) #shorts #breaking

2024-06-20

CVE-2024-0044

Elevation of privilege in Android (CVE-2024-0044) #shorts #breaking

2024-06-18

CVE-2024-29855

hard-coded JWT secret allowing authentication bypass (CVE-2024-29855) #shorts #breaking

2024-06-17

CVE-2024-27828

buffer overflow (CVE-2024-27828) #shorts #breaking

2024-06-16

CVE-2024-37051

GitHub access token compromise (CVE-2024-37051) #shorts #breaking

2024-06-15

CVE-2024-27850

webpage handler information disclosure (CVE-2024-27850) #shorts #breaking

2024-06-14

CVE-2024-27857

critical information disclosure (CVE-2024-27857) #shorts #breaking

2024-06-13

CVE-2024-27805

Environment Variable Information Disclosure (CVE-2024-27805) #shorts #breaking

2024-06-12

CVE-2024-29849

authentication bypass (CVE-2024-29849) #shorts #breaking

2024-06-11

CVE-2024-27851

buffer overflow (CVE-2024-27851) #shorts #breaking

2024-06-10

CVE-2024-4577

PHP-CGI OS Command Injection (CVE-2024-4577) #shorts #breaking

2024-06-07

CVE-2024-36048

Predictable PRNG seeding in QAbstractOAuth (CVE-2024-36048) #shorts #breaking

2024-06-06

CVE-2023-20938

use after free in Android Binder (CVE-2023-20938) #shorts #breaking

2024-06-05

CVE-2024-4358

Authentication Bypass by Spoofing (CVE-2024-4358) #shorts #breaking

2024-06-02

CVE-2024-35195

Incorrect control flow implementation in requests library (CVE-2024-35195) #shorts #breaking

2024-06-01

CVE-2024-1086

use-after-free in netfilter: nf_tables (CVE-2024-1086) #shorts #breaking

2024-05-30

CVE-2024-24919

information disclosure in Check Point VPN products (CVE-2024-24919) #shorts #breaking

2024-05-29

CVE-2024-5274

Type Confusion in V8 (CVE-2024-5274) #shorts #breaking

2024-05-24

CVE-2024-4985

authentication bypass (CVE-2024-4985) #shorts #breaking

2024-05-22

CVE-2024-4323

Heap-based Buffer Overflow in Fluent Bit (CVE-2024-4323) #shorts #breaking

2024-05-17

CVE-2024-34397

D-Bus signal spoofing in GLib (CVE-2024-34397) #shorts #breaking

2024-05-16

CVE-2024-4317

unauthorized escalated privileges in PostgreSQL (CVE-2024-4317) #shorts #breaking

2024-05-14

CVE-2024-4559

Heap buffer overflow in WebAudio (CVE-2024-4559) #shorts #breaking

2024-05-13

CVE-2023-49606

use-after-free in HTTP Connection Headers parsing (CVE-2023-49606) #shorts #breaking

2024-05-13

CVE-2024-4671

Use after free in Google Chrome Visuals component (CVE-2024-4671) #shorts #breaking

2024-05-12

CVE-2024-4671

Use after free in Visuals in Google Chrome (CVE-2024-4671) #shorts #breaking

2024-05-12

CVE-2024-2876

SQL Injection (CVE-2024-2876) #shorts #breaking

2024-05-12

CVE-2024-2876

SQL Injection (CVE-2024-2876) #shorts #breaking