CVE-2024-57881 – Linux Kernel “pfn_to_page” NULL Pointer Dereference Vulnerability in Buddy Allocator

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: don’t call pfn_to_page() on possibly non-existent PFN in split_large_buddy() In split_large_buddy(), we might call pfn_to_page() on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last memory section, this could result with CONFIG_SPARSEMEM && !CONFIG_SPARSEMEM_EXTREME […]

Fake LDAPNightmware exploit on GitHub spreads infostealer malware

Fake LDAPNightmware exploit on GitHub spreads infostealer malware A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka “LDAPNightmare”) on GitHub infects users with infostealer malware that exfiltrates sensitive data to an external FTP server. The tact … Read more Published Date: Jan 11, 2025 (2 hours, 50 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2024-49113 CVE-2024-49112

CVE-2025-23126 – CVE-2021-36344: Apache Struts Code Injection Vulnerability

The following table lists the changes that have been made to the CVE-2025-23126 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action Type […]

CVE-2025-23127 – Here is the title: Android Permissions Denial of Service

The following table lists the changes that have been made to the CVE-2025-23127 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action Type […]

CVE-2025-23125 – “Apache Struts Cross-Site Request Forgery Vulnerability”

The following table lists the changes that have been made to the CVE-2025-23125 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action Type […]

CVE-2025-23124 – CVE-2022-4792: Dell EMC NetWorker Authentication Bypass Vulnerability

The following table lists the changes that have been made to the CVE-2025-23124 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action Type […]

CVE-2024-57880 – Intel ASoC SOF SDW Array Index Out-of-Bounds Vulnerability

The following table lists the changes that have been made to the CVE-2024-57880 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]

CVE-2024-57879 – Qualcomm Bluetooth Linux Module – Resource Leaking Vulnerability

The following table lists the changes that have been made to the CVE-2024-57879 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]

CVE-2024-57878 – Linux Kernel Arm64 Ptrace FPMR Initialization Leak

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR Currently fpmr_set() doesn’t initialize the temporary ‘fpmr’ variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will be written back to target->thread.uw.fpmr, potentially leaking up to 64 bits of […]