CVE-2024-57881 – Linux Kernel “pfn_to_page” NULL Pointer Dereference Vulnerability in Buddy Allocator
In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: don’t call pfn_to_page() on possibly non-existent PFN in split_large_buddy() In split_large_buddy(), we might call pfn_to_page() on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last memory section, this could result with CONFIG_SPARSEMEM && !CONFIG_SPARSEMEM_EXTREME […]
Fake LDAPNightmware exploit on GitHub spreads infostealer malware
Fake LDAPNightmware exploit on GitHub spreads infostealer malware A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka “LDAPNightmare”) on GitHub infects users with infostealer malware that exfiltrates sensitive data to an external FTP server. The tact … Read more Published Date: Jan 11, 2025 (2 hours, 50 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2024-49113 CVE-2024-49112
CVE-2025-23126 – CVE-2021-36344: Apache Struts Code Injection Vulnerability
The following table lists the changes that have been made to the CVE-2025-23126 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action Type […]
CVE-2025-23127 – Here is the title: Android Permissions Denial of Service
The following table lists the changes that have been made to the CVE-2025-23127 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action Type […]
CVE-2025-23125 – “Apache Struts Cross-Site Request Forgery Vulnerability”
The following table lists the changes that have been made to the CVE-2025-23125 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action Type […]
CVE-2025-23128 – CVE-2022-47713: VMware VMware Workstation – Inadequate Bounds Checking
CVE ID : CVE-2025-23128 Published : Jan. 11, 2025, 3:15 p.m. | 36 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more…
CVE-2025-23124 – CVE-2022-4792: Dell EMC NetWorker Authentication Bypass Vulnerability
The following table lists the changes that have been made to the CVE-2025-23124 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action Type […]
CVE-2024-57880 – Intel ASoC SOF SDW Array Index Out-of-Bounds Vulnerability
The following table lists the changes that have been made to the CVE-2024-57880 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]
CVE-2024-57879 – Qualcomm Bluetooth Linux Module – Resource Leaking Vulnerability
The following table lists the changes that have been made to the CVE-2024-57879 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]
CVE-2024-57878 – Linux Kernel Arm64 Ptrace FPMR Initialization Leak
In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR Currently fpmr_set() doesn’t initialize the temporary ‘fpmr’ variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will be written back to target->thread.uw.fpmr, potentially leaking up to 64 bits of […]