Aggregator

INC

Dark Feed IO
1 week 3 days ago

You must login to view this content

cohenido

INC

Dark Feed IO
1 week 3 days ago

You must login to view this content

cohenido

CVE-2022-49936 | Linux Kernel up to 5.19.7 USB usb_reset_device deadlock (EUVD-2022-55192 / WID-SEC-2025-1350)

Vuldb Updates
1 week 3 days ago
A vulnerability classified as critical has been found in Linux Kernel up to 5.19.7. Affected is the function usb_reset_device of the component USB. The manipulation leads to deadlock. This vulnerability is traded as CVE-2022-49936. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-49939 | Linux Kernel up to 5.19.7 binder binder_deferred_release use after free (EUVD-2022-55189 / WID-SEC-2025-1350)

Vuldb Updates
1 week 3 days ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.19.7. Affected is the function binder_deferred_release of the component binder. The manipulation leads to use after free. This vulnerability is traded as CVE-2022-49939. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-41237 | VMware Cloud Foundation Virtual Machine Communication Interface out-of-bounds write (Nessus ID 242168 / WID-SEC-2025-1576)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in VMware Cloud Foundation, vSphere Foundation, ESXi, Workstation, Fusion, Telco Cloud Platform and Telco Cloud Infrastructure. It has been classified as critical. This affects an unknown part of the component Virtual Machine Communication Interface. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-41237. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-41239 | VMware ESXi vSockets uninitialized resource (Nessus ID 242168 / WID-SEC-2025-1576)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in VMware ESXi, Cloud Foundation, Workstation, Fusion, Telco Cloud Platform, Telco Cloud Infrastructure and Tools. It has been rated as problematic. This issue affects some unknown processing of the component vSockets. The manipulation leads to uninitialized resource. The identification of this vulnerability is CVE-2025-41239. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-41236 | VMware ESXi VMXNET3 Virtual Network Adapter out-of-bounds write (Nessus ID 242168 / WID-SEC-2025-1576)

Vuldb Updates
1 week 3 days ago
A vulnerability classified as critical has been found in VMware ESXi, Cloud Foundation, Workstation, Fusion, Telco Cloud Platform and Telco Cloud Infrastructure. Affected is an unknown function of the component VMXNET3 Virtual Network Adapter. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2025-41236. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-56337 | Apache Tomcat up to 9.0.97/10.1.33/11.0.1 Incomplete Fix CVE-2024-50379 toctou (Nessus ID 213078 / WID-SEC-2024-3744)

Vuldb Updates
1 week 3 days ago
A vulnerability, which was classified as critical, was found in Apache Tomcat up to 9.0.97/10.1.33/11.0.1. This affects an unknown part of the component Incomplete Fix CVE-2024-50379. The manipulation leads to time-of-check time-of-use. This vulnerability is uniquely identified as CVE-2024-56337. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-50379 | Apache Tomcat up to 9.0.97/10.1.33/11.0.1 JSP Compilation toctou (Nessus ID 213078 / WID-SEC-2024-3722)

Vuldb Updates
1 week 3 days ago
A vulnerability has been found in Apache Tomcat up to 9.0.97/10.1.33/11.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component JSP Compilation. The manipulation leads to time-of-check time-of-use. This vulnerability is known as CVE-2024-50379. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-54677 | Apache Tomcat up to 9.9.97/10.1.33/11.0.1 Examples Web Application resource consumption (Nessus ID 213078 / WID-SEC-2024-3722)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Apache Tomcat up to 9.9.97/10.1.33/11.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the component Examples Web Application. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2024-54677. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-31650 | Apache Tomcat up to 9.0.102/10.1.39/11.0.5 HTTP Priority Header resource consumption (EUVD-2025-13627 / EDB-52318)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Apache Tomcat up to 9.0.102/10.1.39/11.0.5. It has been classified as problematic. Affected is an unknown function of the component HTTP Priority Header Handler. The manipulation leads to resource consumption. This vulnerability is traded as CVE-2025-31650. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-31651 | Apache Tomcat up to 9.0.102/10.1.39/11.0.5 Rewrite Rule escape, meta, or control sequences (EUVD-2025-13626 / Nessus ID 235034)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Apache Tomcat up to 9.0.102/10.1.39/11.0.5. It has been classified as problematic. This affects an unknown part of the component Rewrite Rule Handler. The manipulation leads to improper neutralization of escape, meta, or control sequences. This vulnerability is uniquely identified as CVE-2025-31651. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CISA Releases Three Industrial Control Systems Advisories

CISA News
1 week 3 days ago

CISA released three Industrial Control Systems (ICS) advisories on July 17, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

CISA

UNG0002 Actors Weaponize LNK Files via ClickFix Fake CAPTCHA Pages

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 week 3 days ago

Cybersecurity researchers at Seqrite Labs have identified a sophisticated espionage group designated as UNG0002 (Unknown Group 0002) that has been conducting persistent campaigns across multiple Asian jurisdictions since May 2024. The threat actors have demonstrated remarkable adaptability by integrating social engineering techniques with advanced malware deployment methods, specifically targeting organizations in China, Hong Kong, and […]

The post UNG0002 Actors Weaponize LNK Files via ClickFix Fake CAPTCHA Pages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2024-26875 | Linux Kernel up to 6.8.1 lib/dump_stack.c pvr2_context_disconnect use after free (Nessus ID 242218)

Vuldb Updates
1 week 3 days ago
A vulnerability classified as critical was found in Linux Kernel up to 6.8.1. Affected by this vulnerability is the function pvr2_context_disconnect in the library lib/dump_stack.c. The manipulation leads to use after free. This vulnerability is known as CVE-2024-26875. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad