Aggregator

CVE-2024-56757 | Linux Kernel up to 6.12.7 Bluetooth denial of service (EUVD-2024-53400 / Nessus ID 232303)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.12.7. It has been rated as problematic. This issue affects some unknown processing of the component Bluetooth. Performing manipulation results in denial of service. This vulnerability was named CVE-2024-56757. The attack may be carried out on the physical device. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2024-57901 | Linux Kernel up to 6.12.8 net/core/skbuff.c vlan_get_protocol_dgram denial of service (Nessus ID 216985 / WID-SEC-2025-0105)

Vuldb Updates
8 months 3 weeks ago
A vulnerability has been found in Linux Kernel up to 6.12.8 and classified as critical. This affects the function vlan_get_protocol_dgram of the file net/core/skbuff.c. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-57901. Access to the local network is required for this attack to succeed. There is no exploit available. The affected component should be upgraded.
vuldb.com

CVE-2024-57902 | Linux Kernel up to 6.12.8 af_packet net/core/skbuff.c vlan_get_tci denial of service (Nessus ID 216985 / WID-SEC-2025-0105)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as critical was found in Linux Kernel up to 6.12.8. This affects the function vlan_get_tci of the file net/core/skbuff.c of the component af_packet. Executing manipulation can lead to denial of service. This vulnerability is registered as CVE-2024-57902. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2024-57900 | Linux Kernel up to 6.12.8 rhashtable.h nf_register_net_hooks use after free (Nessus ID 216788 / WID-SEC-2025-0105)

Vuldb Updates
8 months 3 weeks ago
A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.8. Impacted is the function nf_register_net_hooks in the library include/linux/rhashtable.h. This manipulation causes use after free. This vulnerability is tracked as CVE-2024-57900. The attack is only possible within the local network. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-31992 | HCL MaxAI Assistant Special Character cross site scripting (KB0124424 / EUVD-2025-33884)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in HCL MaxAI Assistant. Affected by this vulnerability is an unknown functionality of the component Special Character Handler. Such manipulation leads to basic cross site scripting. This vulnerability is traded as CVE-2025-31992. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-52616 | HCL Unica up to 12.1.10 exposure of sensitive system information to an unauthorized control sphere (KB0124230 / EUVD-2025-33882)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in HCL Unica up to 12.1.10 and classified as problematic. This affects an unknown part. Executing manipulation can lead to exposure of sensitive system information to an unauthorized control sphere. This vulnerability is handled as CVE-2025-52616. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-11628 | jimit105 Project-Online-Shopping-Website up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64 Product Inventory /delete.php product_code sql injection (EUVD-2025-33883 / CNNVD-202510-1618)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in jimit105 Project-Online-Shopping-Website up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64. It has been classified as critical. This affects an unknown function of the file /delete.php of the component Product Inventory Handler. This manipulation of the argument product_code causes sql injection. The identification of this vulnerability is CVE-2025-11628. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Customer payment data stolen in Unity Technologies’s SpeedTree website compromise

Security Affairs
8 months 3 weeks ago
Malicious code on Unity Technologies’s SpeedTree site skimmed sensitive data from hundreds of customers, the company confirmed. Video game software development firm Unity Technologies revealed that malicious code on its SpeedTree website skimmed sensitive information from hundreds of customers, impacting users who accessed the compromised site. The company discovered on August 26, 2025, the presence […]
Pierluigi Paganini

Qilin

Dark Feed IO
8 months 3 weeks ago

You must login to view this content

cohenido

Hackers Leveraging Microsoft Edge Internet Explorer Mode to Gain Access to Users’ Devices

Cyber Security News
8 months 3 weeks ago

The cybersecurity landscape witnessed a concerning development as threat actors discovered a novel attack vector targeting Microsoft Edge’s Internet Explorer mode functionality. This sophisticated campaign emerged in August 2025, exploiting the inherent security weaknesses of legacy browser technology to compromise unsuspecting users’ devices. The attack represents a significant evolution in threat actor tactics, demonstrating their […]

The post Hackers Leveraging Microsoft Edge Internet Explorer Mode to Gain Access to Users’ Devices appeared first on Cyber Security News.

Tushar Subhra Dutta

Managed ad