CVE CyberSecurity Database News (Page 381)

Jan 13, 2025 Windows Exploit Java

CVE-2025-0401 - Critical Path Traversal Vulnerability in reggie 1. - How the “name” Argument in download() Opens Your Server to Attack

A new critical security flaw has been found in the open-source project reggie version 1., a popular Java-based backend. The flaw, now tracked

Jan 11, 2025 Exploit

CVE-2024-57881 - Deep Dive into a Linux Kernel Memory Vulnerability — Understanding the Fix in `split_large_buddy()`

A new Linux kernel vulnerability has been patched under the identifier CVE-2024-57881. This vulnerability revolved around improper handling of physical frame number (PFN)

Jan 11, 2025

CVE-2024-57850 - Exploiting rtime Decompression Memory Corruption in Linux JFFS2

In June 2024, a critical vulnerability was patched in the Linux kernel’s JFFS2 file system implementation. Identified as CVE-2024-57850, this bug allows

Jan 11, 2025 Exploit

CVE-2024-57876 - Race Condition in Linux Kernel DRM DP MST Message State Handling – Vulnerability Explained and Exploit Details

--- Overview CVE-2024-57876 is a critical vulnerability found in the Linux kernel DRM (Direct Rendering Manager) subsystem, specifically in the DisplayPort Multi-Stream Transport

Jan 11, 2025 Exploit

CVE-2024-57849 - Linux Kernel s390 CPU Hotplug Use-After-Free Vulnerability Explained

CVE-2024-57849 is a recently resolved vulnerability in the Linux kernel affecting the IBM s390 mainframe CPU measurement sampling facility (*cpum_sf*). The bug