https://vulnerability.circl.lu/sightings/feed 2026-05-06T16:36:16.585397+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4c00373d-4b00-4f02-9618-1e481f2d8059/export 2026-05-06T16:36:16.739624+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "4c00373d-4b00-4f02-9618-1e481f2d8059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58109", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10661", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58109\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:35:12.667Z\n\ud83d\udccf Modified: 2025-04-07T03:35:12.667Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:40.000000Z"} 2025-04-07T03:44:40+00:00 https://vulnerability.circl.lu/sighting/0b7ac045-714e-4e64-9b89-417c89da32b4/export 2026-05-06T16:36:16.739537+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "0b7ac045-714e-4e64-9b89-417c89da32b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58108", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10662", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58108\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:34:16.940Z\n\ud83d\udccf Modified: 2025-04-07T03:34:16.940Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:41.000000Z"} 2025-04-07T03:44:41+00:00 https://vulnerability.circl.lu/sighting/b655181f-cd16-402b-adb1-8089f4928ebd/export 2026-05-06T16:36:16.739458+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "b655181f-cd16-402b-adb1-8089f4928ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58107", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10663", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58107\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:33:15.998Z\n\ud83d\udccf Modified: 2025-04-07T03:33:15.998Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:42.000000Z"} 2025-04-07T03:44:42+00:00 https://vulnerability.circl.lu/sighting/44460813-1e49-4959-9b74-a0dfedb0a8fb/export 2026-05-06T16:36:16.739372+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "44460813-1e49-4959-9b74-a0dfedb0a8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58106", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58106\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-04-07T03:31:45.797Z\n\ud83d\udccf Modified: 2025-04-07T03:31:45.797Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/4/", "creation_timestamp": "2025-04-07T03:44:46.000000Z"} 2025-04-07T03:44:46+00:00 https://vulnerability.circl.lu/sighting/1844349f-cd9b-40f1-97dd-1c4126f88c5c/export 2026-05-06T16:36:16.739285+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "1844349f-cd9b-40f1-97dd-1c4126f88c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrda2vmu22", "content": "", "creation_timestamp": "2025-05-05T16:16:29.029882Z"} 2025-05-05T16:16:29.029882+00:00 https://vulnerability.circl.lu/sighting/8da2b800-e47f-4dbf-a219-25dc79aa1ea8/export 2026-05-06T16:36:16.739185+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "8da2b800-e47f-4dbf-a219-25dc79aa1ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58100", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58100\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: check changes_pkt_data property for extension programs\n\nWhen processing calls to global sub-programs, verifier decides whether\nto invalidate all packet pointers in current state depending on the\nchanges_pkt_data property of the global sub-program.\n\nBecause of this, an extension program replacing a global sub-program\nmust be compatible with changes_pkt_data property of the sub-program\nbeing replaced.\n\nThis commit:\n- adds changes_pkt_data flag to struct bpf_prog_aux:\n - this flag is set in check_cfg() for main sub-program;\n - in jit_subprogs() for other sub-programs;\n- modifies bpf_check_attach_btf_id() to check changes_pkt_data flag;\n- moves call to check_attach_btf_id() after the call to check_cfg(),\n because it needs changes_pkt_data flag to be set:\n\n bpf_check:\n ... ...\n - check_attach_btf_id resolve_pseudo_ldimm64\n resolve_pseudo_ldimm64 --> bpf_prog_is_offloaded\n bpf_prog_is_offloaded check_cfg\n check_cfg + check_attach_btf_id\n ... ...\n\nThe following fields are set by check_attach_btf_id():\n- env->ops\n- prog->aux->attach_btf_trace\n- prog->aux->attach_func_name\n- prog->aux->attach_func_proto\n- prog->aux->dst_trampoline\n- prog->aux->mod\n- prog->aux->saved_dst_attach_type\n- prog->aux->saved_dst_prog_type\n- prog->expected_attach_type\n\nNeither of these fields are used by resolve_pseudo_ldimm64() or\nbpf_prog_offload_verifier_prep() (for netronome and netdevsim\ndrivers), so the reordering is safe.\n\ud83d\udccf Published: 2025-05-05T14:53:33.445Z\n\ud83d\udccf Modified: 2025-05-09T08:06:09.147Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/7197fc4acdf238ec8ad06de5a8235df0c1f9c7d7\n2. https://git.kernel.org/stable/c/3846e2bea565ee1c5195dcc625fda9868fb0e3b3\n3. https://git.kernel.org/stable/c/81f6d0530ba031b5f038a091619bf2ff29568852", "creation_timestamp": "2025-05-09T08:25:24.000000Z"} 2025-05-09T08:25:24+00:00 https://vulnerability.circl.lu/sighting/228348bd-208d-4d41-863e-13e80d36775b/export 2026-05-06T16:36:16.739095+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "228348bd-208d-4d41-863e-13e80d36775b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58101", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16405", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58101\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T19:55:09.386Z\n\ud83d\udd17 References:\n1. https://www.tarlogic.com/blog/cve-2024-58101", "creation_timestamp": "2025-05-14T20:32:35.000000Z"} 2025-05-14T20:32:35+00:00 https://vulnerability.circl.lu/sighting/32f1283a-eb03-4045-ab94-f8980997cd4e/export 2026-05-06T16:36:16.738995+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "32f1283a-eb03-4045-ab94-f8980997cd4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wgrfos2w", "content": "", "creation_timestamp": "2025-05-14T22:57:22.831800Z"} 2025-05-14T22:57:22.831800+00:00 https://vulnerability.circl.lu/sighting/7a64b880-c702-48e1-b13c-51b326281d77/export 2026-05-06T16:36:16.738170+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "7a64b880-c702-48e1-b13c-51b326281d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58101", "type": "seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3m33435oanj2u", "content": "", "creation_timestamp": "2025-10-13T11:24:21.575821Z"} 2025-10-13T11:24:21.575821+00:00 https://vulnerability.circl.lu/sighting/4891521c-8efe-41f3-b16c-331b7677d9b0/export 2026-05-06T16:36:16.735688+00:00 Joseph Lee http://vulnerability.circl.lu/user/syspect {"uuid": "4891521c-8efe-41f3-b16c-331b7677d9b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-58100", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"} 2026-03-19T00:00:00+00:00