@thecvefoundation “CVE” is a registered mark owned by MITRE and tied to the official CVE Program. Did you get permission to use the name? If not, that’s a serious concern. Who’s behind this initiative? How are you structured and funded? Transparency matters in vuln coordination.

#cve #mitre

Replied in thread

**Bendik J. I. Iversen** @bendikiversen@infosec.exchange · 10h

10h

Bendik J. I. Iversen @bendikiversen@infosec.exchange

#cve #mitre

**Lambda Watchdog** @lambdawatchdog@mastodon.social · 11h

11h

Lambda Watchdog @lambdawatchdog@mastodon.social

Lambda Watchdog CVE Report
Latest AWS Lambda image scan detected 10 CVEs across 25 images:
• Critical: 0
• High: 3
• Medium: 6
• Low: 1

Check the full report https://lambdawatchdog.com/
#AWS #Lambda #CVE #CloudSecurity #Serverless

lambdawatchdog.comLambda WatchdogAWS Lambda CVE dashboard

**Nicolas Fränkel** @frankel@mastodon.top · 13h

13h

Nicolas Fränkel @frankel@mastodon.top

#CVE program faces swift end after DHS fails to renew contract, leaving security flaw tracking in limbo

https://www.csoonline.com/article/3963190/cve-program-faces-swift-end-after-dhs-fails-to-renew-contract-leaving-security-flaw-tracking-in-limbo.html

CSO OnlineCVE program faces swift end after DHS fails to renew contract, leaving security flaw tracking in limboMITRE’s 25-year-old Common Vulnerabilities and Exposures (CVE) program will end April 16 after DHS did not renew its funding contract for reasons unspecified. Experts say ending the program, which served as the crux for most cybersecurity defense programs, is a tragedy.

#cybersecurity

**Hacker News** @h4ckernews@mastodon.social · 20h

20h

Hacker News @h4ckernews@mastodon.social

Can We Trust CVE?

https://opensourcesecurity.io/2025/04-can-we-trust-cve/

Open Source Security · 1dCan we trust CVE?If you are a security nerd, and even if you’re not, you probably heard about the epic CVE mess that happened. It’s a very long story and was covered in many places, but the TL;DR was the funding for CVE fell through, panic ensued, then CISA found some temporary funds to keep the lights, so everything is fine and we can all go back to normal. Well, some of us won’t go back to normal because the CISA funding is good for 11 months. Will there be more funding in 11 months? Will an asteroid destroy the Earth in 2032? Will society still exists at Christmas? Nobody really knows. Well that asteroid one, we sort of know that. We’ll be fine. Yay science!

#HackerNews #CVE #Trust

**DACBARBOS Brand** @dacbarbos@mastodon.social · 23h

23h

DACBARBOS Brand @dacbarbos@mastodon.social

CVE Foundation Launched to Secure the Future of the CVE Program https://www.thecvefoundation.org #cve #infosec #news

www.thecvefoundation.orgCVE FoundationFOR IMMEDIATE RELEASE April 16, 2025 CVE Foundation Launched to Secure the Future of the CVE Program [Bremerton, Washington] – The CVE Foundation has been formally established to ensure the long-term viability, stability, and independence of the Common Vulnerabilities and Exposures (CVE) Program, a

**Daily-CVE** @CyberSignaler@mastodon.social · 23h

23h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3820 - Tenda W12 and i24 Remote Stack-Based Buffer Overflow April 19, 2025 at 09:15PM https://ift.tt/2uAI1bm #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 1dCVE-2025-3820 - Tenda W12 and i24 Remote Stack-Based Buffer OverflowA vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheckSet of the file /bin/httpd. The manipulation of the argument hostIp1/hostIp2 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the …

**Daily-CVE** @CyberSignaler@mastodon.social · 1d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-43917 - Pritunl Client Privilege Escalation Vulnerability April 19, 2025 at 07:15PM https://ift.tt/QoKlM9f #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 1dCVE-2025-43917 - Pritunl Client Privilege Escalation VulnerabilityIn Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product. Specifically, an administrator can insert a new file at the pathname of the removed pritunl-service file. This file then is executed by a LaunchDaemon as root.

**Pyrzout** @jos1264@social.skynetcloud.site · 1d

Pyrzout @jos1264@social.skynetcloud.site

Vulnerabilidad Windows NTLM explotada para robo de hashes https://blog.elhacker.net/2025/04/windows-vulnerabilidad-ntlm-robo-hash.html #vulnerabilidad #Windows #hash #NTLM #cve

Blog elhacker.NETVulnerabilidad Windows NTLM explotada para robo de hashesBlog sobre informática, tecnología y seguridad con manuales, tutoriales y documentación sobre herramientas y programas

**Pyrzout** @jos1264@social.skynetcloud.site · 1d

Pyrzout @jos1264@social.skynetcloud.site

Vulnerabilidad en Cisco Webex permite ejecutar código mediante enlaces de reuniones https://blog.elhacker.net/2025/04/vulnerabilidad-en-cisco-webex-rce-link-reuniones.html #vulnerabilidad #cisco #webex #cve #rce

Blog elhacker.NETVulnerabilidad en Cisco Webex permite ejecutar código mediante enlaces de reunionesBlog sobre informática, tecnología y seguridad con manuales, tutoriales y documentación sobre herramientas y programas

**Daily-CVE** @CyberSignaler@mastodon.social · 1d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3803 - Tenda W12 and i24 Stack-Based Buffer Overflow Vulnerability April 19, 2025 at 03:15PM https://ift.tt/mVaRn3p #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 1dCVE-2025-3803 - Tenda W12 and i24 Stack-Based Buffer Overflow VulnerabilityA vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The manipulation of the argument rebootDate leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the …

**Daily-CVE** @CyberSignaler@mastodon.social · 1d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3802 - Tenda W12 and i24 HTTPd cgiPingSet Stack-Based Buffer Overflow April 19, 2025 at 03:15PM https://ift.tt/JUSsqkN #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 1dCVE-2025-3802 - Tenda W12 and i24 HTTPd cgiPingSet Stack-Based Buffer OverflowA vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulnerability affects the function cgiPingSet of the file /bin/httpd. The manipulation of the argument pingIP leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the …

**Manuel 'HonkHase' Atug** @HonkHase@chaos.social · 1d

Manuel 'HonkHase' Atug @HonkHase@chaos.social

Für die @AG_KRITIS bin ich jetzt bei Deutschlandfunk in Computer und Kommunikation dabei zum Thema #CVE Schwachstellen Datenbank und der Machtübernahme in den USA.
https://www.deutschlandfunk.de/computer-und-kommunikation-100.html