JVN#94347255: JP1/Extensible SNMP Agent fails to restrict access permissions

JP1/Extensible SNMP Agent provided by Hitachi fails to restrict access permissions CWE-276. Impact If an authenticated attacker who can log in to the product places a specially crafted DLL file in a specific directory, arbitrary code may be executed with the administrative privilege. Solution...

CVE-2024-38366

creationtimestamp| type| source ---|---|--- 2024-07-02 16:00:07+00:00| seen| https://t.me/truesecator/5924 2026-07-26 02:02:08+00:00| seen| https://t.me/EchelonEyes/2908 2026-07-27 00:00:46+00:00| seen| https://t.me/EchelonEyes/2908 2026-07-28 00:00:42+00:00| published-proof-of-concept|...

CVE-2024-3330

creationtimestamp| type| source ---|---|--- 2024-07-02 11:12:42+00:00| published-proof-of-concept| https://t.me/HackingInsights/4454...

CVE-2024-37393

creationtimestamp| type| source ---|---|--- 2024-06-10 12:48:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7588 2026-02-18 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-02-18 2026-02-23 00:00:00+00:00| exploited| The Shadowserver...

GHSA-6FQW-J3VM-7F66 Zendframework1 Potential SQL injection in ORDER and GROUP functions

The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution that identifies and removes comments prior to checking validity of the statement to ensur...

Zendframework1 Potential SQL injection in ORDER and GROUP functions

The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution that identifies and removes comments prior to checking validity of the statement to ensur...

CVE-2023-20938

creationtimestamp| type| source ---|---|--- 2024-06-04 18:48:59+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10625 2024-06-13 23:24:17+00:00| published-proof-of-concept| https://t.me/linkersec/254 2024-07-28 20:20:04+00:00| published-proof-of-concept|...

CVE-2024-24619

creationtimestamp| type| source ---|---|--- 2024-06-02 11:54:32+00:00| seen| https://t.me/whoisAlixan/1843...

CVE-2023-05857

creationtimestamp| type| source ---|---|--- 2024-06-02 04:21:22+00:00| seen| Telegram/IkaXyGRzjLGciKhOw34Boi3zU16le4mKP46Wn6noa9qCRI...

CVE-2024-22273

creationtimestamp| type| source ---|---|--- 2024-05-30 09:14:27+00:00| seen| https://t.me/CyberSecurity026/4856 2025-03-02 11:46:30+00:00| seen| Telegram/PuQwCHlCIT2RGR7Hpb0MZmwOeJH932D1mkObQoUF0cPLHwXH...

CVE-2024-32002

creationtimestamp| type| source ---|---|--- 2024-05-16 13:18:50+00:00| published-proof-of-concept| https://t.me/HackingInsights/544 2024-05-18 01:07:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7329 2024-05-18 07:30:24+00:00| published-proof-of-concept| https://t.me/cKure/1293...

Slackware: Security Advisory (SSA:2024-136-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-34352

creationtimestamp| type| source ---|---|--- 2024-05-09 14:06:03+00:00| published-proof-of-concept| https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-f8ch-w75v-c847 2025-02-07 18:02:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3798...

vnba.org.vn Cross Site Scripting vulnerability OBB-3925965

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2016-3068

creationtimestamp| type| source ---|---|--- 2024-05-02 22:15:37+00:00| seen| https://t.me/arpsyndicate/4908...

CVE-2016-7146

creationtimestamp| type| source ---|---|--- 2024-05-02 21:00:52+00:00| seen| https://t.me/arpsyndicate/4899...

CVE-2024-33103

An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by uploading a crafted SVG file. NOTE: as noted in the 4267 issue reference, there is a position that exploitability can only occur with a misconfiguration of t...

CVE-2024-29963

creationtimestamp| type| source ---|---|--- 2024-04-27 12:40:04+00:00| seen| https://t.me/truesecator/5687 2025-02-06 02:41:37+00:00| seen| Telegram/-bHnmI-dk1YZIC4esUEmXLbm4CPvdcoWT8kG0cZ1Gd-6YvN...

CVE-2024-29966

creationtimestamp| type| source ---|---|--- 2024-04-27 12:40:04+00:00| seen| https://t.me/truesecator/5687 2025-02-06 02:41:37+00:00| seen| Telegram/lKzIG15imPFbZBHlpqD1YHQqCE1HLS7BjotyAAODNuAYo3Cy...

CVE-2024-2859

creationtimestamp| type| source ---|---|--- 2024-04-27 12:40:04+00:00| seen| https://t.me/truesecator/5687 2025-02-21 17:18:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4929 2025-02-21 22:10:26+00:00| seen| Telegram/JpUxJymdsct7qrtpIvSS2H2XFvZ3eTI8Y1icwFW-YO9IwdR...