Save as PDF < 3.2.0 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. On the "Settings Save as PDF Basic...

Ungallery <= 2.2.4 - Stored XSS via CSRF

Description The plugin does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack Make a logged in admin open an HTML file containing the following: /" alert2' Save Changes...

CVE-2024-2448

creationtimestamp| type| source ---|---|--- 2024-04-17 17:20:42+00:00| published-proof-of-concept| https://t.me/HackerOne/3644 2024-04-18 04:46:49+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10351 2024-04-25 16:05:09+00:00| published-proof-of-concept|...

CVE-2024-31497

creationtimestamp| type| source ---|---|--- 2024-04-16 08:46:23+00:00| seen| https://t.me/habrcomnews/26965 2024-04-16 14:06:21+00:00| seen| https://t.me/KomunitiSiber/1793 2024-04-16 14:12:39+00:00| seen| https://t.me/RedTeamFeed/267 2024-04-16 14:49:01+00:00| seen|...

CVE-2024-27970

creationtimestamp| type| source ---|---|--- 2024-04-13 02:32:06+00:00| seen| https://t.me/arpsyndicate/4635...

AlmaLinux 9 : less (ALSA-2024:1692)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:1692 advisory. - closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE. CVE-2022-48624 Note that Nessus has not tested for this issue but has instead...

CVE-2023-6597

creationtimestamp| type| source ---|---|--- 2024-03-19 17:26:52+00:00| seen| https://t.me/ctinow/211728 2024-03-19 17:27:12+00:00| seen| https://t.me/ctinow/211745 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

CVE-2019-20208

creationtimestamp| type| source ---|---|--- 2024-03-19 09:36:50+00:00| seen| https://t.me/ctinow/211291 2025-03-06 02:17:24+00:00| seen| Telegram/9BhRqFViKddP2mM7WmytKNmAzgFzb6hGoDbAa07yV2hwmM...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2024-079-02)

The version of mozilla-firefox installed on the remote host is prior to 115.9.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-079-02 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could...

CVE-2024-2496

creationtimestamp| type| source ---|---|--- 2024-03-18 14:26:14+00:00| seen| https://t.me/ctinow/210546 2024-03-18 14:32:08+00:00| seen| https://t.me/ctinow/210563...

CVE-2024-2520

creationtimestamp| type| source ---|---|--- 2024-03-15 21:01:20+00:00| seen| https://t.me/ctinow/209123 2024-03-16 17:21:28+00:00| seen| https://t.me/ctinow/209620 2024-03-16 17:26:53+00:00| seen| https://t.me/ctinow/209625 2025-02-14 17:11:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/44...

CVE-2023-51369

creationtimestamp| type| source ---|---|--- 2024-03-15 16:21:51+00:00| seen| https://t.me/ctinow/208905 2024-03-15 16:26:31+00:00| seen| https://t.me/ctinow/208915 2025-02-14 10:03:12+00:00| seen| Telegram/HxzLfBu0S8kPkX15bRtSUvm7gk-e03q-xmcXXmHMDl-Xe0k...

CVE-2024-0433

creationtimestamp| type| source ---|---|--- 2024-03-14 23:02:03+00:00| seen| https://t.me/ctinow/208257 2025-02-14 09:47:00+00:00| seen| Telegram/9koTF0E6c8ArJFbYnw8DlXO9w1mVYoY6M4HpHHqrlTpSI9na...

CVE-2024-0432

creationtimestamp| type| source ---|---|--- 2024-03-14 22:26:25+00:00| seen| https://t.me/ctinow/208221 2025-02-14 09:47:00+00:00| seen| Telegram/8JH1kYJjeL41obz1z7lwWvJO4jE33u7cmdKeSWENoDFVMi3e...

CVE-2024-0173

creationtimestamp| type| source ---|---|--- 2024-03-13 18:21:50+00:00| seen| https://t.me/ctinow/206988 2024-03-13 18:27:38+00:00| seen| https://t.me/ctinow/207004 2025-02-01 17:28:10+00:00| seen| Telegram/sh3MEp49LjjPCRl96n9V-Iut47N0s39GlvDqnZUeMhgLozn...

CVE-2024-1751

creationtimestamp| type| source ---|---|--- 2024-03-13 17:36:56+00:00| seen| https://t.me/ctinow/206932 2026-02-10 21:03:00+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mejuea4qzd2i...

CVE-2024-1582

creationtimestamp| type| source ---|---|--- 2024-03-13 03:26:59+00:00| seen| https://t.me/ctinow/206357 2024-03-13 03:27:01+00:00| seen| https://t.me/ctinow/206359 2025-02-14 10:03:08+00:00| seen| Telegram/uyYQkN8-Pr9gONXJ9dCgmaCb5YZno39kLWnazZgVoJt90IEo...

CVE-2023-4839

creationtimestamp| type| source ---|---|--- 2024-03-13 03:26:58+00:00| seen| https://t.me/ctinow/206356 2024-03-13 03:27:00+00:00| seen| https://t.me/ctinow/206358 2025-02-14 10:03:08+00:00| seen| Telegram/od5o4I5TB6aBkP31Rl0rKpjZONubQKglZirxSK589mrBi...

CVE-2024-28098

creationtimestamp| type| source ---|---|--- 2024-03-12 20:26:33+00:00| seen| https://t.me/ctinow/206104 2024-03-12 20:26:39+00:00| seen| https://t.me/ctinow/206110 2024-03-12 21:46:24+00:00| seen| https://t.me/ctinow/206190 2024-04-09 19:53:01+00:00| seen| https://t.me/arpsyndicate/4408 2025-02-1...

CVE-2024-27237

creationtimestamp| type| source ---|---|--- 2024-03-11 20:26:43+00:00| seen| https://t.me/ctinow/205024 2025-02-18 21:11:31+00:00| seen| Telegram/0CTfQtYLZ2ub03XB3s1BZ5TyP3Me3COld2GoxAafxlcFc6Tm...