CVE-2024-7715 D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240812. It has been...

D-Link多款产品 命令注入漏洞

The D-Link DNS-320L, among others, is a NAS Network Attached Storage device from China-based AUO D-Link. A command injection vulnerability exists in various D-Link products, which stems from the incorrect operation of the parameter filter that can lead to command injection. The following products...

CVE-2024-42357

creationtimestamp| type| source ---|---|--- 2024-08-08 18:04:29+00:00| seen| https://t.me/cvedetector/2792 2025-04-16 01:49:06+00:00| seen| https://t.me/cvedetector/23032 2025-04-16 18:56:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12139...

CVE-2024-33897

A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024...

CVE-2024-7485

creationtimestamp| type| source ---|---|--- 2024-08-06 04:58:06+00:00| seen| https://t.me/cvedetector/2515...

CVE-2024-7484

creationtimestamp| type| source ---|---|--- 2024-08-06 04:58:05+00:00| seen| https://t.me/cvedetector/2514...

CVE-2024-7455

creationtimestamp| type| source ---|---|--- 2024-08-04 15:19:48+00:00| seen| https://t.me/cvedetector/2412...

CVE-2024-7452

creationtimestamp| type| source ---|---|--- 2024-08-04 06:58:28+00:00| seen| https://t.me/cvedetector/2408...

CVE-2024-7450

creationtimestamp| type| source ---|---|--- 2024-08-04 06:08:17+00:00| seen| https://t.me/cvedetector/2406...

GHSA-8M9J-2F32-2VX4

creationtimestamp| type| source ---|---|--- 2024-08-04 03:44:51+00:00| seen| https://t.me/androidMalware/2299...

CVE-2024-6331

creationtimestamp| type| source ---|---|--- 2024-08-04 02:47:52+00:00| seen| https://t.me/cvedetector/2405...

CVE-2024-6923

creationtimestamp| type| source ---|---|--- 2024-08-01 17:05:42+00:00| seen| https://t.me/cvedetector/2233 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

WordPress Swift Framework plugin < 2024.04.30 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Swift Framework Page Builder versions 2024.04.30...

WordPress plugin socialdriver-framework 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-23444

creationtimestamp| type| source ---|---|--- 2024-07-31 21:01:14+00:00| seen| https://t.me/cvedetector/2162 2025-04-04 23:37:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10588...

CVE-2024-41058 cachefiles: fix slab-use-after-free in fscache_withdraw_volume()

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in fscachewithdrawvolume We got the following issue in our fault injection stress test: ================================================================== BUG: KASAN: slab-use-after-free in...

CVE-2024-6096

creationtimestamp| type| source ---|---|--- 2024-07-24 16:38:50+00:00| seen| https://t.me/cvedetector/1562 2025-04-26 00:07:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13558...

AguardNet Space Management System Cross-Site Scripting Vulnerability

AguardNet Space Management System is a space management system from China-based AguardNet. A cross-site scripting vulnerability exists in AguardNet Space Management System versions prior to 2024-04-09-3302, which stems from not properly filtering user input, allowing a remote attacker with regula...

CVE-2024-6681

Affected product: witmy my-springsecurity-plus (up to 2024-07-04). Vulnerability: SQL injection via manipulation of the argument params.dataScope in the endpoint /api/dept, leading to potential remote exploitation. Multiple sources confirm the issue and public disclosure of the exploit. Impact (a...

CVE-2024-6679

CVE-2024-6679 affects witmy my-springsecurity-plus (up to 2024-07-04). The flaw exists in the /api/role endpoint where manipulating the argument params.dataScope enables SQL injection. It can be exploited remotely and the vulnerability has been publicly disclosed. Multiple sources (NVD, CVE List,...