CVE-2024-24796

creationtimestamp| type| source ---|---|--- 2024-02-12 09:21:24+00:00| seen| https://t.me/ctinow/182958 2025-05-07 21:22:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15431...

zonefestival.com Cross Site Scripting vulnerability OBB-3851807

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vanesse.be Cross Site Scripting vulnerability OBB-3851780

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-25100

creationtimestamp| type| source ---|---|--- 2024-02-12 08:21:28+00:00| seen| https://t.me/ctinow/182939...

RHSA-2024:0769

creationtimestamp| type| source ---|---|--- 2024-02-12 02:16:19+00:00| seen| https://t.me/ctinow/182872...

WordPress ImageRecycle pdf & image compression Plugin <= 3.1.13 is vulnerable to Broken Access Control

Software ImageRecycle pdf & image compression Type Plugin Vulnerable versions = 3.1.13 Fixed in 3.1.14 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0984 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 35a4c2f10086 Credits Frances...

WordPress ImageRecycle pdf & image compression Plugin <= 3.1.13 is vulnerable to Cross Site Request Forgery (CSRF)

Software ImageRecycle pdf & image compression Type Plugin Vulnerable versions = 3.1.13 Fixed in 3.1.14 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1335 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 78d30d4717e8 Credi...

Debian: Security Advisory (DSA-5619-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Canto Plugin <= 3.0.6 is vulnerable to Remote Code Execution (RCE)

Software Canto Type Plugin Vulnerable versions = 3.0.6 Fixed in 3.0.7 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-25096 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 5a102fd4265b Credits Rodrigo Escobar ipax Required privilege...

WordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection

Software Malware Scanner Type Plugin Vulnerable versions = 4.7.2 Fixed in 4.7.3 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-25902 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 46c75a59070d Credits Le Ngoc Anh Required privilege Administrator...

maxweiss.com Cross Site Scripting vulnerability OBB-3851524

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-22504

creationtimestamp| type| source ---|---|--- 2024-02-11 12:20:51+00:00| seen| https://t.me/arpsyndicate/3360...

CVE-2024-23115

creationtimestamp| type| source ---|---|--- 2024-02-11 12:00:06+00:00| seen| https://t.me/arpsyndicate/3351 2025-03-12 17:41:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7352...

CVE-2024-25315

creationtimestamp| type| source ---|---|--- 2024-02-09 15:31:17+00:00| seen| https://t.me/ctinow/182073 2024-02-12 17:17:15+00:00| seen| https://t.me/ctinow/183255...

CVE-2024-25313

creationtimestamp| type| source ---|---|--- 2024-02-09 14:21:28+00:00| seen| https://t.me/ctinow/182029 2024-02-09 15:26:45+00:00| seen| https://t.me/ctinow/182058...

CVE-2024-25306

creationtimestamp| type| source ---|---|--- 2024-02-09 14:21:23+00:00| seen| https://t.me/ctinow/182025 2024-02-09 15:26:47+00:00| seen| https://t.me/ctinow/182059 2024-02-12 17:17:26+00:00| seen| https://t.me/ctinow/183264...

[SECURITY] Fedora 38 Update: gnutls-3.8.3-1.fc38

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

Debian dsa-5618 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5618 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5618...

CVE-2024-24497

creationtimestamp| type| source ---|---|--- 2024-02-08 22:26:08+00:00| seen| https://t.me/ctinow/181665 2024-02-12 17:17:32+00:00| seen| https://t.me/ctinow/183269...

PostgreSQL 12.x < 12.18, 13.x < 13.14, 14.x < 14.11, 15.x < 15.6, 16.x < 16.1 Privilege Escalation Vulnerability - Windows

PostgreSQL is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...