7943 matches found
AZL-49123 CVE-2024-43799 affecting package reaper for versions less than 3.1.1-13
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...
CVE-2024-1744
creationtimestamp| type| source ---|---|--- 2024-09-06 15:46:06+00:00| seen| https://t.me/cvedetector/4966...
CVE-2024-8467
creationtimestamp| type| source ---|---|--- 2024-09-05 16:22:13+00:00| seen| https://t.me/cvedetector/4912...
CVE-2024-34637
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background...
CVE-2024-34637
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background...
CVE-2024-34637
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background...
CVE-2024-34637
CVE-2024-34637 affects WindowManagerService in certain Android releases (Android 12 SMR Sep-2024 Release 1; Android 13/14 SMR Jun/Sep 2024 releases). The vulnerability is an improper access control that allows local attackers to bypass restrictions on starting services from the background. Connec...
HP Intelligent Management SOM FileDownloadServlet Arbitrary Download
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP Intelligent Management SOM FileDownloadServlet Arbitrary Download', 'Description' = %q This module exploits a lack of authentication and acces...
WebPageTest Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebPageTest Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in WebPageTest. Due to the wa...
HP Intelligent Management IctDownloadServlet Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP Intelligent Management IctDownloadServlet Directory Traversal', 'Description' = %q This module exploits a lack of authentication and a directo...
HP Intelligent Management SOM Account Creation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP Intelligent Management SOM Account Creation', 'Description' = %q This module exploits a lack of authentication and access control in HP...
Oracle Linux 8 : postgresql:13 (ELSA-2024-6018)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6018 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 13.16-1 - Update to 13.16 - Fix CVE-2024-7348 Tenable has extracted the preceding description block directly fr...
PT-2024-31210 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: Seacms version 13 Description: The issue is related to Cross Site Scripting XSS via the admin-video.php endpoint. This allows for potential malicious script execution. No information is provided about the estimated number of potentially...
CVE-2024-5622
creationtimestamp| type| source ---|---|--- 2024-08-29 13:42:45+00:00| seen| https://t.me/cvedetector/4384...
AlmaLinux 8 : postgresql:13 (ALSA-2024:6018)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6018 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 Tenable has extracted the preceding description block directly from...
CVE-2024-34198
creationtimestamp| type| source ---|---|--- 2024-08-28 17:38:13+00:00| seen| https://t.me/cvedetector/4327...
CVE-2024-43913
creationtimestamp| type| source ---|---|--- 2024-08-26 13:42:36+00:00| seen| https://t.me/cvedetector/4112...
CVE-2023-22576
creationtimestamp| type| source ---|---|--- 2024-08-21 13:13:41+00:00| seen| https://t.me/cvedetector/3765...
CVE-2023-26324
creationtimestamp| type| source ---|---|--- 2024-08-21 09:55:52+00:00| published-proof-of-concept| https://t.me/poxek/4313 2024-08-21 11:45:33+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/9048 2024-08-21 15:24:08+00:00| published-proof-of-concept|...
