WordPress Paid Member Subscriptions Plugin <= 2.11.1 is vulnerable to Broken Access Control

Software Paid Member Subscriptions Type Plugin Vulnerable versions = 2.11.1 Fixed in 2.11.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1390 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6361d41c5a14 Credits Lucio Sá Required...

WordPress WP Setup Wizard Plugin <= 1.0.8.1 is vulnerable to Sensitive Data Exposure

Software WP Setup Wizard Type Plugin Vulnerable versions = 1.0.8.1 Fixed in 1.0.8.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-25917 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 5a05aed5e6cb Credits Dave Jong Patchstack...

PostgreSQL 12.x < 12.18 / 13.x < 13.14 / 14.x < 14.11 / 15.x < 15.6 SQL Injection

The version of PostgreSQL installed on the remote host is 12 prior to 12.18, 13 prior to 13.14, 14 prior to 14.11, or 15 prior to 15.6. It is, therefore, affected by following vulnerability: - Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to...

CVE-2023-20579

creationtimestamp| type| source ---|---|--- 2024-02-13 21:31:46+00:00| seen| https://t.me/ctinow/184228 2025-03-14 17:48:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7610...

CVE-2014-3655

creationtimestamp| type| source ---|---|--- 2024-02-13 14:02:27+00:00| seen| https://t.me/ctinow/183823...

CVE-2024-22126

creationtimestamp| type| source ---|---|--- 2024-02-13 03:21:37+00:00| seen| https://t.me/ctinow/183582 2025-02-14 10:01:38+00:00| seen| Telegram/5m0bsIrq9XuwAfgpYHfzeZtvT9Xv8CAzQGcVGl2ry5agsGrd...

QR Code Scam: Fake Voicemails Target Users, 1000 Attacks in 14 Days

By Deeba Ahmed Fake Voicemail Phishing on the Rise: Check Point Reveals How Hackers are Exploiting Corporate Phone Systems. This is a post from HackRead.com Read the original post: QR Code Scam: Fake Voicemails Target Users, 1000 Attacks in 14 Days...

CVE-2024-0646

creationtimestamp| type| source ---|---|--- 2024-02-10 21:16:31+00:00| seen| https://t.me/ctinow/182643 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...

GHSA-78XJ-CGH5-2H22 vulnerabilities

Vulnerabilities for packages: renovate, npm, sqlpad, lerna, node-gyp...

CVE-2023-42282 vulnerabilities

Vulnerabilities for packages: renovate, npm, sqlpad, lerna, node-gyp...

PostgreSQL 12.x < 12.18, 13.x < 13.14, 14.x < 14.11, 15.x < 15.6, 16.x < 16.1 Privilege Escalation Vulnerability - Windows

PostgreSQL is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PostgreSQL 12.x < 12.18, 13.x < 13.14, 14.x < 14.11, 15.x < 15.6, 16.x < 16.1 Privilege Escalation Vulnerability - Linux

PostgreSQL is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SUSE CVE-2023-42833

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. Processing web content may lead to arbitrary code execution...

CVE-2024-24593

creationtimestamp| type| source ---|---|--- 2024-02-06 16:22:13+00:00| seen| https://t.me/ctinow/180097 2024-02-11 21:56:38+00:00| published-proof-of-concept| https://t.me/pwnai/114 2024-02-15 19:17:14+00:00| seen| https://t.me/ctinow/185802 2024-03-01 10:17:03+00:00| seen|...

CVE-2019-8131

creationtimestamp| type| source ---|---|--- 2024-02-04 14:41:17+00:00| seen| https://t.me/ctinow/178833...

CVE-2024-1039

creationtimestamp| type| source ---|---|--- 2024-02-01 23:26:36+00:00| seen| https://t.me/ctinow/177824 2024-02-24 10:11:20+00:00| seen| https://t.me/ctinow/192523...

AZL-34075 CVE-2024-21626 affecting package kubevirt for versions less than 0.59.0-14

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process from runc exec to have a working directory in the host filesystem...

AZL-34083 CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

CVE-2024-22305

creationtimestamp| type| source ---|---|--- 2024-01-31 13:32:25+00:00| seen| https://t.me/ctinow/176719 2024-02-22 14:12:24+00:00| seen| https://t.me/ctinow/190735...

CVE-2023-29055

creationtimestamp| type| source ---|---|--- 2024-01-29 14:31:24+00:00| seen| https://t.me/ctinow/175255 2024-02-21 14:41:51+00:00| seen| https://t.me/ctinow/189634 2025-02-13 20:12:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4334...