CVE-2024-9959

creationtimestamp| type| source ---|---|--- 2024-10-16 00:28:20+00:00| seen| https://t.me/cvedetector/7965 2026-07-05 21:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpwi76e35f23...

CVE-2024-9955

creationtimestamp| type| source ---|---|--- 2024-10-16 00:28:18+00:00| seen| https://t.me/cvedetector/7962 2024-10-31 20:28:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8905 2024-10-31 20:56:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8906 2026-07-05...

WordPress PublishPress Authors Plugin <= 4.7.1 is vulnerable to Privilege Escalation

Software PublishPress Authors Type Plugin Vulnerable versions = 4.7.1 Fixed in 4.7.2 OWASP Top 10 A4: Insecure Design Classification Privilege Escalation CVE CVE-2024-9215 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID dc9bff13d8f2 Credits wesley wcraft Required...

WordPress Miniorange OTP Verification with Firebase Plugin <= 3.6.0 is vulnerable to Broken Authentication

Software Miniorange OTP Verification with Firebase Type Plugin Vulnerable versions = 3.6.0 Fixed in 3.6.1 OWASP Top 10 A1: Broken Access Control Classification Broken Authentication CVE CVE-2024-9862 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 712edfb96dcd Credits...

CVE-2024-48282

creationtimestamp| type| source ---|---|--- 2024-10-15 16:06:16+00:00| seen| https://t.me/cvedetector/7919 2024-10-16 20:00:58+00:00| seen| https://t.me/arvinclub1/1153 2024-10-16 20:04:26+00:00| seen| https://t.me/ZeroEthicalCourse/1743...

CVE-2024-49388

Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49384

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49382

Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49383

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49383

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49384

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49387

Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49388

CVE-2024-49388 affects Acronis Cyber Protect 16 (Linux, Windows) prior to build 38690. The root cause is improper authorization, enabling manipulation of sensitive information and, per PT-2024-7387, potential privilege elevation and data exposure for a remote attacker. Public details across conne...

CVE-2024-49388

Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49387

Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49387

Acronis Cyber Protect 16 (Linux/Windows) is affected by a vulnerability in the acep-collector service where sensitive data is transmitted in cleartext before build 38690. The issue stems from unencrypted transmission within acep-collector, potentially exposing confidential information. Affected v...

CVE-2024-49387

Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49384

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49384

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49384

The CVE-2024-49384 issue affects Acronis Cyber Protect 16 (Linux and Windows) prior to build 38690, caused by the acep-collector service binding to an unrestricted IP address, creating an excessive attack surface. Technical details from PT-2024-33498 identify the vulnerable version range and root...