4544 matches found
GHSA-7F2V-5877-RX3X
creationtimestamp| type| source ---|---|--- 2024-02-21 01:06:48+00:00| seen| https://t.me/ctinow/189063 2024-02-21 15:08:31+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3830...
GHSA-3QPQ-6W89-F7MX
creationtimestamp| type| source ---|---|--- 2024-02-21 00:56:29+00:00| seen| https://t.me/ctinow/189054 2024-02-21 14:12:47+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3797...
GHSA-8HP3-RMR7-XH88
creationtimestamp| type| source ---|---|--- 2024-02-21 00:56:28+00:00| seen| https://t.me/ctinow/189053 2024-02-21 15:13:17+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3834...
GHSA-VFPH-HJFV-CPV2
creationtimestamp| type| source ---|---|--- 2024-02-21 00:56:26+00:00| seen| https://t.me/ctinow/189051 2024-02-21 14:19:01+00:00| seen| https://t.me/arpsyndicate/3801...
GHSA-VJ36-3CCR-6563
creationtimestamp| type| source ---|---|--- 2024-02-21 00:56:22+00:00| seen| https://t.me/ctinow/189047 2024-02-21 15:22:23+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3841...
WordPress wpDataTables Plugin <= 3.4.2.4 is vulnerable to Cross Site Scripting (XSS)
Software wpDataTables Type Plugin Vulnerable versions = 3.4.2.4 Fixed in 3.4.2.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0591 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 8b3b0085c333 Credits stealthcopter Required...
CVE-2024-25366
creationtimestamp| type| source ---|---|--- 2024-02-20 17:25:42+00:00| seen| https://t.me/ctinow/188755 2024-02-21 14:45:59+00:00| seen| https://t.me/arpsyndicate/3818...
CVE-2019-18649
creationtimestamp| type| source ---|---|--- 2024-02-20 14:21:51+00:00| seen| https://t.me/ctinow/188508...
CVE-2023-49109
creationtimestamp| type| source ---|---|--- 2024-02-20 11:26:25+00:00| seen| https://t.me/ctinow/188360 2024-02-20 11:31:53+00:00| seen| https://t.me/ctinow/188367 2024-02-21 07:56:57+00:00| seen| https://t.me/arpsyndicate/3751 2024-03-03 17:05:08+00:00| published-proof-of-concept|...
CVE-2024-21891
Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack. This vulnerability affects all users using the experiment...
UBUNTU-CVE-2024-21891
Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack. This vulnerability affects all users using the experiment...
Path traversal
The permission model protects itself against path traversal attacks by calling path.resolve on any paths given by the user. If the path is to be treated as a Buffer, the implementation uses Buffer.from to obtain a Buffer from the result of path.resolve. By monkey-patching Buffer internals, namely...
CVE-2023-45913
creationtimestamp| type| source ---|---|--- 2024-02-20 02:01:26+00:00| seen| https://t.me/ctinow/188039 2025-08-16 12:53:21+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwjfyrpahs2g 2025-08-18 12:01:03+00:00| seen|...
CVE-2024-21891
Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack. This vulnerability affects all users using the experiment...
CVE-2024-21896
The permission model protects itself against path traversal attacks by calling path.resolve on any paths given by the user. If the path is to be treated as a Buffer, the implementation uses Buffer.from to obtain a Buffer from the result of path.resolve. By monkey-patching Buffer internals, namely...
CVE-2024-21890
The Node.js Permission Model does not clarify in the documentation that wildcards should be only used as the last character of a file path. For example: --allow-fs-read=/home/node/.ssh/.pub will ignore pub and give access to everything after .ssh/. This misleading documentation affects all users...
This Week in Spring - February 20th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you this fine 20th of February, 2024? I'm doing alright on this rainy 20th of Feburary here in San Francisco, and I hope you are too! We've got a ton of things to get into this week so let's dive right into it! Have y...
CVE-2024-1597
creationtimestamp| type| source ---|---|--- 2024-02-19 14:21:43+00:00| seen| https://t.me/ctinow/187681 2024-02-19 14:21:46+00:00| seen| https://t.me/ctinow/187684 2024-02-20 18:26:24+00:00| seen| https://t.me/arpsyndicate/3658 2024-02-22 12:46:47+00:00| seen| https://t.me/ctinow/190682 2024-03-2...
SUSE CVE-2024-21890
The Node.js Permission Model does not clarify in the documentation that wildcards should be only used as the last character of a file path. For example: --allow-fs-read=/home/node/.ssh/.pub will ignore pub and give access to everything after .ssh/. This misleading documentation affects all users...
