CVE-2023-28369

creationtimestamp| type| source ---|---|--- 2025-01-22 17:01:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2584...

GHSA-9M5P-C77C-F9J7

creationtimestamp| type| source ---|---|--- 2025-01-22 17:01:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2579...

CVE-2025-23630

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo4tlal42f...

CVE-2025-23503

creationtimestamp| type| source ---|---|--- 2025-01-22 15:18:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo2o3vp32t 2025-01-22 20:01:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2624...

CVE-2024-54036

creationtimestamp| type| source ---|---|--- 2025-01-14 22:09:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1630...

CVE-2024-49699

creationtimestamp| type| source ---|---|--- 2025-01-14 12:49:56+00:00| seen| https://infosec.exchange/users/randomrobbie/statuses/113826791154115377 2025-01-21 13:59:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113866702059518211 2025-01-21 14:01:50+00:00| published-proof-of-concep...

AZL-54527 CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.55.0-22

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

Ivanti Secure Access 22.x Multiple Vulnerabilities

The Ivanti Secure Access installed on the remote host is 22.x. It is, therefore, affected by multiple vulnerabilities: - A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM. CVE-2023-38042 - A local privilege...

CVE-2024-54936

creationtimestamp| type| source ---|---|--- 2024-12-09 16:22:11+00:00| seen| https://t.me/cvedetector/12389...

Security Bulletin: Multiple security vulnerabilities in Python affect IBM Robotic Process Automation

Summary Multiple security vulnerabilities in Python affect IBM Robotic Process Automation. Python is used by IBM Robotic Process Automation as part of Watson NLP. This bulletin identifies the fixes to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2019-20916 DESCRIPTION: pypa pip...

CVE-2024-53566

An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...

CVE-2024-44786

creationtimestamp| type| source ---|---|--- 2024-11-22 16:18:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113527510294237086...

CVE-2024-7837

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Firmanet Software ERP allows SQL Injection. This issue affects ERP: through 22.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

WordPress PeachPay Payments Plugin <= 1.112.0 is vulnerable to Cross Site Scripting (XSS)

Software PeachPay Payments Type Plugin Vulnerable versions = 1.112.0 Fixed in 1.113.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11362 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2ab27db02ed0 Credits vgo0 Requir...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308link is external Apple Multiple Products Code Execution Vulnerability CVE-2024-44309link is external Apple Multiple Products Cross-Site Scripting XSS...

CVE-2024-52763

creationtimestamp| type| source ---|---|--- 2024-11-19 22:41:39+00:00| seen| https://t.me/cvedetector/11530...

CVE-2024-41969

creationtimestamp| type| source ---|---|--- 2024-11-18 10:41:44+00:00| seen| https://t.me/cvedetector/11304 2024-11-22 08:15:19+00:00| seen| https://t.me/icscert/960...

CVE-2024-47916

Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2024-45253

Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2024-47916

The CVE concerns the Boa web server with a path traversal (CWE-22) flaw due to improper limitation of a pathname to a restricted directory. Affected software is Boa web server; the root cause is incorrect pathname restriction that allows access outside the intended directory. Documented impact ce...