5033 matches found
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-36971 Android Kernel Remote Code Execution Vulnerability CVE-2024-32113 Apache OFBiz Path Traversal Vulnerability These types of vulnerabilities are frequent...
Open WebUI Arbitrary File Upload + Path Traversal
Vulnerability Details Affected Vendor: Open WebUI Affected Product: Open WebUI Affected Version: 0.1.105 Platform: Debian 12 CWE Classification: CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', CWE-434: Unrestricted Upload of File with Dangerous Type CVE ID:...
CVE-2024-6477
creationtimestamp| type| source ---|---|--- 2024-08-03 09:14:36+00:00| seen| https://t.me/cvedetector/2383...
PT-2024-25531 · Cosy+ · Cosy+
Name of the Vulnerable Software and Affected Versions: Cosy+ devices versions 21.x below 21.2s10 Cosy+ devices versions 22.x below 22.1s3 Description: The issue is related to insecure permissions, where several processes are executed with elevated privileges. This is an example of Execution with...
PT-2024-25532 · Cosy+ · Cosy+
Name of the Vulnerable Software and Affected Versions: Cosy+ devices versions 21.x below 21.2s10 Cosy+ devices versions 22.x below 22.1s3 Description: The issue concerns the use of a unique key for encrypting configuration parameters in Cosy+ devices. This key is not unique per device in affected...
PT-2024-25529 · Cosy+ · Cosy+
Name of the Vulnerable Software and Affected Versions: Cosy+ devices versions 21.x through 21.2s9 Cosy+ devices versions 22.x through 22.1s2 Description: The issue concerns insecure permissions in Cosy+ devices, which can lead to information leakage through cookies. This problem is resolved in...
CVE-2024-33892
Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies. This is fixed in version 21.2s10 and 22.1s3...
CVE-2024-39633
creationtimestamp| type| source ---|---|--- 2024-08-01 23:47:26+00:00| seen| https://t.me/cvedetector/2275 2025-10-22 23:22:32+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m3syfknddc2b...
CVE-2024-41695
Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory...
CVE-2024-1286
creationtimestamp| type| source ---|---|--- 2024-07-30 09:02:54+00:00| seen| https://t.me/cvedetector/1993...
CVE-2024-1287
creationtimestamp| type| source ---|---|--- 2024-07-30 09:02:47+00:00| seen| https://t.me/cvedetector/1988...
CVE-2024-41695
Cybonet has a path traversal vulnerability (CWE-22) in PineApp Mail products, affecting Cybonet PineApp Mail Secure/Relay where pathname handling could be restricted to a restricted directory, potentially allowing unauthorized access. The issue is tied to improper limitation of a pathname to a re...
CVE-2024-41695 Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory...
CVE-2024-41695 Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory...
mySCADA MyPRO Authenticated Command Injection
class MetasploitModule 'mySCADA MyPRO Authenticated Command Injection CVE-2023-28384', 'Description' = %q Authenticated Command Injection in MyPRO MSFLICENSE, 'Author' = 'Michael Heinzl', Vulnerability discovery & MSF module 'References' = 'URL',...
Malicious code in atlasctf-21-prod-22 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bfee78d470601bcc72e8aa74eca9adb869998b939cff36a4a0dc6d12bfd8c297 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-5097 Malicious code in atlasctf-21-prod-22 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bfee78d470601bcc72e8aa74eca9adb869998b939cff36a4a0dc6d12bfd8c297 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2024-6793
creationtimestamp| type| source ---|---|--- 2024-07-22 23:41:12+00:00| seen| https://t.me/cvedetector/1489...