22 matches found
CVE-2026-24517
creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10 2026-02-27 02:31:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfso6cgu5u2e 2026-02-27 05:37:03+00:00| seen|...
CVE-2023-24517
creationtimestamp| type| source ---|---|--- 2025-09-07 09:54:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyagb7uaqz72...
CVE-2025-24517
CVE-2025-24517 affects CHOCO TEI WATCHER mini (IB-MCT001) all versions, with a use of client-side authentication vulnerability (CWE-603). A remote attacker could obtain the product login password without authentication, per multiple sources. The connected documents confirm the issue and its impac...
CVE-2025-24517
Use of client-side authentication issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a remote attacker may obtain the product login password without authentication...
CVE-2025-24517
Use of client-side authentication issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a remote attacker may obtain the product login password without authentication...
CVE-2025-24517
creationtimestamp| type| source ---|---|--- 2025-03-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04 2025-03-31 05:31:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9592 2025-03-31 09:09:22+00:00| seen| https://t.me/cvedetector/21558 2025-08-10...
CVE-2023-24517
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue unrestricted file upload to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms...
CVE-2023-24517 Remote Code Execution via Unrestricted File Upload
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue unrestricted file upload to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms...
CVE-2023-24517
Summary: CVE-2023-24517 affects the Pandora FMS File Manager component, enabling an unrestricted file upload that can be used to execute arbitrary system commands. Affected versions include Pandora FMS prior to 7.67 (notably v7.67 is cited as the fixed version). Root cause described in PT Securit...
CVE-2023-24517 Remote Code Execution via Unrestricted File Upload
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue unrestricted file upload to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms...
CVE-2020-24517
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
CVE-2020-24517
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
Security Updates for Microsoft Azure Site Recovery (March 2022)
The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2022-24517
creationtimestamp| type| source ---|---|--- 2022-03-09 20:17:58+00:00| seen| https://t.me/cibsecurity/38596...
CVE-2022-24517
CVE-2022-24517 affects Microsoft Azure Site Recovery (VMware-to-Azure recovery). The vulnerability enables remote code execution in the Azure Site Recovery component; CVSSv3.1: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (base 7.2), indicating network access with low complexity and high impact if exploit...
CVE-2022-24517 Azure Site Recovery Remote Code Execution Vulnerability
...
CVE-2021-24517
creationtimestamp| type| source ---|---|--- 2021-09-06 14:40:52+00:00| seen| https://t.me/cibsecurity/28286...
CVE-2021-24517 Stop Spammers Security < 2021.18 - Authenticated Stored XSS
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege users such as admin to set Cross-Site Scripting payloads in them even when the unfilteredhtml capability is disallowed...
CVE-2021-24517
The CVE-2021-24517 entry concerns the WordPress plugin Stop Spammers Security (before version 2021.18). The vulnerability arises because the plugin does not escape certain settings, enabling authenticated users with high privileges (e.g., admin) to inject Cross-Site Scripting payloads even when u...
Microsoft Internet Explorer - COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit)
$Id: iecreateobject.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...