CVE-2023-7281

creationtimestamp| type| source ---|---|--- 2024-09-24 00:41:00+00:00| seen| https://t.me/cvedetector/6216...

WordPress Google Calendar Events Plugin <= 3.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Google Calendar Events Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8549 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9f01a635ec08 Credits vgo0 Requir...

WordPress NiceJob Plugin < 3.6.5 is vulnerable to Cross Site Scripting (XSS)

Software NiceJob Type Plugin Vulnerable versions 3.6.5 Fixed in 3.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44025 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID afa3856f254d Credits stealthcopter Required privilege Contributor...

WordPress WP Easy Gallery Plugin <= 4.8.5 is vulnerable to Broken Access Control

Software WP Easy Gallery Type Plugin Vulnerable versions = 4.8.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-8437 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 29e098328a72 Credits Lucio Sá Required privilege...

WordPress WordPress Meta Data and Taxonomies Filter (MDTF) Plugin <= 1.3.3.3 is vulnerable to SQL Injection

Software WordPress Meta Data and Taxonomies Filter MDTF Type Plugin Vulnerable versions = 1.3.3.3 Fixed in 1.3.3.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-8624 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 72c934040045 Credits Krzysztof Zając...

WordPress Contact Form to Any API Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form to Any API Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7617 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8a05dbbe144d Credits Jorgson...

WordPress Pixel Cat Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Pixel Cat Type Plugin Vulnerable versions = 3.0.5 Fixed in 3.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8544 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4e86320ad402 Credits vgo0 Required privilege...

GLSA-202409-24 : Tor: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202409-24 Tor: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

CVE-2024-47066

creationtimestamp| type| source ---|---|--- 2024-09-23 18:49:37+00:00| seen| https://t.me/cvedetector/6191 2024-09-24 10:01:15+00:00| seen| https://t.me/GithubRedTeam/8585 2024-09-24 19:46:07+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/4027 2024-09-25 05:16:47+00:00|...

FreeBSD : FreeBSD -- pf incorrectly matches different ICMPv6 states in the state table (f140cff0-771a-11ef-9a62-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f140cff0-771a-11ef-9a62-002590c1f29c advisory. In ICMPv6 Neighbor Discovery ND, the ID is always 0. When pf is configured to allow ND and block incomi...

CVE-2022-4533

creationtimestamp| type| source ---|---|--- 2024-09-19 06:57:47+00:00| seen| https://t.me/cvedetector/6040...

Proroute H685 4G router vulnerabilities

TL;DR Two vulnerabilities on the Proroute H685t-w 4G Router Authenticated command injection is possible through the admin interface Reflected Cross Site-Scripting is possible through the admin interface Patch any routers to revision 3.2.335 or higher Vulnerability 1: Command Injection on Proroute...

FreeBSD : OpenSSH -- Pre-authentication async signal safety issue (58750d49-7302-11ef-8c95-195d300202b3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 58750d49-7302-11ef-8c95-195d300202b3 advisory. The FreeBSD Project reports: A signal handler in sshd8 may call a logging function that is not async-...

CVE-2024-21743

creationtimestamp| type| source ---|---|--- 2024-09-17 17:16:54+00:00| seen| https://t.me/cvedetector/5815 2024-09-24 15:44:43+00:00| seen| https://t.me/itsecnews/4758...

CVE-2024-22303

creationtimestamp| type| source ---|---|--- 2024-09-17 17:16:51+00:00| seen| https://t.me/cvedetector/5811 2024-09-24 15:44:43+00:00| seen| https://t.me/itsecnews/4758...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is a suite of image processing software from the American company Audobee Adobe. The software is primarily used for processing images. A buffer error vulnerability exists in Adobe Photoshop versions 24.x through 24.7.4 and 25.x through versions prior to 25.11, which stems from bei...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is a suite of image processing software from the American company Audobee Adobe. The software is primarily used for processing images. A buffer error vulnerability exists in Adobe Photoshop versions 24.x through 24.7.4 and 25.x through versions prior to 25.11, which stems from bei...

PT-2024-15105 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak versions prior to 24 Description: A denial of service issue was found in Keycloak where the amount of attributes per object is not limited. An attacker could cause resource exhaustion by sending repeated HTTP requests, leading to the...

CVE-2024-7260

creationtimestamp| type| source ---|---|--- 2024-09-09 22:20:17+00:00| seen| https://t.me/cvedetector/5122 2025-05-02 17:16:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14525...

CVE-2024-40643

creationtimestamp| type| source ---|---|--- 2024-09-09 18:09:32+00:00| seen| https://t.me/cvedetector/5109 2025-08-24 20:39:55+00:00| seen| https://blog.qwertysecurity.com/Articles/blog2.html...