CVE-2024-25983 Msa-24-0006: idor on dashboard comments block

Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available e.g., on their profile page...

CVE-2024-25982 Msa-24-0005: csrf risk in language import utility

The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...

CVE-2024-25982 Msa-24-0005: csrf risk in language import utility

The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...

CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings

Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings

Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25978 Msa-24-0001: denial of service risk in file picker unzip functionality

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

CVE-2024-21304

creationtimestamp| type| source ---|---|--- 2024-02-13 20:06:35+00:00| seen| https://t.me/ctinow/184101 2025-03-24 20:23:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8522...

QNAP QTS / QuTS hero Multiple Vulnerabilities in QTS, QuTS hero, and QuTScloud (QSA-24-05)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-24-05 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

QNAP QTS / QuTS hero Vulnerability in QTS, QuTS hero, and QuTScloud (QSA-24-04)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-24-04 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2024-24091

creationtimestamp| type| source ---|---|--- 2024-02-08 07:21:23+00:00| seen| https://t.me/ctinow/181196 2025-04-24 16:06:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13263...

Fortinet Fortigate Out-of-bound Write in sslvpnd (FG-IR-24-015)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-015 advisory. - A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0...

Fortinet Fortigate Format String Bug in fgfmd (FG-IR-24-029)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-029 advisory. - A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0...

CVE-2023-6535

creationtimestamp| type| source ---|---|--- 2024-02-07 22:32:26+00:00| seen| https://t.me/ctinow/181000 2025-04-24 16:06:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13261...

RHSA-2024:0724

creationtimestamp| type| source ---|---|--- 2024-02-07 18:17:18+00:00| seen| https://t.me/ctinow/180868 2025-04-24 16:06:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13261...

CVE-2024-23447

creationtimestamp| type| source ---|---|--- 2024-02-07 05:31:53+00:00| seen| https://t.me/ctinow/180524 2024-03-01 15:16:44+00:00| seen| https://t.me/ctinow/197687 2025-04-24 16:06:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13260...

CVE-2024-0660

creationtimestamp| type| source ---|---|--- 2024-02-05 23:31:46+00:00| seen| https://t.me/ctinow/179611 2024-02-19 22:56:07+00:00| seen| https://t.me/ctinow/187959 2025-04-24 16:06:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13272...

QNAP Photo Station Multiple Vulnerabilities (QSA-24-08)

QNAP Photo Station is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:qnap:photostation"; if...

QNAP QTS Authorization Vulnerability (QSA-24-01)

QNAP QTS is prone to an incorrect authorization vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

QNAP QuTS hero Multiple Vulnerabilities (QSA-24-02, QSA-24-04, QSA-24-06, QSA-24-07)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

CVE-2021-4435

creationtimestamp| type| source ---|---|--- 2024-02-04 21:21:25+00:00| seen| https://t.me/ctinow/178932 2024-02-24 12:11:54+00:00| seen| https://t.me/ctinow/192551 2025-06-17 14:40:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18597...