CVE-2024-42406

creationtimestamp| type| source ---|---|--- 2024-09-26 11:17:03+00:00| seen| https://t.me/cvedetector/6392...

CVE-2022-49037

creationtimestamp| type| source ---|---|--- 2024-09-26 07:06:06+00:00| seen| https://t.me/cvedetector/6378...

CVE-2023-52946

creationtimestamp| type| source ---|---|--- 2024-09-26 07:06:01+00:00| seen| https://t.me/cvedetector/6376...

CVE-2022-49041

creationtimestamp| type| source ---|---|--- 2024-09-26 07:06:00+00:00| seen| https://t.me/cvedetector/6375...

CVE-2022-49039

creationtimestamp| type| source ---|---|--- 2024-09-26 07:05:59+00:00| seen| https://t.me/cvedetector/6373...

CVE-2023-52949

creationtimestamp| type| source ---|---|--- 2024-09-26 07:05:55+00:00| seen| https://t.me/cvedetector/6372...

CVE-2024-8723

creationtimestamp| type| source ---|---|--- 2024-09-26 06:15:42+00:00| seen| https://t.me/cvedetector/6365...

CVE-2024-9247

creationtimestamp| type| source ---|---|--- 2024-09-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1300/...

CVE-2024-47083

creationtimestamp| type| source ---|---|--- 2024-09-26 01:14:45+00:00| seen| https://t.me/cvedetector/6361...

WordPress Email Subscribers & Newsletters Plugin <= 5.7.34 is vulnerable to Broken Access Control

Software Email Subscribers & Newsletters Type Plugin Vulnerable versions = 5.7.34 Fixed in 5.7.35 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-8771 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d3427c89899f Credits Michelle...

WordPress Multi Step for Contact Form Plugin <= 2.7.7 is vulnerable to SQL Injection

Software Multi Step for Contact Form Type Plugin Vulnerable versions = 2.7.7 Fixed in 2.7.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-47331 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID a27c5e08d690 Credits Hakiduck Required privilege...

WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 2.15 is vulnerable to Cross Site Scripting (XSS)

Software Bulk NoIndex & NoFollow Toolkit Type Plugin Vulnerable versions = 2.15 Fixed in 2.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8803 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 78a9bff492c8 Credits vgo0...

WordPress nm-visitors Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software nm-visitors Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4541 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 95398650de42 Credits rezaduty Required privileg...

CVE-2024-23933

creationtimestamp| type| source ---|---|--- 2024-09-23 17:59:25+00:00| seen| https://t.me/cvedetector/6186...

CVE-2024-45229

creationtimestamp| type| source ---|---|--- 2024-09-20 22:15:43+00:00| seen| https://t.me/cvedetector/6120 2024-09-21 00:09:37+00:00| seen| https://t.me/ctinow/223854 2024-09-21 11:30:28+00:00| seen| https://t.me/CyberBulletin/816 2024-09-21 12:12:31+00:00| seen| https://t.me/CyberBulletin/25682...

CVE-2024-45769

creationtimestamp| type| source ---|---|--- 2024-09-19 11:58:38+00:00| seen| https://t.me/cvedetector/6048 2024-09-26 10:10:56+00:00| seen| https://t.me/codebysec/8388...

PT-2024-39260 · Rubygems +3 · Devise-Two-Factor +3

Name of the Vulnerable Software and Affected Versions: Devise-Two-Factor versions 1.0.0 or = 2.2.0 through = 2.2.0 through 6.0.0, upgrade to version v6.0.0 as soon as possible. If upgrading is not possible, override the default otp secret length attribute in the model when configuring two factor...

CVE-2024-31416

creationtimestamp| type| source ---|---|--- 2024-09-13 19:38:22+00:00| seen| https://t.me/cvedetector/5627...

D-Link DI-8300 安全漏洞

The D-Link DI-8300 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A command injection vulnerability exists in the D-Link DI-8300 version v16.07.26A1, which stems from the upgradefilterasp function failing to properly filter constructor...

CVE-2022-39996

creationtimestamp| type| source ---|---|--- 2024-08-27 20:44:26+00:00| seen| https://t.me/cvedetector/4267 2026-06-09 11:00:07+00:00| published-proof-of-concept| Telegram/cFkqaiLeMF7rcnyy-4alEvGOnwxzqn60V0GjpreyOt3-Yxw 2026-07-12 11:00:03+00:00| published-proof-of-concept|...