Arne Informatics Piramit Automation SQL注入漏洞

Arne Informatics Piramit Automation is an application from Arne Informatics, Inc. An SQL injection vulnerability exists in Arne Informatics Piramit Automation versions prior to 27.09.2024 that stems from an improper neutralization of a special element...

CVE-2017-13319

creationtimestamp| type| source ---|---|--- 2024-11-27 20:01:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113556698498666294...

WordPress Kudos Donations Plugin <= 3.2.9 is vulnerable to Cross Site Scripting (XSS)

Software Kudos Donations Type Plugin Vulnerable versions = 3.2.9 Fixed in 3.3.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11684 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 27c0ae774d02 Credits vgo0 Required...

WordPress StreamWeasels YouTube Integration Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software StreamWeasels YouTube Integration Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11788 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bbd6037644c5 Credits...

CVE-2024-48991

creationtimestamp| type| source ---|---|--- 2024-11-21 13:05:05+00:00| seen| https://t.me/truesecator/6456 2024-11-23 01:55:46+00:00| seen| https://t.me/itsecnews/4798 2024-11-24 19:00:01+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9164 2024-11-24 22:11:52+00:00|...

Nextcloud Server 27.x < 27.1.10, 28.x < 28.0.6, 29.x < 29.0.1 Incomplete Sanitization Vulnerability

Nextcloud Server is prone to an incomplete sanitization vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-47440

creationtimestamp| type| source ---|---|--- 2024-11-12 22:15:27+00:00| seen| https://t.me/cvedetector/10723...

bzip2 security update

1.0.6-27.0.1 - CVE-2019-12900: Accept as many selectors as the file format allows Orabug: 37266061 1.0.6-27 - Fixes out of bounds access in BZ2decompress RHEL-64929...

CVE-2023-29122

creationtimestamp| type| source ---|---|--- 2024-11-05 18:03:27+00:00| seen| https://t.me/cvedetector/9892...

CVE-2024-45885

creationtimestamp| type| source ---|---|--- 2024-11-04 16:57:21+00:00| seen| https://t.me/cvedetector/9762 2025-08-23 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulr25vc2v...

CVE-2024-45887

creationtimestamp| type| source ---|---|--- 2024-11-04 16:57:12+00:00| seen| https://t.me/cvedetector/9755 2025-08-23 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulr4xe22v...

CVE-2024-10421

creationtimestamp| type| source ---|---|--- 2024-10-27 19:14:55+00:00| seen| https://t.me/cvedetector/9060...

CVE-2024-10416

creationtimestamp| type| source ---|---|--- 2024-10-27 15:04:06+00:00| seen| https://t.me/cvedetector/9055...

CVE-2024-10414

creationtimestamp| type| source ---|---|--- 2024-10-27 13:23:44+00:00| seen| https://t.me/cvedetector/9053...

CVE-2024-10409

creationtimestamp| type| source ---|---|--- 2024-10-27 05:01:55+00:00| seen| https://t.me/cvedetector/9046...

CVE-2024-10407

creationtimestamp| type| source ---|---|--- 2024-10-27 03:21:36+00:00| seen| https://t.me/cvedetector/9045...

CVE-2020-26305

creationtimestamp| type| source ---|---|--- 2024-10-27 00:01:04+00:00| seen| https://t.me/cvedetector/9041 2026-07-11 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqf7b6vk5525...

CVE-2024-48919 RCE via Prompt Injection Into Cursor's Terminal Cmd-K

Cursor is a code editor built for programming with AI. Prior to Sep 27, 2024, if a user generated a terminal command via Cursor's Terminal Cmd-K/Ctrl-K feature and if the user explicitly imported a malicious web page into the Terminal Cmd-K prompt, an attacker with control over the referenced web...

Adobe Digital Editions < 4.5.6 Multiple Vulnerabilities (APSB17-27) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-27 advisory. - Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful...

Adobe Digital Editions < 4.5.9 Multiple Vulnerabilities (APSB18-27) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB18-27 advisory. - Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation...