9077 matches found
Directus Security Vulnerabilities
Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in Directus versions prior to 10.8.3, which stems from a vulnerability that allows an attacker to receive password reset emails from victimized users...
Huawei HarmonyOS and EMUI Denial of Service Vulnerability (CNVD-2024-14983)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A denial of service vulnerability exists in Huawei...
Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways
Actions to take today to mitigate cyber threats against Ivanti appliances: 1. Limit outbound internet connections from SSL VPN appliances to restrict access to required services. 2. Keep all operating systems and firmware up to date. 3. Limit SSL VPN connections to unprivileged accounts...
CVE-2024-25292
creationtimestamp| type| source ---|---|--- 2024-02-29 08:31:36+00:00| seen| https://t.me/ctinow/196333 2024-02-29 08:31:45+00:00| seen| https://t.me/ctinow/196339 2024-11-12 12:25:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9009 2024-11-12 16:05:45+00:00|...
CVE-2024-24147
creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:31+00:00| seen| https://t.me/ctinow/196115 2024-02-29 03:03:03+00:00| seen| https://t.me/ctinow/196132 2024-03-12 18:16:53+00:00| seen| https://t.me/ctinow/205952...
CVE-2022-34270
An issue was discovered in RWS WorldServer before 11.7.3. Regular users can create users with the Administrator role via UserWSUserManager...
CVE-2024-25859
creationtimestamp| type| source ---|---|--- 2024-02-28 21:27:01+00:00| seen| https://t.me/ctinow/195883 2024-02-28 21:27:11+00:00| seen| https://t.me/ctinow/195893...
CVE-2024-25859
A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and execute arbitrary code...
GHSA-8MQ4-9JJH-9XRC YARD's default template vulnerable to Cross-site Scripting in generated frames.html
Summary The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting XSS attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. Details The vulnerability stems from mishandling...
YARD's default template vulnerable to Cross-site Scripting in generated frames.html
Summary The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting XSS attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. Details The vulnerability stems from mishandling...
CVE-2020-36779
creationtimestamp| type| source ---|---|--- 2024-02-28 11:11:57+00:00| seen| https://t.me/ctinow/195320 2024-02-29 11:11:40+00:00| seen| https://t.me/ctinow/196507...
CVE-2021-47040
creationtimestamp| type| source ---|---|--- 2024-02-28 10:26:52+00:00| seen| https://t.me/ctinow/195278 2024-02-28 10:32:16+00:00| seen| https://t.me/ctinow/195294...
CVE-2021-47039
creationtimestamp| type| source ---|---|--- 2024-02-28 10:26:48+00:00| seen| https://t.me/ctinow/195277 2024-02-28 10:32:15+00:00| seen| https://t.me/ctinow/195293...
CVE-2021-47038
creationtimestamp| type| source ---|---|--- 2024-02-28 10:26:47+00:00| seen| https://t.me/ctinow/195276 2024-02-28 10:32:11+00:00| seen| https://t.me/ctinow/195292...
CVE-2024-27913
creationtimestamp| type| source ---|---|--- 2024-02-28 08:26:53+00:00| seen| https://t.me/ctinow/195179 2024-02-28 08:26:59+00:00| seen| https://t.me/ctinow/195183 2024-03-14 23:31:29+00:00| seen| https://t.me/ctinow/208281 2025-03-26 21:25:46+00:00| published-proof-of-concept|...
CVE-2024-25859
Blesta (before v5.9.2) is affected by CVE-2024-25859 due to a path traversal in the /path/to/uploads/ directory. The vulnerability allows an attacker to takeover user accounts and execute arbitrary code. Affected versions are prior to 5.9.2. Mitigation: upgrade to Blesta 5.9.2 or later. As a temp...
PT-2024-19064 · Elecom · Elecom Wireless Lan Routers
Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN routers affected versions not specified Description: The issue is related to a cross-site scripting vulnerability. It is assumed that a malicious administrative user configures the affected product with specially crafted...
CVE-2024-25859
A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and execute arbitrary code...