Cross-Site Scripting

Liferay portal is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to insufficient input validation that allows remote attackers to inject arbitrary web script or HTML via a crafted payload into the “Blocked Email Domains” text field in the instance settings for Accounts...

CVE-2024-25251

creationtimestamp| type| source ---|---|--- 2024-02-22 02:21:48+00:00| seen| https://t.me/ctinow/190340 2024-02-22 02:26:54+00:00| seen| https://t.me/ctinow/190343 2024-03-13 12:07:46+00:00| seen| https://t.me/ctinow/206616...

Apache Answer 竞争条件问题漏洞

Apache Answer is a community platform of the Apache USA Foundation. Apache Answer 1.2.1 and prior versions suffer from a Competing Conditions vulnerability, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during...

CVE-2023-24334

creationtimestamp| type| source ---|---|--- 2024-02-21 22:21:43+00:00| seen| https://t.me/ctinow/190140 2024-02-21 22:26:40+00:00| seen| https://t.me/ctinow/190151 2024-02-22 20:53:20+00:00| seen| https://t.me/arpsyndicate/4043...

CVE-2024-24479

creationtimestamp| type| source ---|---|--- 2024-02-21 20:26:17+00:00| seen| https://t.me/ctinow/190034 2024-02-21 20:31:40+00:00| seen| https://t.me/ctinow/190043 2024-02-22 02:41:31+00:00| seen| https://t.me/ctinow/190352 2024-03-13 10:41:12+00:00| seen| https://t.me/ctinow/206540...

CVE-2024-24478

creationtimestamp| type| source ---|---|--- 2024-02-21 18:31:24+00:00| seen| https://t.me/ctinow/189898 2024-02-21 18:36:18+00:00| seen| https://t.me/ctinow/189912 2024-02-22 02:41:32+00:00| seen| https://t.me/ctinow/190353 2024-02-22 21:03:16+00:00| seen| https://t.me/arpsyndicate/4047 2024-03-1...

CVE-2024-1701

creationtimestamp| type| source ---|---|--- 2024-02-21 17:22:09+00:00| seen| https://t.me/ctinow/189796 2024-02-21 17:31:29+00:00| seen| https://t.me/ctinow/189810 2024-03-13 08:36:33+00:00| seen| https://t.me/ctinow/206458 2025-02-12 17:08:02+00:00| published-proof-of-concept|...

CVE-2023-42836

creationtimestamp| type| source ---|---|--- 2024-02-21 08:32:10+00:00| seen| https://t.me/ctinow/189336 2024-02-22 04:01:23+00:00| seen| https://t.me/arpsyndicate/3910...

Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting

Reflected cross-site scripting XSS vulnerability in the instance settings for Accounts in Liferay Portal 7.4.3.44 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 44 through 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected in...

CVE-2023-40191

Reflected cross-site scripting XSS vulnerability in the instance settings for Accounts in Liferay Portal 7.4.3.44 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 44 through 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected in...

CVE-2023-50923

creationtimestamp| type| source ---|---|--- 2024-02-21 01:21:44+00:00| seen| https://t.me/ctinow/189083 2024-02-21 01:21:45+00:00| seen| https://t.me/ctinow/189084 2024-02-22 04:19:58+00:00| seen| https://t.me/arpsyndicate/3925...

GHSA-JFRG-9HPQ-9HVP

creationtimestamp| type| source ---|---|--- 2024-02-21 01:16:54+00:00| seen| https://t.me/ctinow/189075 2024-02-21 13:46:12+00:00| seen| https://t.me/arpsyndicate/3779...

PT-2024-1836 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: A flaw was found in Keycloak, which may allow a remote unauthenticated attacker to block other accounts from logging in under certain conditions. This issue is related to an overly...

CVE-2024-25260

creationtimestamp| type| source ---|---|--- 2024-02-20 19:27:24+00:00| seen| https://t.me/ctinow/188851 2024-02-20 19:32:14+00:00| seen| https://t.me/ctinow/188867 2024-02-20 22:46:16+00:00| seen| https://t.me/ctinow/188969 2024-02-21 15:32:05+00:00| seen| https://t.me/arpsyndicate/3847...

CVE-2023-51447

creationtimestamp| type| source ---|---|--- 2024-02-20 19:27:11+00:00| seen| https://t.me/ctinow/188841 2024-02-20 19:31:53+00:00| seen| https://t.me/ctinow/188857...

Law enforcement trolls LockBit, reveals massive takedown

In an act of exquisite trolling, the UKs National Crime Agency NCA has announced further details about its disruption of the LockBit ransomware group by using the groups own dark web website. The LockBit dark web site has a new look Since the demise of Conti in 2022, LockBit has been unchallenged...

CVE-2024-26265

creationtimestamp| type| source ---|---|--- 2024-02-20 14:22:00+00:00| seen| https://t.me/ctinow/188514 2024-02-20 14:26:22+00:00| seen| https://t.me/ctinow/188524 2024-02-21 14:02:04+00:00| seen| https://t.me/arpsyndicate/3790...

Learn How to Build an Incident Response Playbook Against Scattered Spider in Real-Time

In the tumultuous landscape of cybersecurity, the year 2023 left an indelible mark with the brazen exploits of the Scattered Spider threat group. Their attacks targeted the nerve centers of major financial and insurance institutions, culminating in what stands as one of the most impactful...

Critical Flaws Found in ConnectWise ScreenConnect Software - Patch Now

ConnectWise has released software updates to address two security flaws in its ScreenConnect remote desktop and access software, including a critical bug that could enable remote code execution on affected systems. The vulnerabilities are listed below - CVE-2024-1708 CVSS score: 8.4 - Improper...

CVE-2022-48625

creationtimestamp| type| source ---|---|--- 2024-02-20 01:21:34+00:00| seen| https://t.me/ctinow/188013 2024-02-20 01:26:32+00:00| seen| https://t.me/ctinow/188017 2024-02-21 06:48:57+00:00| seen| https://t.me/arpsyndicate/3696...