CVE-2024-50523

creationtimestamp| type| source ---|---|--- 2024-11-04 16:06:56+00:00| seen| https://t.me/cvedetector/9747 2026-04-01 18:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihdowq4lc2u...

Exploit for OS Command Injection in Cyberpanel

CyberPanel Command Injection Vulnerability - CVE-2024-51378...

CVE-2024-50442

creationtimestamp| type| source ---|---|--- 2024-10-28 13:39:04+00:00| seen| https://t.me/cvedetector/9103 2026-04-04 15:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miokztfltn23...

baserCMS 跨站脚本漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A cross-site scripting vulnerability exists in baserCMS versions prior to 5.1.2, which stems from a cross-site scripting vulnerability in the blog post feature...

baserCMS 跨站脚本漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A cross-site scripting vulnerability exists in baserCMS versions prior to 5.1.2, which stems from a cross-site scripting vulnerability in the blog post and content list functionality...

CVE-2024-47634

creationtimestamp| type| source ---|---|--- 2024-10-20 14:05:14+00:00| seen| https://t.me/cvedetector/8437 2026-04-02 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mii4bujvia2c...

CVE-2024-49329

creationtimestamp| type| source ---|---|--- 2024-10-20 12:24:33+00:00| seen| https://t.me/cvedetector/8411 2026-04-02 04:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miicygng222u...

CVE-2024-49621

creationtimestamp| type| source ---|---|--- 2024-10-20 12:24:20+00:00| seen| https://t.me/cvedetector/8403 2026-04-03 07:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mil6msukal2f...

CVE-2024-49219

creationtimestamp| type| source ---|---|--- 2024-10-17 20:49:58+00:00| seen| https://t.me/cvedetector/8221 2026-04-03 09:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mile7sby3h2v...

Exploit for SQL Injection in Paloaltonetworks Expedition

CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Inject...

CVE-2023-36039

creationtimestamp| type| source ---|---|--- 2024-09-26 18:25:07+00:00| seen| https://www.thezdi.com/blog/2024/9/25/exploiting-exchange-powershell-after-proxynotshell-part-4-no-argument-constructor...

CVE-2024-38014

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1368 2024-09-11 09:47:58+00:00| exploited|...

CVE-2024-38228

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review...

NIS bootparamd Domain Name Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NIS bootparamd Domain Name Disclosure', 'Description' = %q This module discloses the NIS domain name from bootparamd. You must know a client...

Matthew Green on Telegram’s Encryption

Matthew Green wrote a really good blog post on what Telegrams encryption is and is not. EDITED TO ADD 8/28: Another good explainer from Kaspersky...

CVE-2024-7533

creationtimestamp| type| source ---|---|--- 2024-08-07 00:13:43+00:00| seen| https://t.me/cvedetector/2640 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...

Brett Solomon on Digital Rights

Brett Solomon is retiring from AccessNow after fifteen years as its Executive Director. Hes written a blog post about what hes learned and what comes next...

CVE-2024-5503

The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP files on the server, allowing the...

CVE-2024-5503

The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP files on the server, allowing the...

CVE-2024-5503

The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP files on the server, allowing the...