PT-2024-32328 · Basercms · Basercms

Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 5.1.2 Description: The issue is a cross-site scripting vulnerability in the Blog posts feature of baserCMS, a website development framework. This vulnerability allows malicious code to be executed in the Blog posts...

CVE-2024-47634

creationtimestamp| type| source ---|---|--- 2024-10-20 14:05:14+00:00| seen| https://t.me/cvedetector/8437 2026-04-02 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mii4bujvia2c...

CVE-2024-49325

creationtimestamp| type| source ---|---|--- 2024-10-20 14:05:13+00:00| seen| https://t.me/cvedetector/8436 2026-04-03 03:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miksdfzxke2r...

CVE-2024-49616

creationtimestamp| type| source ---|---|--- 2024-10-20 13:14:55+00:00| seen| https://t.me/cvedetector/8425 2026-04-03 06:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mil4fcdadc2v...

CVE-2024-49615

creationtimestamp| type| source ---|---|--- 2024-10-20 13:14:54+00:00| seen| https://t.me/cvedetector/8424 2026-04-03 06:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mil3bk2kbv2r...

CVE-2024-49613

creationtimestamp| type| source ---|---|--- 2024-10-20 13:14:53+00:00| seen| https://t.me/cvedetector/8422 2026-04-03 06:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mil25wow2y2q...

CVE-2024-49329

creationtimestamp| type| source ---|---|--- 2024-10-20 12:24:33+00:00| seen| https://t.me/cvedetector/8411 2026-04-02 04:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miicygng222u...

CVE-2024-49331

creationtimestamp| type| source ---|---|--- 2024-10-20 12:24:27+00:00| seen| https://t.me/cvedetector/8407 2026-04-06 11:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mit4d5xbxs2v...

CVE-2024-49622

creationtimestamp| type| source ---|---|--- 2024-10-20 12:24:21+00:00| seen| https://t.me/cvedetector/8404 2026-04-03 07:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mil7qlnplv2f...

CVE-2024-49621

creationtimestamp| type| source ---|---|--- 2024-10-20 12:24:20+00:00| seen| https://t.me/cvedetector/8403 2026-04-03 07:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mil6msukal2f...

CVE-2024-49610

creationtimestamp| type| source ---|---|--- 2024-10-20 12:24:20+00:00| seen| https://t.me/cvedetector/8402 2026-04-02 02:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mii6j7wvat2f...

CVE-2024-49328

creationtimestamp| type| source ---|---|--- 2024-10-20 10:44:06+00:00| seen| https://t.me/cvedetector/8396 2024-11-07 17:02:41+00:00| published-proof-of-concept| https://t.me/CNArsenal/3422 2024-11-07 18:35:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11404...

Friday Squid Blogging: Squid Scarf

Cute squid scarf. Blog moderation policy...

What the US Army’s 1959 ‘Soldier of Tomorrow’ Got Right About the Future of Warfare

Sixty-five years ago, the Army's leaders unveiled its “ultimate weapon” for the age of atomic warfare. Here’s how the service’s vision stands up to today's reality...

CVE-2024-49219

creationtimestamp| type| source ---|---|--- 2024-10-17 20:49:58+00:00| seen| https://t.me/cvedetector/8221 2026-04-03 09:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mile7sby3h2v...

This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats

Security researchers created an algorithm that turns a malicious prompt into a set of hidden instructions that could send a user's personal information to an attacker...

CVE-2024-49271

creationtimestamp| type| source ---|---|--- 2024-10-16 16:22:51+00:00| seen| https://t.me/cvedetector/8055 2026-04-04 10:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mio2ber3wq2d...

CVE-2024-5749

creationtimestamp| type| source ---|---|--- 2024-10-15 21:07:30+00:00| seen| https://t.me/cvedetector/7939 2026-02-24 16:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfml3hvdcr24...

CVE-2024-46911

Cross-site Resource Forgery CSRF, Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websites, by default weblog owners are trusted to publish arbitrary weblog content and this combined with a deficiency in Roller's CSRF protections allowed an escalation of privileges...

CVE-2024-46911 Apache Roller: Weakness in CSRF protection allows privilege escalation

Cross-site Resource Forgery CSRF, Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websites, by default weblog owners are trusted to publish arbitrary weblog content and this combined with a deficiency in Roller's CSRF protections allowed an escalation of privileges...