CVE-2024-38150

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...

CVE-2024-38219

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review 2025-04-15 23:55:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11969...

CVE-2024-38143

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review 2024-08-19 21:07:05+00:00| published-proof-of-concept| https://t.me/Hunt3rkill3rs1/730 2024-10-12 22:23:19+00:00| published-proof-of-concept|...

CVE-2024-38148

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review 2024-08-23 13:29:53+00:00| published-proof-of-concept| https://t.me/Rootsec2/4212 2024-08-23 22:17:53+00:00| published-proof-of-concept|...

Gaining Control Over Sky-High Cloud Costs: Our Journey So Far

...

Cloning Content to Linode Object Storage with RClone

...

CVE-2024-21302

creationtimestamp| type| source ---|---|--- 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1349 2024-08-08 04:41:23+00:00| seen| https://t.me/cvedetector/2745 2024-08-08 11:00:07+00:00| seen| https://t.me/truesecator/6070 2024-08-08 11:16:38+00:00| seen|...

CVE-2024-38206

creationtimestamp| type| source ---|---|--- 2024-08-07 01:04:00+00:00| seen| https://t.me/cvedetector/2645 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review 2024-08-21 18:36:38+00:00| seen| https://t.me/KomunitiSiber/2440 2024-08-21...

CVE-2024-7533

creationtimestamp| type| source ---|---|--- 2024-08-07 00:13:43+00:00| seen| https://t.me/cvedetector/2640 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...

CVE-2024-7535

creationtimestamp| type| source ---|---|--- 2024-08-07 00:13:39+00:00| seen| https://t.me/cvedetector/2636 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...

KnowBe4 RCE and LPE

Introduction Our latest investigation has uncovered significant security flaws in three KnowBe4 applications- Phish Alert Button, PasswordIQ, and Second Chance. These applications, commonly used in security awareness and training, were found to have vulnerabilities allowing remote command executi...

OpenMediaVault rpc.php Authenticated Cron Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenMediaVault rpc.php Authenticated Cron Remote Code Execution', 'Description' = %q OpenMediaVault allows an authenticated user to create cron...

Blog Site 1.0 SQL Injection

Titles: blog-site-1.0 Multiple-SQLi Author: nu11secur1ty Date: 07/29/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14442/blog-site-using-phpmysql.html Reference: https://portswigger.net/web-security/sql-injection Description: The id parameter appears to be...

CVE-2024-5614

CVE-2024-5614 affects Piotnet Addons For Elementor for WordPress up to version 2.4.29. The vulnerability allows unauthenticated attackers to perform Sensitive Information Exposure via the pafe_posts_list function, exposing titles and excerpts of future, draft, and pending posts. CVSS 3.1/3.1 base...

Planting Trees in India: Green Team #GenerationRestoration

...

CVE-2024-7114

A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part of the file /so.php. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2024-7114

A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part of the file /so.php. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2024-7114 Tianchoy Blog so.php sql injection

A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part of the file /so.php. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2024-7114 Tianchoy Blog so.php sql injection

A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part of the file /so.php. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2024-7114

The CVE-2024-7114 entry concerns Tianchoy Blog versions up to 1.8.8. The vulnerability is a SQL injection in an unknown part of the file /so.php, triggered by manipulating the search parameter. It is exploitable remotely and has been publicly disclosed. Practical impact is information and data co...