Binom3 Web Management Login Scanner, Config And Password File Dump

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Binom3 Web Management Login Scanner, Config and Password File Dump', 'Description' = % This module scans for Binom3 Multifunctional Revenue Energ...

UDP Amplification Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'UDP Amplification Scanner', 'Description' = 'Detect UDP endpoints with UDP amplification vulnerabilities', 'Author' = 'Jon Hart ', 'License' =...

CVE-2024-45491

creationtimestamp| type| source ---|---|--- 2024-08-30 05:37:13+00:00| seen| https://t.me/cvedetector/4493 2024-11-12 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-317-01 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-0...

CVE-2024-45490

creationtimestamp| type| source ---|---|--- 2024-08-30 05:37:13+00:00| seen| https://t.me/cvedetector/4494 2024-11-12 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-317-01 2024-12-12 11:05:44+00:00| seen| https://t.me/truesecator/6533 2025-03-14 19:45:03+00:00| seen...

CVE-2024-45492

creationtimestamp| type| source ---|---|--- 2024-08-30 05:37:08+00:00| seen| https://t.me/cvedetector/4492 2024-11-12 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-317-01 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-0...

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet. CVE-2024-7029 CVSS score: 8.7, the vulnerability in question, is a "command injection vulnerability found in the brightness function of AVTECH closed-circui...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-7965link is external Google Chromium V8 Inappropriate Implementation Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a critical security flaw affecting the Apache OFBiz open-source enterprise resource planning ERP system to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The...

CVE-2024-3980

creationtimestamp| type| source ---|---|--- 2024-08-27 15:43:27+00:00| seen| https://t.me/cvedetector/4247 2024-11-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-04 2025-05-13 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-133-0...

CVE-2024-3982

creationtimestamp| type| source ---|---|--- 2024-08-27 15:43:26+00:00| seen| https://t.me/cvedetector/4246 2024-11-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-04 2025-05-13 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-133-0...

CVE-2024-4872

creationtimestamp| type| source ---|---|--- 2024-08-27 15:43:22+00:00| seen| https://t.me/cvedetector/4245 2024-11-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-04 2025-04-03 13:00:37+00:00| seen|...

CVE-2024-7941

creationtimestamp| type| source ---|---|--- 2024-08-27 15:43:21+00:00| seen| https://t.me/cvedetector/4244 2024-11-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-04...

CVE-2024-7940

creationtimestamp| type| source ---|---|--- 2024-08-27 15:43:20+00:00| seen| https://t.me/cvedetector/4242 2024-11-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-04 2025-05-13 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-133-0...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38856link is external Apache OFBiz Incorrect Authorization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors an...

Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-39717

Versa Networks has released an advisorylink is external for a vulnerability CVE-2024-39717link is external in Versa Director, a key component in managing SD-WAN networks, used by some Internet Service Providers ISPs and Managed Service Providers MSPs. A cyber threat actor could exploit this...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-7971link is external Google Chromium V8 Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and po...

CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September

The U.S. Cybersecurity and Infrastructure Security Agency CISA has placed a security flaw impacting Versa Director to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation. The medium-severity vulnerability, tracked as CVE-2024-39717 CVSS score: 6.6, is case of...

CISA Adds One Known Exploited Vulnerability to Catalog for Versa Networks Director

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-39717link is external Versa Director Dangerous File Type Upload Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber acto...

Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk

SolarWinds has issued patches to address a new security flaw in its Web Help Desk WHD software that could allow remote unauthenticated users to gain unauthorized access to susceptible instances. "The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowi...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on August 22, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-235-01 Rockwell Automation Emulate3D ICSA-24-235-02 Rockwell Automation 5015 – AENFTXT...