CVE-2024-12952

CVE-2024-12952 affects melMass comfy_mtb up to 0.1.4. The vulnerability resides in the Dependency Handler’s run_command function (comfy_mtb/endpoint.py) and allows remote code injection. Public exploit details exist, and a patch is available: d6e004cce2c32f8e48b868e66b89f82da4887dc3. Affected ver...

CVE-2024-12939

creationtimestamp| type| source ---|---|--- 2024-12-26 06:36:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113717739699820540 2024-12-26 07:15:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le6whxkuoh25 2024-12-26 09:02:45+00:00| seen|...

CVE-2024-12932 code-projects Simple Admin Panel addSizeController.php cross site scripting

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file addSizeController.php. The manipulation of the argument size leads to cross site scripting. The attack can be launched...

CVE-2024-12746

creationtimestamp| type| source ---|---|--- 2024-12-24 16:24:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113708724590672241 2024-12-24 17:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x3d3xrd22 2024-12-24 19:25:27+00:00| seen|...

CVE-2024-53163

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat420xx - fix off by one in uofgetname This is called from uofgetname420xx where "numobjs" is the ARRAYSIZE of fwobjs. The needs to be = to prevent an out of bounds access...

CVE-2024-53162 crypto: qat/qat_4xxx - fix off by one in uof_get_name()

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat4xxx - fix off by one in uofgetname The fwobjs array has "numobjs" elements so the needs to be = to prevent an out of bounds read...

CVE-2024-53156 wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for connrspepid in htcconnectservice I found the following bug in my fuzzer: UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htchst.c:26:51 index 255 is out of range for type...

CVE-2024-53149 usb: typec: ucsi: glink: fix off-by-one in connector_status

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

CVE-2024-53148 comedi: Flush partial mappings in error case

In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remappfnrange calls succeeded before one failed, we still have buffer pages mapped into the userspace page tables when we drop the buffer reference with comedibufmapputbm. The...

CVE-2024-53147 exfat: fix out-of-bounds access of directory entries

In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater than or equal to the cluster size, if startclu becomes an EOF clusteran invalid cluster due to file system corruption, then the...

CVE-2024-53146 NFSD: Prevent a potential integer overflow

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...

CVE-2024-53241

CVE-2024-53241 affects the Linux kernel when running with Xen PV guests. The root cause is an unsafe PV iret hypercall path via the Xen hypercall page. The fix replaces the hypercall-page jump with an inlined sequence in xen-asm.S to stop using the hypercall page, preparing for its removal due to...

CVE-2024-11896

CVE-2024-11896: The Text Prompter – Unlimited chatgpt text prompts for openai tasks WordPress plugin contains a stored XSS flaw in the text_prompter shortcode (all versions up to 1.0.7). An authenticated attacker with contributor-level access can inject scripts into pages, which will execute for ...

CVE-2024-41883 Null Pointer Dereference

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR . An attacker enters a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The manufacturer has released patch firmware for the flaw, plea...

CVE-2024-12034 Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP...

CVE-2024-53162

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat4xxx - fix off by one in uofgetname The fwobjs array has "numobjs" elements so the needs to be = to prevent an out of bounds read...

CVE-2024-47515

A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. This flaw allows a malicious user to take advantage of the Pagure instance...

CVE-2024-53163

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat420xx - fix off by one in uofgetname This is called from uofgetname420xx where "numobjs" is the ARRAYSIZE of fwobjs. The needs to be = to prevent an out of bounds access...

CVE-2018-25106

The NebulaX Theme for WordPress (versions up to 5.0) contains a SQL injection vulnerability in the function nebula_send_to_hubspot (libs/Legacy/Legacy.php). The issue can be triggered remotely and may lead to data exposure or modification. A patch named 41230a81db0f671c570c2644bc2f80565ca83c5a fi...

CVE-2024-23945

creationtimestamp| type| source ---|---|--- 2024-12-23 15:30:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113702851117565346 2024-12-23 18:20:07+00:00| seen| https://t.me/cvedetector/13542 2024-12-25 05:04:08+00:00| seen|...