CVE-2024-40582

Pentaminds CuroVMS v2.0.1 was discovered to contain exposed sensitive information...

CVE-2024-12342 TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service

A vulnerability was found in TP-Link VN020 F3vT TTV6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiat...

CVE-2024-44855

creationtimestamp| type| source ---|---|--- 2024-12-06 21:55:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113608108082559325 2024-12-06 23:59:42+00:00| seen| https://t.me/cvedetector/12284...

CVE-2024-0139

creationtimestamp| type| source ---|---|--- 2024-12-06 19:39:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113607571768124044 2024-12-06 22:19:19+00:00| seen| https://t.me/cvedetector/12276...

CVE-2024-52558

CVE-2024-52558 affects Planet Technology’s Planet WGS-804HPT industrial 8-port switch. Affected component is the web service that handles HTTP requests; an unauthenticated attacker can send a malformed request exploiting an integer underflow to crash the device. Official summaries from CISA/ICS d...

CVE-2024-48868

An improper neutralization of CRLF sequences 'CRLF Injection' vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to modify application data. We have already fixed the vulnerability in the following version...

CVE-2024-54141

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database ie postgreSQL server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0...

CVE-2024-53809

creationtimestamp| type| source ---|---|--- 2024-12-06 14:20:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113606317145726288...

CVE-2024-53805

Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through = 1.8.16.0...

CVE-2024-53801

creationtimestamp| type| source ---|---|--- 2024-12-06 13:50:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113606199038351513...

CVE-2024-53824 WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AREOI All Bootstrap Blocks allows PHP Local File Inclusion.This issue affects All Bootstrap Blocks: from n/a through 1.3.19...

CVE-2024-44856

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2smacplanner...

CVE-2024-53142

In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 + data ... 55...

CVE-2024-41648

CVE-2024-41648 concerns Open Robotics’ ROS 2 Navigation2 on the Humble release. The vulnerability arises from insecure permissions in the nav2_regulated_pure_pursuit_controller, enabling an attacker to execute arbitrary code by supplying a crafted script. Affected software: ROS 2 Navigation2 (nav...

CVE-2018-9390

creationtimestamp| type| source ---|---|--- 2024-12-05 22:31:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113602586864752201 2024-12-06 01:24:10+00:00| seen| https://t.me/cvedetector/12160...

CVE-2024-53523

JSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is vulnerable to Directory Traversal in the findbyfile function...

CVE-2024-12187

creationtimestamp| type| source ---|---|--- 2024-12-05 00:29:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113597384202826312 2024-12-05 02:48:31+00:00| seen| https://t.me/cvedetector/12059...

CVE-2024-37861

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...

CVE-2018-9400

creationtimestamp| type| source ---|---|--- 2024-12-04 23:16:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113597099516073767 2024-12-05 01:58:21+00:00| seen| https://t.me/cvedetector/12056...

CVE-2018-9396

creationtimestamp| type| source ---|---|--- 2024-12-04 22:07:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113596828591193680 2024-12-05 00:17:48+00:00| seen| https://t.me/cvedetector/12038...