BELL-CVE-2024-36881

Bulletin has no description...

CVE-2024-35431

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE: Third parties have indicated other versions are also vulnerable including up to 6.4.1...

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

BELL-CVE-2023-52837

Bulletin has no description...

BELL-CVE-2023-52800

Bulletin has no description...

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

BELL-CVE-2024-35869

Bulletin has no description...

BELL-CVE-2024-35984

Bulletin has no description...

BELL-CVE-2024-35924

Bulletin has no description...

CVE-2024-27972

creationtimestamp| type| source ---|---|--- 2024-05-18 14:19:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7335 2025-02-19 21:02:49+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsqitl2b...

BELL-CVE-2024-35801

Bulletin has no description...

BELL-CVE-2024-35810

Bulletin has no description...

CVE-2024-35109

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /homeProdeal.php?mudi=add&nohrefStr=close...

CVE-2024-4770 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2024-32351

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "mru" parameter in the "cstecgi.cgi" binary...

CVE-2024-34942

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand...

BELL-CVE-2024-29510

Bulletin has no description...

CVE-2024-34352 Arbitrary file write vulnerability in 1Panel

1Panel is an open source Linux server operation and maintenance management panel. Prior to v1.10.3-lts, there are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. The mirror configuration write symbol...

CVE-2024-34308

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-31456

GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability from map search. This vulnerability is fixed in 10.0.15...