CVE-2024-54410 WordPress SOPA Blackout plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in eagerterrier SOPA Blackout sopa-blackout allows Stored XSS.This issue affects SOPA Blackout: from n/a through = 1.4...

Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page

Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page Vulnerability Overview The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page. Identifier :...

Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page

Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page Vulnerability Overview The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. Identifier :...

CVE-2024-54114

Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-11723

The CVE CVE-2024-11723 affects the kvCORE IDX plugin for WordPress. It enables Reflected Cross‑Site Scripting via any parameter on pages that render kvcoreidx_listings_sitemap_ranges, kvcoreidx_listings_sitemap_page, kvcoreidx_agent_profile_sitemap, or kvcoreidx_agent_profile shortcodes, on all v...

CVE-2024-44225

creationtimestamp| type| source ---|---|--- 2024-12-11 22:59:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113636667856734940 2025-01-07 05:40:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/354...

[SECURITY] [DSA 5828-1] python-aiohttp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5828-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 11, 2024 https://www.debian.org/security/faq -...

CVE-2024-47602 GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. This function does not properly check the validity of the stream-codecpriv pointer in th...

Security Advisory - Path Traversal Vulnerability in Huawei Home Music System

Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or the file permission to be changed.Vulnerability ID:HWPSIRT-2023-60613 This vulnerability has been assigned a CVEID:CVE-2023-7300...

CVE-2024-12381

creationtimestamp| type| source ---|---|--- 2024-12-10 23:02:34+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113631019234576069 2024-12-11 14:54:42+00:00| seen| https://t.me/CyberBulletin/26760 2024-12-11 14:54:43+00:00| seen| https://t.me/CyberBulletin/1733 2024-12-11...

CVE-2024-43594 Microsoft System Center Elevation of Privilege Vulnerability

...

CVE-2024-55586

creationtimestamp| type| source ---|---|--- 2024-12-10 13:50:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113628846923942834 2024-12-10 16:38:07+00:00| seen| https://t.me/cvedetector/12499...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 29 for SLE 15 SP4) (SUSE-SU-2024:4268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-49857

creationtimestamp| type| source ---|---|--- 2024-12-09 14:01:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113623229160381013...

[SECURITY] [DLA 3988-1] jinja2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3988-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 09, 2024 https://wiki.debian.org/LTS -...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 45 for SLE 15 SP3) (SUSE-SU-2024:4246-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-54137

creationtimestamp| type| source ---|---|--- 2024-12-06 16:04:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113606727044472926 2024-12-06 18:07:58+00:00| seen| https://t.me/cvedetector/12239...

Advisory ROSA-SA-2024-2538

software: libgsf 1.14.53 WASP: ROSA-CHROME packageevrstring: libgsf-1.14.53-1 CVE-ID: CVE-2024-42415 BDU-ID: 2024-08625 CVE-Crit: HIGH CVE-DESC.: A vulnerability in The GNOME Project's structured file library libgsf involves a dynamic memory-based integer overflow when processing the sector...

CVE-2018-9395

creationtimestamp| type| source ---|---|--- 2024-12-04 17:27:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113595728185756705 2024-12-04 20:06:46+00:00| seen| https://t.me/cvedetector/12027...

CVE-2024-53863

creationtimestamp| type| source ---|---|--- 2024-12-03 17:05:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113589978642754398 2024-12-03 20:40:51+00:00| seen| https://t.me/cvedetector/11905...