Wavlink AC3000 firewall.cgi iptablesWebsFilterRun() command injection vulnerability

Talos Vulnerability Report TALOS-2024-2023 Wavlink AC3000 firewall.cgi iptablesWebsFilterRun command injection vulnerability January 14, 2025 CVE Number CVE-2024-39367 SUMMARY An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun functionality of Wavlink AC3000...

Wavlink AC3000 adm.cgi sch_reboot() OS command injection vulnerabilities

Talos Vulnerability Report TALOS-2024-2033 Wavlink AC3000 adm.cgi schreboot OS command injection vulnerabilities January 14, 2025 CVE Number CVE-2024-39781,CVE-2024-39783,CVE-2024-39782 SUMMARY Multiple OS command injection vulnerabilities exist in the adm.cgi schreboot functionality of Wavlink...

CVE-2023-45878

creationtimestamp| type| source ---|---|--- 2025-01-08 17:16:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/746 2025-03-20 16:00:08+00:00| published-proof-of-concept| Telegram/gMA-tjO3u7r6v0DXDtEtTd2G2qr0DluN8PNDCBpeT15Ynng 2025-03-21 04:00:08+00:00|...

CVE-2023-47397

creationtimestamp| type| source ---|---|--- 2025-01-07 06:04:49+00:00| confirmed| https://gist.github.com/LioTree/e738a06c3e7b5dfb838a8734d5e15423...

CVE-2024-12849

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/343 2025-01-07 06:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrq7eak2m 2025-01-07 06:33:54+00:00| seen|...

CVE-2024-54767

creationtimestamp| type| source ---|---|--- 2025-01-06 22:37:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/263 2025-01-06 23:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4bb4ufpf2o 2025-01-06 23:37:48+00:00| seen|...

CVE-2024-54764

creationtimestamp| type| source ---|---|--- 2025-01-06 22:37:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/262 2025-01-06 23:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4bb2e2yj2k 2025-01-06 23:37:47+00:00| seen|...

CVE-2024-54763

creationtimestamp| type| source ---|---|--- 2025-01-06 22:24:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113783751871674708 2025-01-06 22:37:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/264 2025-01-06 22:38:44+00:00| seen|...

CVE-2024-48455

creationtimestamp| type| source ---|---|--- 2025-01-06 21:43:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113783589029330976 2025-01-06 22:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf45vs2etg2a 2025-01-07 00:28:31+00:00| seen|...

CVE-2024-55457

creationtimestamp| type| source ---|---|--- 2025-01-06 13:20:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55457.yaml 2025-02-20 20:41:25+00:00| seen| https://t.me/cvedetector/18591 2025-06-29 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-56512

creationtimestamp| type| source ---|---|--- 2024-12-28 06:51:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ledw3yyvwx22 2024-12-28 16:22:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113731368868060448 2024-12-28 17:15:29+00:00| seen|...

PT-2024-66: Unauthorized Reflected XSS in PhpSpreadsheet (Currency.php)

The vulnerability was identified in PhpSpreadsheet, versions = 3.0.0, = 2.0.0, = 2.2.0, = 3.0.0, = 2.0.0, = 2.2.0, = 2.3.4 to 2.3.5 or higher Additional information: Researcher: Aleksey Solovev Positive Technologies...

PT-2024-69: Cross-Site Scripting (XSS) in custom properties in PhpSpreadsheet

The vulnerability was identified in PhpSpreadsheet, versions = 3.0.0, = 2.0.0, = 2.2.0, = 3.0.0, = 2.0.0, = 2.2.0, = 2.3.4 to 2.3.5 or higher Additional information: Security advisory Researcher: Aleksey Solovev Positive Technologies...

CVE-2024-53991

creationtimestamp| type| source ---|---|--- 2024-12-19 19:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681106551870483 2024-12-19 19:23:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113681119447478911 2024-12-19 20:15:34+00:00| seen|...

CVE-2024-11740

creationtimestamp| type| source ---|---|--- 2024-12-19 05:31:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113677846724673133 2024-12-19 08:57:55+00:00| seen| https://t.me/cvedetector/13310 2025-01-29 21:18:16+00:00| published-proof-of-concept|...

CVE-2024-56145

creationtimestamp| type| source ---|---|--- 2024-12-18 22:54:13+00:00| seen| https://t.me/cvedetector/13254 2024-12-19 03:15:06+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113677310750656920 2024-12-19 21:48:04+00:00| seen|...

CVE-2024-12356

creationtimestamp| type| source ---|---|--- 2024-12-17 04:32:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113666290051812274 2024-12-17 06:44:55+00:00| seen| https://t.me/cvedetector/13067 2024-12-17 06:47:32+00:00| seen|...

CVE-2024-54385

creationtimestamp| type| source ---|---|--- 2024-12-16 15:28:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113663205872237608 2025-01-06 20:18:17+00:00| seen| https://infosec.exchange/users/randomrobbie/statuses/113783255512649461 2025-01-06 23:00:20+00:00| confirmed|...

CVE-2019-9912

creationtimestamp| type| source ---|---|--- 2024-12-14 05:39:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-9912.yaml...

CVE-2024-10783

creationtimestamp| type| source ---|---|--- 2024-12-13 09:30:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113644811939302804 2024-12-13 12:25:40+00:00| seen| https://t.me/cvedetector/12854 2025-03-24 14:32:29+00:00| confirmed|...