CVE-2024-43971

creationtimestamp| type| source ---|---|--- 2024-09-18 03:20:08+00:00| seen| https://t.me/cvedetector/5898 2026-01-03 21:25:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-43971.yaml 2026-01-05 21:03:10+00:00| seen|...

CVE-2024-38812

creationtimestamp| type| source ---|---|--- 2024-09-17 20:37:49+00:00| seen| https://t.me/cvedetector/5831 2024-09-18 07:13:10+00:00| seen| https://t.me/thehackernews/5595 2024-09-18 08:24:29+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus22/2024 2024-09-18 09:07:11+00:00|...

Security Advisory Ivanti Cloud Service Appliance (CSA) (CVE-2024-8190)

Summary Ivanti has released a security update for Ivanti CSA 4.6 which addresses a high severity vulnerability. Successful exploitation could lead to unauthorized access to the device running the CSA. Dual-homed CSA configurations with eth0 as an internal network, as recommended by Ivanti, are at...

CVE-2024-7591

creationtimestamp| type| source ---|---|--- 2024-09-05 21:23:16+00:00| seen| https://t.me/cvedetector/4935 2024-09-06 10:59:54+00:00| seen| https://t.me/CyberBulletin/566 2024-09-06 11:36:42+00:00| seen| https://t.me/InfoSecInsider/23688 2024-09-06 11:36:44+00:00| seen|...

CVE-2024-24759

creationtimestamp| type| source ---|---|--- 2024-09-05 09:40:20+00:00| published-proof-of-concept| https://github.com/mindsdb/minds-platform/security/advisories/GHSA-4jcv-vp96-94xr 2024-09-05 19:43:06+00:00| seen| https://t.me/cvedetector/4933 2024-09-08 06:29:52+00:00| seen|...

CVE-2024-40711

creationtimestamp| type| source ---|---|--- 2024-09-05 07:08:09+00:00| seen| https://t.me/CyberBulletin/552 2024-09-05 17:15:55+00:00| seen| Telegram/JV0n6pLsOT6VJZsgrEwvOevCq5yhBWTCVGtt7W2JJuNFjI 2024-09-05 17:18:44+00:00| seen| https://t.me/CyberSecurityIL/55923 2024-09-05 18:58:23+00:00| seen|...

CVE-2024-8252

creationtimestamp| type| source ---|---|--- 2024-08-30 13:08:36+00:00| seen| https://t.me/cvedetector/4511 2026-04-08 08:56:40+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-8252.yaml 2026-04-10 21:03:07+00:00| seen|...

CVE-2024-7313

creationtimestamp| type| source ---|---|--- 2024-08-26 08:41:28+00:00| seen| https://t.me/cvedetector/4099 2025-04-04 13:43:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-7313.yaml...

PT-2024-94: Cross-Site Request Forgery (CSRF) and Reflected Cross-Site Scripting (XSS) in Netcat CMS (module netshop)

The vulnerability was identified in Netcat CMS module netshop, version 6.4 Extra. The vulnerability is related to cross-site request forgery. The discovered vulnerability allows an authorized attacker with the administrator role to execute arbitrary JavaScript code in the browser of the attacked...

PT-2024-76: Time-based SQL Injection in Netcat CMS (module comments)

The vulnerability was identified in Netcat CMS module comments, version 6.4 Extra. The discovered vulnerability allows an attacker to read information from the database. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 20.08.2024 Recommendations: Update to version or...

PT-2024-77: Time-based SQL Injection in Netcat CMS (module comments)

The vulnerability was identified in Netcat CMS module comments, version 6.4 Extra. The discovered vulnerability allows an attacker to read information from the database. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 20.08.2024 Recommendations: Update to version or...

PT-2024-91: Time-based SQL Injection in Netcat CMS

The vulnerability was identified in Netcat, version 6.4 Extra. The discovered vulnerability allows an attacker to read information from the database. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 20.08.2024 Recommendations: Update to version or higher Additional...

CVE-2023-7246

creationtimestamp| type| source ---|---|--- 2024-08-16 22:05:07+00:00| seen| https://t.me/cvedetector/3364 2025-04-04 14:05:31+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-7246.yaml...

CVE-2024-6651

creationtimestamp| type| source ---|---|--- 2024-08-06 09:09:08+00:00| seen| https://t.me/cvedetector/2536 2025-03-13 03:09:39+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6651.yaml 2025-03-13 21:02:10+00:00| seen|...

CVE-2024-7314

creationtimestamp| type| source ---|---|--- 2024-08-02 19:52:13+00:00| seen| https://t.me/cvedetector/2356 2025-04-04 06:21:26+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-7314.yaml 2025-04-04 21:02:09+00:00| seen|...

CVE-2024-7357

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgimain of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. The...

PT-2024-07: Reading arbitrary files via API in PT Application Inspector (PT AI)

The vulnerability was identified in PT AI affecting versions 4.3.1 to 4.7.2. The vulnerability can be exploited by an attacker with network access to the PT AI control server to read source code files of other user's projects. The vulnerability can be exploited for privilege escalation...

PT-2024-09: Creating arbitrary files during project creation in PT Application Inspector (PT AI)

The vulnerability was identified in PT AI affecting versions 4.3.1 to 4.7.2. The vulnerability can be exploited by an attacker with network access to the PT AI control server to create arbitrary files without the ability to overwrite existing files. Exploitation of the vulnerability requires...

PT-2024-08: Reading arbitrary files when scanning a project linked to a git repository in PT Application Inspector (PT AI)

The vulnerability was identified in PT AI affecting versions 4.3.1 to 4.7.2. The vulnerability can be exploited by an attacker with network access to the PT AI control server to read source code files of other user's projects. The vulnerability can be exploited for privilege escalation...

pucp.edu.pe Cross Site Scripting vulnerability OBB-3950483

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...