CVE-2024-47324

CVE-2024-47324 concerns the WordPress plugin WP Timeline – Vertical and Horizontal timeline (Ex-Themes). Connected sources confirm an improper limitation of a pathname to a restricted directory, enabling Local File Inclusion. Affected versions are WP Timeline – Vertical and Horizontal timeline pl...

CVE-2024-47323 WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin allows PHP Local File Inclusion.This issue affects WP Timeline – Vertical and Horizontal timeline plugin: from n/a through 3.6.7...

CVE-2024-47323

CVE-2024-47323 affects WordPress WP Timeline – Vertical and Horizontal timeline plugin versions

CVE-2024-47323 WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vertical and Horizontal timeline plugin: from n/a through = 3.6.7...

MAL-2024-8314 Malicious code in @diotoborg/eveniet-fugiat-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d1a19857ff3b2fb4c8a77a37c2d48b75e9a763b96b0ba82df890faa99f90875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ex-quo-odio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489ca4280aadffd49844169c03fe6e70b24d1e256ce8fc4d5c26e8adaa0e5c5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8319 Malicious code in @diotoborg/ex-repellat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e30f0f24bcabf5b6bce5083307e9ba4d5f6aadd051592bbf5f715d455792651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AZL-48462 CVE-2024-8006 affecting package nmap for versions less than 7.93-3

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

DEBIAN-CVE-2024-8006

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

PT-2024-6095 · Libpcap +3 · Libpcap +3

Name of the Vulnerable Software and Affected Versions: libpcap affected versions not specified Description: The issue is related to a null pointer dereference in the pcap findalldevs ex function of the libpcap library. This function becomes available when a user builds libpcap with remote packet...

CVE-2024-7608: Path Traversal: '.../...//'

An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal...

HackerOne: Access to limited confidential information of private program as a Ex-reporter, Report Participant(external user) & Ex-staff member

The report described a vulnerability that allowed access to limited confidential information of a private program by ex-reporters, report participants, and ex-staff members of the program. The vulnerability was due to an endpoint that exposed details about the private program, including its...

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, which arises from a data...

MAL-2024-7214 Malicious code in @zitterorg/fugit-ex-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f7f3694766a66580a12a7935f3749211f56225ef96551bdb577e24042976270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7228 Malicious code in @zitterorg/impedit-ex-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a01b2c2c190e9b51f0ad7dd5d279aa1887f4286b8fd0f273f681093968ed6799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7206 Malicious code in @zitterorg/ex-dolorum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a000f011dd9a5f364a69470b31c7bcdd73b19a996edaf75387bb4c734c139b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/ut-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 156a4b011f268f260000f45c26a9569917c938f7fe5860638e44bbf758b24a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Juniper Networks Releases Critical Security Update for Routers

Juniper Networks has released out-of-band security updates to address a critical security flaw that could lead to an authentication bypass in some of its routers. The vulnerability, tracked as CVE-2024-2973, carries a CVSS score of 10.0, indicating maximum severity. "An Authentication Bypass Usin...

Exploit for PHP External Variable Modification in Juniper Junos

PoC exploit for CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847. This exploit targets Juniper JunOS within SRX and EX Series products, achieving Remote Code Execution RCE by chaining four vulnerabilities. The exploit involves uploading an arbitrary PHP file to a restricted director...

CVE-2024-3873

A vulnerability was found in SMI SMI-EX-5414W up to 1.0.03. It has been classified as problematic. This affects an unknown part of the component Web Interface. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...