WordPress Easy Property Listings Plugin <= 3.5.2 is vulnerable to SQL Injection

Software Easy Property Listings Type Plugin Vulnerable versions = 3.5.2 Fixed in 3.5.3 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1893 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 741d2179a015 Credits Krzysztof Zając Required privilege...

GeoServer Cross-Site Scripting Vulnerability

GeoServer is an open source software server written in Java. Allows users to share and edit geospatial data. A cross-site scripting vulnerability exists in GeoServer versions prior to 2.23.4 and 2.24.1, which stems from the application's lack of effective filtering and escaping of user-supplied...

PT-2024-20213 · Delta Electronics +1 · Diaenergie

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: A SQL injection issue exists in the GetDIAE slogListParameters, allowing for potential exploitation. No information is provided about the estimated number of potentially affected devices...

WordPress Permalink Manager Lite Plugin <= 2.4.3.1 is vulnerable to Broken Access Control

Software Permalink Manager Lite Type Plugin Vulnerable versions = 2.4.3.1 Fixed in 2.4.3.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2543 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 01746b8cad8b Credits Muhammad Zeeshan...

WordPress LiquidPoll – Advanced Polls for Creators and Brands Plugin <= 3.3.76 is vulnerable to Sensitive Data Exposure

Software LiquidPoll – Advanced Polls for Creators and Brands Type Plugin Vulnerable versions = 3.3.76 Fixed in 3.3.77 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2080 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

CVE-2024-1811 OpenText ArcSight Platform Remote Vulnerability

A potential vulnerability has been identified in OpenText ArcSight Platform. The vulnerability could be remotely exploited...

CVE-2023-36424

creationtimestamp| type| source ---|---|--- 2024-03-20 05:06:02+00:00| seen| https://t.me/CyberSecurityTechnologies/9584 2024-03-22 17:30:37+00:00| published-proof-of-concept| https://t.me/CNArsenal/2159 2024-03-23 08:51:43+00:00| seen| https://t.me/proxybar/1949 2024-03-23 23:50:30+00:00|...

CVE-2024-28734

creationtimestamp| type| source ---|---|--- 2024-03-19 15:26:59+00:00| seen| https://t.me/ctinow/211604 2024-04-07 22:02:52+00:00| seen| https://t.me/arpsyndicate/4382 2025-02-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-04 2025-05-15 00:00:00+00:00|...

WordPress s2Member Pro Plugin <= 230815 is vulnerable to Sensitive Data Exposure

Software s2Member Pro Type Plugin Vulnerable versions = 230815 Fixed in 240315 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0899 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 2b01d6ca4fd7 Credits Francesco Carlucci Required...

IBM Integration Bus for z/OS Cross-Site Request Forgery Vulnerability

IBM Integration Bus IBM WebSphere Message Broker is an enterprise service bus ESB product from International Business Machines IBM. The product provides connectivity and common data transformation for Service Oriented Architecture SOA environments and non-SOA environments. A cross-site request...

WordPress WooCommerce Google Feed Manager Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Google Feed Manager Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29112 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a47ab0c3a92d Credits Joshua Chan Required...

CVE-2024-28847

creationtimestamp| type| source ---|---|--- 2024-03-15 06:11:53+00:00| published-proof-of-concept| https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-8p5r-6mvv-2435 2024-03-15 21:22:18+00:00| seen| https://t.me/ctinow/209162 2024-03-15 21:26:31+00:00| seen|...

IBM Maximo Application Suite Log Information Disclosure Vulnerability

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. A log information disclosure vulnerability exists in IBM Maximo Application Suite versions 8.10 and 8.11...

CVE-2024-25155

creationtimestamp| type| source ---|---|--- 2024-03-13 16:27:19+00:00| seen| https://t.me/ctinow/206865 2024-03-19 14:50:05+00:00| exploited| https://t.me/truesecator/5539...

CVE-2024-25154

creationtimestamp| type| source ---|---|--- 2024-03-13 16:27:17+00:00| seen| https://t.me/ctinow/206864 2024-03-19 14:50:05+00:00| exploited| https://t.me/truesecator/5539...

Fortinet FortiOS and FortiProxy Null Pointer Dereference Vulnerability

Fortinet FortiOS is a Fortinet security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees from cyberattacks by combining a variety of detection technologies such as Web filtering, DNS filtering, DLP, anti-virus,...

CVE-2024-26198

creationtimestamp| type| source ---|---|--- 2024-03-12 19:52:13+00:00| seen| https://t.me/ctinow/206054 2024-03-13 08:30:38+00:00| seen| https://t.me/kasperskyb2b/1170 2024-03-13 11:41:56+00:00| seen| https://t.me/truesecator/5514 2024-03-13 20:18:29+00:00| seen| https://t.me/ctinow/207110...

Another Patch Tuesday with no zero-days, only two critical vulnerabilities disclosed by Microsoft

For the second month in 2024, there are no actively exploited vulnerabilities included in this months security update from Microsoft. Marchs Patch Tuesday is relatively light, containing 60 vulnerabilities -- only two labeled "critical." Last months Patch Tuesday included more than 70 security...

CVE-2023-49785

creationtimestamp| type| source ---|---|--- 2024-03-12 01:26:57+00:00| seen| https://t.me/ctinow/205222 2024-03-12 01:26:58+00:00| seen| https://t.me/ctinow/205223 2024-03-13 08:39:26+00:00| seen| https://t.me/arpsyndicate/4186 2024-03-13 14:00:55+00:00| seen| https://t.me/truesecator/5515...

Customer Support System Cross-Site Scripting Vulnerability (CNVD-2024-14026)

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...