CVE-2024-12152

creationtimestamp| type| source ---|---|--- 2025-01-07 09:31:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113786373317643206 2025-01-07 09:36:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/384 2025-01-07 10:15:31+00:00| seen|...

CVE-2024-9354

creationtimestamp| type| source ---|---|--- 2025-01-07 07:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544johmk2c 2025-01-07 07:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544johmk2c 2025-01-07 07:16:29+00:00| seen|...

CVE-2024-10102

creationtimestamp| type| source ---|---|--- 2025-01-07 06:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yqbaytp25 2025-01-07 06:33:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpmy7nq2y 2025-01-07 06:37:03+00:00| seen|...

CVE-2024-12261

The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-9702

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/338 2025-01-07 06:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4ys5rbxq2e 2025-01-07 06:33:54+00:00| seen|...

CVE-2024-12471

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/334 2025-01-07 06:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrijmdo2o 2025-01-07 06:18:52+00:00| seen|...

CVE-2024-12439

CVE-2024-12439: WordPress Marketplace Items plugin (up to 1.5.5) is affected by Stored Cross-Site Scripting via the marketplace shortcode due to insufficient input sanitization and output escaping. Exploitation requires authenticated attacker access (Contributor+) and can lead to injected scripts...

CVE-2024-10527

creationtimestamp| type| source ---|---|--- 2025-01-07 05:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4venubgb2m 2025-01-07 16:37:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/451...

CVE-2024-12313

creationtimestamp| type| source ---|---|--- 2025-01-07 04:39:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/327 2025-01-07 05:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhhhji425 2025-01-07 05:48:09+00:00| seen|...

CVE-2024-11378 Bizapp for WooCommerce <= 2.0.8 - Reflected Cross-Site Scripting

The Bizapp for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'error' parameter in all versions up to, and including, 2.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2024-12557

creationtimestamp| type| source ---|---|--- 2025-01-07 03:37:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/293 2025-01-07 04:13:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113785123325157140 2025-01-07 04:15:57+00:00| seen|...

CVE-2024-12425

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...

CVE-2025-21614

A denial of service DoS vulnerability was found in go-git. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which triggers resource exhaustion in go-git clients...

CVE-2025-21620

CVE-2025-21620 affects Deno’s fetch() redirect handling: when an Authorization header is sent to one domain and the response redirects to another, the follow-up request preserves the header, potentially leaking it cross-origin. The issue is confirmed in Deno and is mitigated by upgrading to versi...

CVE-2024-48455

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a...

CVE-2024-55629

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...

CVE-2024-55629 Suricata generic detection bypass using TCP urgent support

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...

CVE-2024-55629 Suricata generic detection bypass using TCP urgent support

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...

CVE-2024-56760

creationtimestamp| type| source ---|---|--- 2025-01-06 17:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3n6lm2gr25 2025-01-06 17:43:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf3opboajv25 2025-01-06 19:26:40+00:00| seen|...

CVE-2024-55605

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the tolowercase, touppercase, stripwhitespace, compresswhitespace, dotprefix, headerlowercase, strippseudoheaders, urldecode, or xor...