CVE-2025-0203

creationtimestamp| type| source ---|---|--- 2025-01-04 07:01:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113768796544207117 2025-01-04 08:54:15+00:00| seen| https://t.me/cvedetector/14263...

CVE-2025-0196

creationtimestamp| type| source ---|---|--- 2025-01-03 19:08:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113765993265708846 2025-01-03 21:12:12+00:00| seen| https://t.me/cvedetector/14241 2025-09-03 13:30:06+00:00| seen| MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7...

GHSA-WV23-996V-Q229

creationtimestamp| type| source ---|---|--- 2025-01-03 17:27:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113765598049117930...

CVE-2024-56412 PhpSpreadsheet vulnerable to bypass of the XSS sanitizer using the javascript protocol and special characters

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to bypass of the cross-site scripting sanitizer using the javascript protocol and special characters. An attacker can use special characters, so that the...

CVE-2024-56410 PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability in custom properties

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have a cross-site scripting XSS vulnerability in custom properties. The HTML page is generated without clearing custom properties. Versions 3.7.0, 2.3.5, 2.1.6, and 1.29.7...

CVE-2024-55078

creationtimestamp| type| source ---|---|--- 2025-01-03 14:41:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113764946112818435 2025-01-03 15:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3letuzycxso2m 2025-01-03 15:52:52+00:00| seen|...

CVE-2024-9138 Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a...

CVE-2024-53841

creationtimestamp| type| source ---|---|--- 2025-01-03 04:09:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113762457450490131 2025-01-03 04:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq6ih7q225 2025-01-03 04:42:42+00:00| seen|...

CVE-2024-53840

creationtimestamp| type| source ---|---|--- 2025-01-03 04:09:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113762457436162539 2025-01-03 04:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq6getrk2f 2025-01-03 04:42:45+00:00| seen|...

CVE-2024-53840

there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-53835

there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-11624

there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43768

CVE-2024-43768 affects Google Android Skia: in SkDeflate.cpp’s skia_alloc_func there is an out-of-bounds write caused by an integer overflow. This could enable local escalation of privilege with no additional execution privileges and no user interaction required. Remediation: patch updates exist ...

CVE-2024-55540

creationtimestamp| type| source ---|---|--- 2025-01-02 16:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwgfbrv2a 2025-01-02 16:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlaehw2q 2025-01-02 17:36:36+00:00| seen|...

CVE-2024-56413

The CVE-2024-56413 issue affects Acronis Cyber Protect 16 (Windows) prior to build 39169 and is due to missing session invalidation after a user is deleted. This can leave a deleted user’s session active, creating potential access risks. The PT-2025-3276 entry confirms affected versions and recom...

CVE-2022-45830

creationtimestamp| type| source ---|---|--- 2025-01-02 15:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerele3jke22 2025-01-02 15:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lergv4udxs2u 2025-01-02 16:46:15+00:00| seen|...

CVE-2024-56137 MaxKB RCE vulnerability in function library

MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation RAG. Prior to version 1.9.0, a remote command execution vulnerability exists in the module of function library. The vulnerabili...

CVE-2024-56014

creationtimestamp| type| source ---|---|--- 2025-01-02 13:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler5up2vkw2l 2025-01-02 14:42:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lercqljepl2y 2025-01-02 15:05:32+00:00| seen|...

CVE-2024-56264

creationtimestamp| type| source ---|---|--- 2025-01-02 12:21:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2u5k4gw2f 2025-01-02 14:14:58+00:00| seen| https://t.me/cvedetector/14121 2025-01-02 21:08:37+00:00| seen|...

CVE-2024-56261

creationtimestamp| type| source ---|---|--- 2025-01-02 12:21:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2twmim52i 2025-01-02 12:42:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ler3zqh2tq2q 2025-01-02 14:15:11+00:00| seen|...