CVE-2024-11378 Bizapp for WooCommerce <= 2.0.8 - Reflected Cross-Site Scripting

The Bizapp for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'error' parameter in all versions up to, and including, 2.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2024-12557

creationtimestamp| type| source ---|---|--- 2025-01-07 03:37:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/293 2025-01-07 04:13:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113785123325157140 2025-01-07 04:15:57+00:00| seen|...

CVE-2024-12425

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...

CVE-2025-21614

A denial of service DoS vulnerability was found in go-git. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which triggers resource exhaustion in go-git clients...

CVE-2025-21620

CVE-2025-21620 affects Deno’s fetch() redirect handling: when an Authorization header is sent to one domain and the response redirects to another, the follow-up request preserves the header, potentially leaking it cross-origin. The issue is confirmed in Deno and is mitigated by upgrading to versi...

CVE-2024-48455

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a...

CVE-2024-55629

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...

CVE-2024-55629 Suricata generic detection bypass using TCP urgent support

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...

CVE-2024-55629 Suricata generic detection bypass using TCP urgent support

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...

CVE-2024-56760

creationtimestamp| type| source ---|---|--- 2025-01-06 17:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3n6lm2gr25 2025-01-06 17:43:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf3opboajv25 2025-01-06 19:26:40+00:00| seen|...

CVE-2024-55605

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the tolowercase, touppercase, stripwhitespace, compresswhitespace, dotprefix, headerlowercase, strippseudoheaders, urldecode, or xor...

CVE-2024-56767

In the Linux kernel, the following vulnerability has been resolved: dmaengine: atxdmac: avoid nullprtderef in atxdmacprepdmamemset The atxdmacmemsetcreatedesc may return NULL, which will lead to a null pointer dereference. For example, the len input is error, or the atchan-freedescslist is empty...

CVE-2024-45559

creationtimestamp| type| source ---|---|--- 2025-01-06 11:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z2uejgp2o 2025-01-06 11:42:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113781225697590487 2025-01-06 12:44:46+00:00| seen|...

CVE-2024-45558

creationtimestamp| type| source ---|---|--- 2025-01-06 11:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z2ry2ww22 2025-01-06 11:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z2ry2ww22 2025-01-06 11:42:02+00:00| seen|...

CVE-2024-43064

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU...

CVE-2024-45546

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...

CVE-2024-33059

Memory corruption while processing frame command IOCTL calls...

CVE-2024-45559 Buffer Over-read in Automotive OS Platform

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend...

GHSA-C797-JX9V-F674

creationtimestamp| type| source ---|---|--- 2025-01-06 06:40:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/149...

CVE-2024-11849 Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS

The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...