CVE-2024-20146

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue I...

CVE-2024-20144

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09167056;...

CVE-2024-48455

Several Netis wireless routers, including models NX10 , NC65 , NC63 , NC21 , and MW5360 , are vulnerable to an information disclosure flaw. A remote attacker can obtain sensitive configuration data, such as network settings and credentials, by exploiting the mode_name and wl_link parameters of th...

CVE-2024-48456

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a...

CVE-2024-51111

A Cross-Site Scripting (XSS) vulnerability exists in Pnetlab version 5.3.11 . The flaw allows an attacker to inject malicious scripts into a web page, which then execute within the context of the victim's browser. This could potentially allow an attacker to steal sensitive information or perform ...

CVE-2024-13139

creationtimestamp| type| source ---|---|--- 2025-01-05 11:05:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113775419724463486 2025-01-05 11:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leyikufl2q2k 2025-01-05 11:47:47+00:00| seen|...

CVE-2024-13137

creationtimestamp| type| source ---|---|--- 2025-01-05 10:04:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113775181358738152 2025-01-05 10:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leyf7gmmhd2o 2025-01-05 10:47:43+00:00| seen|...

CVE-2024-13130

creationtimestamp| type| source ---|---|--- 2025-01-05 01:03:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113773053753439191 2025-01-05 01:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lexgzrxokf25 2025-01-05 03:18:01+00:00| seen|...

CVE-2025-0206

creationtimestamp| type| source ---|---|--- 2025-01-04 12:05:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113769994809964162 2025-01-04 12:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hgtme72l 2025-01-04 12:42:24+00:00| seen|...

CVE-2024-12279

creationtimestamp| type| source ---|---|--- 2025-01-04 11:21:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113769818823146560 2025-01-04 12:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hbl2km2a 2025-01-04 12:42:25+00:00| seen|...

CVE-2024-10932

creationtimestamp| type| source ---|---|--- 2025-01-04 07:26:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113768895220327215 2025-01-04 09:44:29+00:00| seen| https://t.me/cvedetector/14268...

CVE-2025-0203

creationtimestamp| type| source ---|---|--- 2025-01-04 07:01:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113768796544207117 2025-01-04 08:54:15+00:00| seen| https://t.me/cvedetector/14263...

CVE-2025-0196

creationtimestamp| type| source ---|---|--- 2025-01-03 19:08:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113765993265708846 2025-01-03 21:12:12+00:00| seen| https://t.me/cvedetector/14241 2025-09-03 13:30:06+00:00| seen| MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7...

GHSA-WV23-996V-Q229

creationtimestamp| type| source ---|---|--- 2025-01-03 17:27:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113765598049117930...

CVE-2024-56412 PhpSpreadsheet vulnerable to bypass of the XSS sanitizer using the javascript protocol and special characters

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to bypass of the cross-site scripting sanitizer using the javascript protocol and special characters. An attacker can use special characters, so that the...

CVE-2024-56410 PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability in custom properties

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have a cross-site scripting XSS vulnerability in custom properties. The HTML page is generated without clearing custom properties. Versions 3.7.0, 2.3.5, 2.1.6, and 1.29.7...

CVE-2024-55078

creationtimestamp| type| source ---|---|--- 2025-01-03 14:41:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113764946112818435 2025-01-03 15:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3letuzycxso2m 2025-01-03 15:52:52+00:00| seen|...

CVE-2024-9138 Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a...

CVE-2024-53841

creationtimestamp| type| source ---|---|--- 2025-01-03 04:09:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113762457450490131 2025-01-03 04:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq6ih7q225 2025-01-03 04:42:42+00:00| seen|...

CVE-2024-53840

creationtimestamp| type| source ---|---|--- 2025-01-03 04:09:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113762457436162539 2025-01-03 04:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq6getrk2f 2025-01-03 04:42:45+00:00| seen|...