CVE-2024-50336

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the...

CVE-2024-50323

creationtimestamp| type| source ---|---|--- 2024-11-12 15:57:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113470802560763564 2024-11-12 18:03:17+00:00| seen| https://t.me/cvedetector/10644 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1504/...

CVE-2024-29119

creationtimestamp| type| source ---|---|--- 2024-11-12 13:03:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113470118669785508 2024-11-12 13:06:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113470132345425419 2024-11-14 12:00:00+00:00| seen|...

CVE-2024-11121

creationtimestamp| type| source ---|---|--- 2024-11-12 12:49:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113470063455289821...

CVE-2024-10245

creationtimestamp| type| source ---|---|--- 2024-11-12 09:37:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113469307791147295 2024-11-12 12:11:00+00:00| seen| https://t.me/cvedetector/10594...

CVE-2024-9836

creationtimestamp| type| source ---|---|--- 2024-11-12 06:06:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113468480752075746 2024-11-12 08:00:10+00:00| seen| https://t.me/cvedetector/10588...

CVE-2024-47592

creationtimestamp| type| source ---|---|--- 2024-11-12 00:46:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113467220840526376 2024-11-12 02:58:53+00:00| seen| https://t.me/cvedetector/10557...

WordPress Styler for Ninja Forms Plugin <= 3.3.4 is vulnerable to Settings Change

Software Styler for Ninja Forms Type Plugin Vulnerable versions = 3.3.4 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Settings Change CVE CVE-2024-10717 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 2b68f06a005e Credits...

CVE-2024-51026

creationtimestamp| type| source ---|---|--- 2024-11-11 20:40:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113466252528085696 2024-11-11 22:48:07+00:00| seen| https://t.me/cvedetector/10547...

CVE-2024-51490

Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. Thi...

CVE-2024-51487

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change...

CVE-2024-51487

creationtimestamp| type| source ---|---|--- 2024-11-11 19:43:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113466030355098961 2024-11-11 21:57:48+00:00| seen| https://t.me/cvedetector/10531...

CVE-2024-51054

creationtimestamp| type| source ---|---|--- 2024-11-11 14:36:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113464823295188726 2024-11-11 16:56:34+00:00| seen| https://t.me/cvedetector/10510...

CVE-2024-34015

creationtimestamp| type| source ---|---|--- 2024-11-11 13:30:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113464562760807188 2024-11-11 16:06:19+00:00| seen| https://t.me/cvedetector/10502 2025-02-27 23:25:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5817 2025-03-02...

CVE-2024-43437

A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting XSS risk from malicious backup files...

CVE-2024-43430 Moodle: lack of access control when using external methods for quiz overrides

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

CVE-2024-51845

creationtimestamp| type| source ---|---|--- 2024-11-11 06:27:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113462897515114261 2024-11-11 07:44:20+00:00| seen| https://t.me/cvedetector/10466...

CVE-2024-51623

creationtimestamp| type| source ---|---|--- 2024-11-09 13:45:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113453298284797267 2024-11-09 16:25:54+00:00| seen| https://t.me/cvedetector/10378...

CVE-2024-51662

creationtimestamp| type| source ---|---|--- 2024-11-09 13:20:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113453200496412569 2024-11-09 16:25:50+00:00| seen| https://t.me/cvedetector/10376...

CVE-2024-50250

creationtimestamp| type| source ---|---|--- 2024-11-09 12:34:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113453018614318747 2024-11-09 13:18:33+00:00| seen| https://t.me/cvedetector/10333...