CVE-2024-48840

creationtimestamp| type| source ---|---|--- 2024-12-05 12:52:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113600310472618156 2024-12-05 15:21:36+00:00| seen| https://t.me/cvedetector/12097 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-...

CVE-2024-11316

creationtimestamp| type| source ---|---|--- 2024-12-05 12:32:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113600229603745233 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01...

CVE-2024-11420

creationtimestamp| type| source ---|---|--- 2024-12-05 09:50:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113599592130427797 2024-12-05 12:50:40+00:00| seen| https://t.me/cvedetector/12072...

CVE-2023-50913

Oxide control plane software before 5 allows SSRF...

SUSE: Security Advisory (SUSE-SU-2024:4173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-54002

Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Performing a login request against the /api/v1/user/login endpoint with a username that exist in the system takes significantly longer than performing the same...

CVE-2024-53137

creationtimestamp| type| source ---|---|--- 2024-12-04 14:58:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113595140768068337 2024-12-04 16:45:34+00:00| seen| https://t.me/cvedetector/12000...

CVE-2024-52278

creationtimestamp| type| source ---|---|--- 2024-12-04 11:20:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113594283163965583...

CVE-2024-10567

creationtimestamp| type| source ---|---|--- 2024-12-04 08:35:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113593635849560507 2024-12-04 10:53:57+00:00| seen| https://t.me/cvedetector/11962...

CVE-2024-12123

creationtimestamp| type| source ---|---|--- 2024-12-04 03:30:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113592437254564347 2024-12-04 05:52:54+00:00| seen| https://t.me/cvedetector/11948...

Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...

CVE-2024-42452

creationtimestamp| type| source ---|---|--- 2024-12-03 18:19:48+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590271100041825 2024-12-04 01:57:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113592072406685919 2024-12-04 04:12:25+00:00| seen|...

CVE-2024-25020

creationtimestamp| type| source ---|---|--- 2024-12-03 17:21:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113590043649140594 2024-12-03 20:40:48+00:00| seen| https://t.me/cvedetector/11901...

CVE-2024-52805

Synapse is an open-source Matrix homeserver. In Synapse before 1.120.1, multipart/form-data requests can in certain configurations transiently increase memory consumption beyond expected levels while processing the request, which can be used to amplify denial of service attacks. Synapse 1.120.1...

CVE-2024-37303

Synapse is an open-source Matrix homeserver. Synapse before version 1.106 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the...

CVE-2024-37302

creationtimestamp| type| source ---|---|--- 2024-12-03 17:09:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113589996225770721...

First Things First: Know and Prioritize Your Risk in Data Security

Fortify your risk posture by shifting focus from network security to data-centric security for more robust cyber defense. Cyberattacks are one of the most onerous threats faced by businesses today. Not only is cybercrime skyrocketing in volume, it is also increasing in AI/ML-powered sophisticatio...

CVE-2024-8300

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04 2025-03-11 11:30:05+00:00| seen| https://t.me/truesecator/6826 2025-03-11 11:31:39+00:00| seen|...

CVE-2024-52324

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:41:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113607345259765655 2024-12-06 20:38:57+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-11732

creationtimestamp| type| source ---|---|--- 2024-12-03 07:42:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113587766078809081 2024-12-03 10:38:57+00:00| seen| https://t.me/cvedetector/11869...