CVE-2024-38475

creationtimestamp| type| source ---|---|--- 2024-07-17 12:43:59+00:00| seen| https://vulnerability.circl.lu/bundle/a23cbcad-e890-4df8-8736-9332ed4c3d47 2024-10-05 20:59:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8689 2024-10-06 03:39:45+00:00| published-proof-of-concept|...

CVE-2024-6235

creationtimestamp| type| source ---|---|--- 2024-07-10 10:17:47+00:00| published-proof-of-concept| https://t.me/HackingInsights/5523 2024-07-10 21:49:01+00:00| seen| https://t.me/cvedetector/573 2024-07-11 05:53:00+00:00| seen| https://t.me/thehackernews/5237 2025-04-22 21:20:42+00:00| seen|...

CVE-2024-31337

creationtimestamp| type| source ---|---|--- 2024-07-03 15:40:07+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10774 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 17:21:50+00:00| seen|...

WordPress Squeeze plugin <= 1.4 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by YCInfosec Patchstack Alliance in WordPress Plugin Squeeze versions = 1.4...

WordPress BuddyPress Cover plugin <= 2.1.4.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by YCInfosec Patchstack Alliance in WordPress Plugin BuddyPress Cover versions = 2.1.4.2...

What is an Infosec Audit and Why Does Your Company Need One?

By Uzair Amir Uncover IT security weaknesses and ensure compliance with infosec audits. Regular audits protect your data from breaches &… This is a post from HackRead.com Read the original post: What is an Infosec Audit and Why Does Your Company Need One?...

Woocommerce – Recent Purchases plugin <= 1.0.1 - File Inclusion vulnerability

File Inclusion vulnerability discovered by YCInfosec Patchstack Alliance in WordPress Plugin Woocommerce – Recent Purchases versions = 1.0.1...

WordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerability

Remote File Inclusion vulnerability discovered by YCInfosec Patchstack Alliance in WordPress Plugin Easy Digital Downloads – Recent Purchases versions = 1.0.2...

CVE-2024-33874

HDF5 Library through 1.14.3 has a heap buffer overflow in H5Omtimenewencode in H5Omtime.c...

MasterParser - Powerful DFIR Tool Designed For Analyzing And Parsing Linux Logs

What is MasterParser ? MasterParser stands as a robust Digital Forensics and Incident Response tool meticulously crafted for the analysis of Linux logs within the var/log directory. Specifically designed to expedite the investigative process for security incidents on Linux systems, MasterParser...

Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated)

Exploit Title: Online Hotel Booking In PHP 1.0 - Blind SQL Injection Unauthenticated Google Dork: n/a Date: 04/02/2024 Exploit Author: Gian Paris C. Agsam Vendor Homepage: https://github.com/projectworldsofficial Software Link: https://projectworlds.in/wp-content/uploads/2019/06/hotel-booking.zip...

CVE-2020-8007

creationtimestamp| type| source ---|---|--- 2024-03-27 17:32:01+00:00| seen| https://t.me/ctinow/213095 2024-11-08 04:17:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113445399536996829 2024-11-08 07:09:25+00:00| seen| https://t.me/cvedetector/10159...

CVE-2024-29190

creationtimestamp| type| source ---|---|--- 2024-03-26 12:48:13+00:00| published-proof-of-concept| https://t.me/cKure/12599 2024-03-27 20:12:45+00:00| published-proof-of-concept| Telegram/TWxU8iN-TYn0kncSO1uxug7sedYGGHFx9vwZnyjHkQUOEM 2024-06-01 02:51:42+00:00| seen|...

CVE-2024-0614

CVE-2024-0614 affects the WordPress plugin “Events Manager” (Calendar, Bookings, Tickets, and more!). It enables stored cross-site scripting via admin settings in all versions up to and including 6.4.6.4 due to insufficient input sanitization and output escaping. Exploitation requires authenticat...

CVE-2019-2337

creationtimestamp| type| source ---|---|--- 2024-03-11 06:36:41+00:00| seen| https://t.me/ctinow/204461 2026-01-20 08:05:00+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

GHSA-XHJW-7VH5-QXQM

creationtimestamp| type| source ---|---|--- 2024-03-08 18:46:51+00:00| seen| https://t.me/ctinow/203513 2024-11-11 19:20:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113465940893352359...

CVE-2024-27564

creationtimestamp| type| source ---|---|--- 2024-03-05 18:27:07+00:00| seen| https://t.me/ctinow/200547 2024-03-05 18:27:14+00:00| seen| https://t.me/ctinow/200553 2025-01-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-22 2025-01-23 00:00:00+00:00|...

CVE-2024-1831

creationtimestamp| type| source ---|---|--- 2024-02-23 20:26:11+00:00| seen| https://t.me/ctinow/192131 2024-02-23 20:26:14+00:00| seen| https://t.me/ctinow/192134 2024-03-13 22:41:04+00:00| seen| https://t.me/ctinow/207254 2025-03-12 07:45:08+00:00| seen|...

PT-2024-1647 · Nginx +1 · Nginx Oss +3

The affected software is NGINX, specifically the HTTP/3 QUIC module in NGINX Plus and NGINX OSS. When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate, potentially leading to a denial of service, related to a...

CVE-2024-25062

creationtimestamp| type| source ---|---|--- 2024-02-04 17:27:53+00:00| seen| https://t.me/ctinow/178893 2024-02-05 06:02:10+00:00| seen| https://t.me/ctinow/178972 2024-02-05 21:36:44+00:00| seen| https://t.me/ctinow/179517 2024-02-13 03:16:24+00:00| seen| https://t.me/ctinow/183578 2024-02-25...