CVE-2024-0614

CVE-2024-0614 affects the WordPress plugin “Events Manager” (Calendar, Bookings, Tickets, and more!). It enables stored cross-site scripting via admin settings in all versions up to and including 6.4.6.4 due to insufficient input sanitization and output escaping. Exploitation requires authenticat...

CVE-2019-2337

creationtimestamp| type| source ---|---|--- 2024-03-11 06:36:41+00:00| seen| https://t.me/ctinow/204461 2026-01-20 08:05:00+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

GHSA-XHJW-7VH5-QXQM

creationtimestamp| type| source ---|---|--- 2024-03-08 18:46:51+00:00| seen| https://t.me/ctinow/203513 2024-11-11 19:20:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113465940893352359...

CVE-2024-27564

creationtimestamp| type| source ---|---|--- 2024-03-05 18:27:07+00:00| seen| https://t.me/ctinow/200547 2024-03-05 18:27:14+00:00| seen| https://t.me/ctinow/200553 2025-01-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-22 2025-01-23 00:00:00+00:00|...

CVE-2024-1831

creationtimestamp| type| source ---|---|--- 2024-02-23 20:26:11+00:00| seen| https://t.me/ctinow/192131 2024-02-23 20:26:14+00:00| seen| https://t.me/ctinow/192134 2024-03-13 22:41:04+00:00| seen| https://t.me/ctinow/207254 2025-03-12 07:45:08+00:00| seen|...

PT-2024-1647 · Nginx +1 · Nginx Oss +3

The affected software is NGINX, specifically the HTTP/3 QUIC module in NGINX Plus and NGINX OSS. When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate, potentially leading to a denial of service, related to a...

CVE-2024-25062

creationtimestamp| type| source ---|---|--- 2024-02-04 17:27:53+00:00| seen| https://t.me/ctinow/178893 2024-02-05 06:02:10+00:00| seen| https://t.me/ctinow/178972 2024-02-05 21:36:44+00:00| seen| https://t.me/ctinow/179517 2024-02-13 03:16:24+00:00| seen| https://t.me/ctinow/183578 2024-02-25...

CVE-2024-1086

creationtimestamp| type| source ---|---|--- 2024-01-31 14:31:33+00:00| seen| https://t.me/ctinow/176770 2024-01-31 20:41:33+00:00| seen| https://t.me/ctinow/177071 2024-02-22 14:42:15+00:00| seen| https://t.me/ctinow/190759 2024-03-20 21:21:40+00:00| published-proof-of-concept|...

CVE-2024-24329

creationtimestamp| type| source ---|---|--- 2024-01-30 16:22:10+00:00| seen| https://t.me/ctinow/176043 2024-02-01 08:16:32+00:00| seen| https://t.me/ctinow/177364 2024-02-22 08:08:04+00:00| seen| https://t.me/ctinow/190519 2025-02-12 09:28:20+00:00| seen|...

CVE-2024-23725

creationtimestamp| type| source ---|---|--- 2024-01-21 05:31:38+00:00| seen| https://t.me/ctinow/170747 2024-02-16 00:02:21+00:00| seen| https://t.me/ctinow/185993 2024-12-08 13:30:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113617443439155721...

CVE-2024-20965

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL Server...

CVE-2019-8457

creationtimestamp| type| source ---|---|--- 2024-01-15 08:41:04+00:00| seen| https://t.me/ctinow/168206 2025-02-18 19:36:59+00:00| published-proof-of-concept| Telegram/okY3vlkCzqUlWtWenqJYjZ7aZJOj4sOaYu210nyntySGc4 2025-12-03 19:10:54+00:00| seen|...

RHSA-2024:0095

creationtimestamp| type| source ---|---|--- 2024-01-09 17:17:26+00:00| seen| https://t.me/ctinow/165140 2024-11-14 14:55:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113481884933073861...

RHSA-2024:0096

creationtimestamp| type| source ---|---|--- 2024-01-09 17:17:25+00:00| seen| https://t.me/ctinow/165139 2024-11-14 14:55:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113481884933073861...

CVE-2019-2303

creationtimestamp| type| source ---|---|--- 2024-01-09 07:31:49+00:00| seen| https://t.me/ctinow/164823 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

gladstone.qld.gov.au Cross Site Scripting vulnerability OBB-3827845

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-44221

creationtimestamp| type| source ---|---|--- 2023-12-24 15:26:20+00:00| seen| https://t.me/ctinow/159038 2025-04-30 16:18:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427816217281348 2025-04-30 18:14:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14107 2025-05-01...

Socks! Our cyber prediction for 2024

I get pretty bored of reading pointless prediction puff pieces from vendors about what is going to happen next year in cyber. Don’t tell me, it’ll be security issues that their next-gen, xDR, paradigm-shifting, lowest TCO turnkey solution resolves. So here’s what I can guarantee for next year:...

CVE-2023-48796

creationtimestamp| type| source ---|---|--- 2023-12-16 14:48:00+00:00| seen| https://t.me/ctinow/155412 2025-11-28 07:40:54+00:00| seen| https://seclists.org/oss-sec/2025/q4/215 2025-11-28 10:24:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6oo6f2zvs2g 2026-04-09...

sewstitchncute.com Cross Site Scripting vulnerability OBB-3795895

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...