CVE-2024-23833

creationtimestamp| type| source ---|---|--- 2024-02-11 17:09:37+00:00| published-proof-of-concept| https://github.com/OpenRefine/OpenRefine/security/advisories/GHSA-6p92-qfqf-qwx4 2024-02-12 22:31:27+00:00| seen| https://t.me/ctinow/183437 2024-03-03 15:51:55+00:00| seen| https://t.me/ctinow/1987...

CVE-2019-1397

creationtimestamp| type| source ---|---|--- 2024-02-11 13:01:58+00:00| seen| https://t.me/ctinow/182772...

CVE-2024-24706

creationtimestamp| type| source ---|---|--- 2024-02-11 12:29:32+00:00| seen| https://t.me/arpsyndicate/3364 2024-03-01 21:16:41+00:00| seen| https://t.me/ctinow/197990...

CVE-2024-1431

creationtimestamp| type| source ---|---|--- 2024-02-11 04:26:21+00:00| seen| https://t.me/ctinow/182682 2024-02-17 02:16:34+00:00| seen| https://t.me/ctinow/186722 2024-03-03 12:11:38+00:00| seen| https://t.me/ctinow/198699...

CVE-2024-22361

creationtimestamp| type| source ---|---|--- 2024-02-10 16:21:46+00:00| seen| https://t.me/ctinow/182604 2024-03-03 13:11:33+00:00| seen| https://t.me/ctinow/198713...

CVE-2024-23514

creationtimestamp| type| source ---|---|--- 2024-02-10 10:31:44+00:00| seen| https://t.me/ctinow/182520 2024-02-12 05:57:25+00:00| seen| https://t.me/arpsyndicate/3450 2024-02-12 06:58:10+00:00| seen| https://t.me/arpsyndicate/3469 2024-03-03 11:11:35+00:00| seen| https://t.me/ctinow/198687...

CVE-2024-24803

creationtimestamp| type| source ---|---|--- 2024-02-10 09:21:28+00:00| seen| https://t.me/ctinow/182494 2024-03-03 11:11:32+00:00| seen| https://t.me/ctinow/198684...

@amitport/useful (>=0.5.0, <=0.5.2), @covisint/cui-idm-b2x (>=1.2.4, <=1.3.0) +58 more potentially affected by CVE-2024-21490 via angular-messages (>=1.3.20, <=1.5.11)

angular-messages NPM version =1.3.20, =0.5.0, =1.2.4, =0.2.0, =0.1.0, =0.1.0, =0.0.5-SNAPSHOT.11, =0.0.1, =1.0.0, =0.0.6-01badfa5-e3a7-42b4-b57b-a742eb65fee6, =0.10.4, =1.3.0, =0.0.8, =0.0.10, =1.1.9, =0.0.1, =0.0.2 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

@alancnet/material-framework (>=1.0.3, <=1.0.18), @alffiedev/alffie-components (>=1.0.0, <=1.0.13) +231 more potentially affected by CVE-2024-21490 via angular-messages (>=1.6.0, <=1.8.3)

angular-messages NPM version =1.6.0, =1.0.3, =1.0.0, =0.0.1, =0.2.1, =1.0.0-beta.2, =1.0.0, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.1, =1.4.3, =1.0.0, =1.0.0, =1.5.0 and more Source cves: CVE-2024-21490 Source advisory: MEND:CVE-2024-21490...

CVE-2024-23324

creationtimestamp| type| source ---|---|--- 2024-02-10 00:21:27+00:00| seen| https://t.me/ctinow/182357 2024-02-15 06:26:26+00:00| seen| https://t.me/ctinow/185250 2024-03-03 10:46:22+00:00| seen| https://t.me/ctinow/198666...

Dell BSAFE Information Disclosure Vulnerability

Dell BSAFE is a security software product from Dell Inc. that supports cryptographic algorithms, certificate chain validation, and Transport Layer Security TLS encryption suites, among other things, to help users achieve a variety of security goals for their applications. An information disclosur...

PT-2024-3267

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.39.6 MediaWiki versions 1.40.x prior to 1.40.2 MediaWiki versions 1.41.x prior to 1.41.1 Description The issue is related to the UnlinkedWikibase extension in MediaWiki, where improper neutralization of input duri...

CVE-2023-45716

creationtimestamp| type| source ---|---|--- 2024-02-09 23:26:45+00:00| seen| https://t.me/ctinow/182324 2024-03-03 10:46:26+00:00| seen| https://t.me/ctinow/198669...

Cross site scripting

ManageWiki is a MediaWiki extension allowing users to manage wikis. Special:ManageWiki does not escape escape interface messages on the columns and help keys on the form descriptor. An attacker may exploit this and would have a cross site scripting attack vector. Exploiting this on-wiki requires...

CVE-2024-25109 Cross-Site Scripting in the extensions, settings, permissions and namespaces subpages of ManageWiki

ManageWiki is a MediaWiki extension allowing users to manage wikis. Special:ManageWiki does not escape escape interface messages on the columns and help keys on the form descriptor. An attacker may exploit this and would have a cross site scripting attack vector. Exploiting this on-wiki requires...

CVE-2024-25452

creationtimestamp| type| source ---|---|--- 2024-02-09 16:27:20+00:00| seen| https://t.me/ctinow/182125 2024-02-13 02:16:36+00:00| seen| https://t.me/ctinow/183552 2024-03-03 08:41:47+00:00| seen| https://t.me/ctinow/198606...

CVE-2024-22318

creationtimestamp| type| source ---|---|--- 2024-02-09 02:26:26+00:00| seen| https://t.me/ctinow/181768 2024-02-11 11:58:48+00:00| seen| https://t.me/arpsyndicate/3350 2024-02-14 03:40:14+00:00| seen| https://t.me/ctinow/184383 2024-03-02 15:16:45+00:00| seen| https://t.me/ctinow/198386 2024-03-2...

PT-2024-12152 · Dell · Bsafe Ssl-J

Name of the Vulnerable Software and Affected Versions: Dell BSAFE SSL-J versions prior to 6.5 Dell BSAFE SSL-J versions 7.0 and 7.1 Description: The issue is related to a debug message revealing unnecessary information, which may lead to disclosing sensitive information to a locally privileged...

PT-2024-20753 · Mediawiki · Managewiki

Name of the Vulnerable Software and Affected Versions: ManageWiki affected versions not specified Description: ManageWiki is a MediaWiki extension that allows users to manage wikis. The issue arises because Special:ManageWiki does not properly escape interface messages on the columns and help key...

Design/Logic Flaw

WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. On Special:WikiDiscover, the Language::date function is used when making the human-readable timestamp for inclusion on the wikicreation column. This function uses interface messages to translate the nam...