24962 matches found
Design/Logic Flaw
WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. On Special:WikiDiscover, the Language::date function is used when making the human-readable timestamp for inclusion on the wikicreation column. This function uses interface messages to translate the nam...
CVE-2024-25107 Cross-Site Scripting in WikiDiscover
WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. On Special:WikiDiscover, the Language::date function is used when making the human-readable timestamp for inclusion on the wikicreation column. This function uses interface messages to translate the nam...
CVE-2024-25107
WikiDiscover, an extension for CreateWiki, contains an XSS vulnerability in Special:WikiDiscover where Language::date uses unescaped interface messages from MONTH/DAY translations, yielding unescaped output. Exploitation requires the (editinterface) right. The issue is addressed in commit 267e763...
CVE-2024-24215
creationtimestamp| type| source ---|---|--- 2024-02-08 20:31:51+00:00| seen| https://t.me/ctinow/181616 2024-02-11 15:09:45+00:00| seen| https://t.me/arpsyndicate/3418 2024-03-02 14:46:47+00:00| seen| https://t.me/ctinow/198378 2025-06-20 20:44:15+00:00| published-proof-of-concept|...
CLSA-2024-1707420378 Fix CVE(s): CVE-2023-48795
SECURITY UPDATE: it's possible to remove the initial messages on the secure channel without causing a MAC failure - debian/patches/CVE-2023-48795.patch: implement "strict key exchange" in ssh and sshd - CVE-2023-48795...
CVE-2024-24321
creationtimestamp| type| source ---|---|--- 2024-02-08 19:22:23+00:00| seen| https://t.me/ctinow/181572 2024-02-11 15:57:03+00:00| seen| https://t.me/arpsyndicate/3433 2024-02-15 08:17:13+00:00| seen| https://t.me/ctinow/185331 2024-03-02 14:46:45+00:00| seen| https://t.me/ctinow/198376 2025-06-2...
CVE-2024-25191
creationtimestamp| type| source ---|---|--- 2024-02-08 18:22:26+00:00| seen| https://t.me/ctinow/181531 2024-03-02 12:11:41+00:00| seen| https://t.me/ctinow/198331...
PT-2024-20752 · Unknown · Wikidiscover
Name of the Vulnerable Software and Affected Versions: WikiDiscover affected versions not specified Description: The issue arises from the use of the Language::date function on Special:WikiDiscover, which utilizes unescaped interface messages to translate month and day names. This results in an X...
CVE-2024-24823
creationtimestamp| type| source ---|---|--- 2024-02-07 19:21:43+00:00| seen| https://t.me/ctinow/180910 2024-03-01 23:56:44+00:00| seen| https://t.me/ctinow/198140...
CVE-2023-32328
creationtimestamp| type| source ---|---|--- 2024-02-07 18:32:14+00:00| seen| https://t.me/ctinow/180874 2024-03-01 21:16:37+00:00| seen| https://t.me/ctinow/197987...
CVE-2023-38325
creationtimestamp| type| source ---|---|--- 2024-02-07 18:12:05+00:00| seen| https://t.me/ctinow/180865 2024-02-07 21:51:53+00:00| seen| https://t.me/ctinow/180987...
CVE-2024-24815
creationtimestamp| type| source ---|---|--- 2024-02-07 17:22:07+00:00| seen| https://t.me/ctinow/180840 2024-02-11 13:59:22+00:00| seen| https://t.me/arpsyndicate/3397...
CVE-2024-22012
creationtimestamp| type| source ---|---|--- 2024-02-07 17:22:06+00:00| seen| https://t.me/ctinow/180839 2024-03-01 20:46:43+00:00| seen| https://t.me/ctinow/197976...
CVE-2024-25201
creationtimestamp| type| source ---|---|--- 2024-02-07 15:26:34+00:00| seen| https://t.me/ctinow/180750 2024-02-15 19:16:59+00:00| seen| https://t.me/ctinow/185789 2024-03-01 19:16:59+00:00| seen| https://t.me/ctinow/197916...
CVE-2024-1300
A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unknown SNI server name assigned the default certificate instead of a mapped certificate, the SSL context is erroneously cached in the server name map, leading...
CVE-2024-22021
creationtimestamp| type| source ---|---|--- 2024-02-07 02:32:05+00:00| seen| https://t.me/ctinow/180477 2024-03-01 15:16:50+00:00| seen| https://t.me/ctinow/197692...
CVE-2024-1266
creationtimestamp| type| source ---|---|--- 2024-02-07 02:32:03+00:00| seen| https://t.me/ctinow/180475 2024-02-14 23:16:30+00:00| seen| https://t.me/ctinow/185102 2024-03-01 09:41:39+00:00| seen| https://t.me/ctinow/197435...
CVE-2024-24002
creationtimestamp| type| source ---|---|--- 2024-02-07 01:26:46+00:00| seen| https://t.me/ctinow/180458 2024-02-09 08:16:32+00:00| seen| https://t.me/ctinow/181839 2024-03-01 15:16:47+00:00| seen| https://t.me/ctinow/197689...
CVE-2024-1284
creationtimestamp| type| source ---|---|--- 2024-02-07 01:26:44+00:00| seen| https://t.me/ctinow/180456 2024-02-08 21:36:41+00:00| seen| https://t.me/ctinow/181646 2024-03-01 14:46:50+00:00| seen| https://t.me/ctinow/197661...