CVE-2019-19774

creationtimestamp| type| source ---|---|--- 2024-03-12 08:41:49+00:00| seen| https://t.me/ctinow/205375...

CVE-2024-0656

creationtimestamp| type| source ---|---|--- 2024-03-08 14:21:59+00:00| seen| https://t.me/ctinow/203335...

CVE-2024-23272

creationtimestamp| type| source ---|---|--- 2024-03-08 03:26:39+00:00| seen| https://t.me/ctinow/202994 2024-03-08 03:32:13+00:00| seen| https://t.me/ctinow/203014...

[SECURITY] Fedora 40 Update: maven-remote-resources-plugin-3.1.0-6.fc40

Process resources packaged in JARs that have been deployed to a remote repository. The primary use case being satisfied is the consistent inclusion of common resources in a large set of projects. Maven projects at Apache use this plug-in to satisfy licensing requirements at Apache where each...

USN-6588-1: PAM vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Matthias Gerstner discovered that the PAM pamnamespace module incorrectly handled special files when performing directory checks. A local attacker could possibly use this issue to cause PAM to stop...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

Cross site scripting

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2024-26016

creationtimestamp| type| source ---|---|--- 2024-02-28 13:26:45+00:00| seen| https://t.me/ctinow/195419 2024-02-28 13:26:53+00:00| seen| https://t.me/ctinow/195425...

RuoYi Security Breach

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A security vulnerability exists in RuoYi v4.7.8, which originates from a cross-site scripting XSS vulnerability found in the component /system/notice/...

PT-2024-14377 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi version 4.7.8 Description: A cross-site scripting XSS issue was found in the /system/notice/ component. This could potentially allow attackers to execute malicious scripts on the affected system. Recommendations: For RuoYi version 4.7.8...

CVE-2023-52048

The backend management system RuoYi v4.7.8 is susceptible to a cross-site scripting (XSS) vulnerability within the /system/notice/ component. This flaw, categorized as an Improper Neutralization of Input During Web Page Generation , could allow an attacker to execute malicious scripts on the affe...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048: Improper Neutralization of Input During Web Page Generation

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk

A security vulnerability has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable unauthenticated users to escalate their privileges. Tracked as CVE-2023-40000, the vulnerability was addressed in October 2023 in version 5.7.0.1. "This plugin suffers from unauthenticated...

RHSA-2024:0975

creationtimestamp| type| source ---|---|--- 2024-02-26 05:16:39+00:00| seen| https://t.me/ctinow/193085...

CVE-2023-51828

A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in getnextnotice function...