CVE-2024-44223

creationtimestamp| type| source ---|---|--- 2024-12-20 04:10:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113683192707283950 2024-12-20 04:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpjmrb7f72r 2024-12-20 05:52:25+00:00| seen|...

CVE-2022-34159

creationtimestamp| type| source ---|---|--- 2024-12-20 03:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpgcepwel2a 2024-12-20 05:02:11+00:00| seen| https://t.me/cvedetector/13397...

WordPress plugin Feedify – Web Push Notifications Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

CVE-2024-11893: Improper Neutralization of Input During Web Page Generation

The Spoki – Chat Buttons and WooCommerce Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spokibutton' shortcode in all versions up to, and including, 2.15.15 due to insufficient input sanitization and output escaping on user supplied attributes...

CVE-2024-11811: Improper Neutralization of Input During Web Page Generation

The Feedify – Web Push Notifications plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'platform', 'phone', 'email', and 'storeurl' parameters. in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2024-52589

creationtimestamp| type| source ---|---|--- 2024-12-19 19:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681106522415587 2024-12-19 19:23:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113681119418009728 2024-12-19 20:15:28+00:00| seen|...

CVE-2024-12788

creationtimestamp| type| source ---|---|--- 2024-12-19 16:32:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113680447406326426 2024-12-19 17:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoeqtu5bb2g 2024-12-19 19:00:01+00:00| seen|...

CVE-2024-55081

creationtimestamp| type| source ---|---|--- 2024-12-19 16:21:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113680401219545596 2024-12-19 17:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoer7qtvu22 2024-12-19 19:00:07+00:00| seen|...

CVE-2024-55082

creationtimestamp| type| source ---|---|--- 2024-12-19 16:10:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113680359895655311 2024-12-19 16:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldobfpe4n427 2024-12-19 18:09:49+00:00| seen|...

CVE-2024-12785

creationtimestamp| type| source ---|---|--- 2024-12-19 14:39:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113680001427828016 2024-12-19 15:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo62kkzbz2s 2024-12-19 17:19:40+00:00| seen|...

CVE-2021-26102

creationtimestamp| type| source ---|---|--- 2024-12-19 14:00:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113679849262599272 2024-12-19 14:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo2oqqlt62a 2024-12-19 15:39:21+00:00| seen|...

Malware in secret-scanning-custom-notifications

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-12677

creationtimestamp| type| source ---|---|--- 2024-12-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-03 2024-12-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1721/ 2024-12-20 16:48:04+00:00| seen|...

CVE-2024-11364

creationtimestamp| type| source ---|---|--- 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1713/ 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1716/ 2024-12-19 21:13:06+00:00| seen|...

CVE-2024-12700

creationtimestamp| type| source ---|---|--- 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1712/ 2024-12-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-05 2024-12-19 22:55:59+00:00| seen|...

PT-2024-12773 · Beyondtrust · Beyondtrust Remote Support

Name of the Vulnerable Software and Affected Versions: BeyondTrust Remote Support SaaS affected versions not specified Description: A security issue allowed hackers to exploit and breach Remote Support SaaS instances, resulting in the resetting of local account passwords. The incident led to the...

CVE-2024-55968

creationtimestamp| type| source ---|---|--- 2024-12-17 21:12:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9471 2024-12-17 21:16:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9472 2025-01-09 19:23:03+00:00| seen|...

CVE-2024-54386 WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in pushmonkey Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart push-monkey-desktop-push-notifications allows Cross Site Request Forgery.This issue affects Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart:...

CVE-2024-54386 WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in pushmonkey Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart push-monkey-desktop-push-notifications allows Cross Site Request Forgery.This issue affects Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart:...

CVE-2024-55626

creationtimestamp| type| source ---|---|--- 2024-12-16 12:57:32+00:00| seen| https://t.me/truesecator/6543 2024-12-19 13:01:33+00:00| seen| https://t.me/ptescalator/199 2025-01-06 17:51:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113782677525284582 2025-01-06 18:15:57+00:00| seen|...