NVIDIA GPU Display Driver - October 2024 - Lenovo Support US

No description provided...

PT-2024-41057 · Unknown · Qbittorrent

Name of the Vulnerable Software and Affected Versions: qBittorrent affected versions not specified Description: The issue concerns the failure to verify SSL certificates in the DownloadManager class. Specifically, if the verification of a certificate failed, the application would log an error and...

Google's AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model LLM assisted framework called Big Sleep formerly Project Naptime. The tech giant described the development as the "first real-world vulnerability" uncovered using the...

CVE-2024-44215

creationtimestamp| type| source ---|---|--- 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1443/...

CVE-2024-50512

creationtimestamp| type| source ---|---|--- 2024-10-30 10:00:41+00:00| seen| https://t.me/cvedetector/9406...

WordPress Administrator Z Plugin <= 2024.11.20 is vulnerable to SQL Injection

Software Administrator Z Type Plugin Vulnerable versions = 2024.11.20 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50524 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 23203529cd48 Credits stealthcopter Required privilege Subscriber...

WordPress ID-SK Toolkit Plugin <= 1.7.2 is vulnerable to Cross Site Scripting (XSS)

Software ID-SK Toolkit Type Plugin Vulnerable versions = 1.7.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50517 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8f37480f4086 Credits Gab Required privilege Contributor Publish...

CVE-2024-8591

creationtimestamp| type| source ---|---|--- 2024-10-29 23:59:01+00:00| seen| https://t.me/cvedetector/9375 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1435/ 2025-02-06 02:40:18+00:00| seen| Telegram/bqYOhFsr-Qw4ep7Qx5sToCUFgrPFILTlnJwVe4KMig4zMY...

CVE-2024-8595

creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:50+00:00| seen| https://t.me/cvedetector/9368 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1432/ 2025-04-11 17:51:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11483...

CVE-2024-9489

creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:49+00:00| seen| https://t.me/cvedetector/9366 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1425/ 2025-04-04 21:36:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10572...

CVE-2024-51378

getresetstatus in dns/views.py and ftp/views.py in CyberPanel aka Cyber Panel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware which is only for a POST request and using shell...

CVE-2024-8587

creationtimestamp| type| source ---|---|--- 2024-10-29 23:08:30+00:00| seen| https://t.me/cvedetector/9359 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1441/ 2025-04-11 16:50:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11452...

CVE-2024-48138

A remote code execution RCE vulnerability in the component /PluXml/core/admin/parametresedittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via injecting a crafted payload into a template...

CVE-2024-51567

upgrademysqlstatus in databases/views.py in CyberPanel aka Cyber Panel before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware which is only for a POST request and using shell metacharacters in the...

CVE-2024-51378

getresetstatus in dns/views.py and ftp/views.py in CyberPanel aka Cyber Panel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware which is only for a POST request and using shell...

WordPress Move Addons for Elementor Plugin <= 1.3.5 is vulnerable to Sensitive Data Exposure

Software Move Addons for Elementor Type Plugin Vulnerable versions = 1.3.5 Fixed in 1.3.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10360 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5891e7da8aa3 Credits Ankit Patel...

WordPress FileOrganizer Plugin <= 1.0.9 is vulnerable to Arbitrary File Upload

Software FileOrganizer Type Plugin Vulnerable versions = 1.0.9 Fixed in 1.1.0 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7985 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 9a28a4363098 Credits TANG Cheuk Hei siunam Required privilege...

CVE-2024-51567

upgrademysqlstatus in databases/views.py in CyberPanel aka Cyber Panel before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware which is only for a POST request and using shell metacharacters in the...

CVE-2024-51567

CVE-2024-51567 = CyberPanel pre-auth remote code execution via the upgrademysqlstatus endpoint. Affected CyberPanel builds (through 2.3.6 and unpatched 2.3.7) allow attackers to bypass secMiddleware protecting POST requests and inject commands using shell metacharacters in the statusfile paramete...

CVE-2024-44237

creationtimestamp| type| source ---|---|--- 2024-10-28 23:42:11+00:00| seen| https://t.me/cvedetector/9205 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1446/...