4131 matches found
WordPress Stars SMTP Mailer Plugin <= 1.7 is vulnerable to Arbitrary File Upload
Software Stars SMTP Mailer Type Plugin Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-50530 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID f048023ff8ae Credits stealthcopter Required privilege Subscrib...
CVE-2024-8591
creationtimestamp| type| source ---|---|--- 2024-10-29 23:59:01+00:00| seen| https://t.me/cvedetector/9375 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1435/ 2025-02-06 02:40:18+00:00| seen| Telegram/bqYOhFsr-Qw4ep7Qx5sToCUFgrPFILTlnJwVe4KMig4zMY...
CVE-2024-8589
creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:57+00:00| seen| https://t.me/cvedetector/9373 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1437/ 2025-02-06 02:40:18+00:00| seen| Telegram/cNDuyhlgSyyQ2PYdbARI8lTqkg15IuV6c1tjTiYh5KJxrGO...
CVE-2024-8595
creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:50+00:00| seen| https://t.me/cvedetector/9368 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1432/ 2025-04-11 17:51:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11483...
CVE-2024-9489
creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:49+00:00| seen| https://t.me/cvedetector/9366 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1425/ 2025-04-04 21:36:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10572...
CVE-2024-51378
getresetstatus in dns/views.py and ftp/views.py in CyberPanel aka Cyber Panel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware which is only for a POST request and using shell...
CVE-2024-8587
creationtimestamp| type| source ---|---|--- 2024-10-29 23:08:30+00:00| seen| https://t.me/cvedetector/9359 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1441/ 2025-04-11 16:50:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11452...
CVE-2024-48138
A remote code execution RCE vulnerability in the component /PluXml/core/admin/parametresedittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via injecting a crafted payload into a template...
CVE-2024-51378
getresetstatus in dns/views.py and ftp/views.py in CyberPanel aka Cyber Panel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware which is only for a POST request and using shell...
CVE-2024-51567
upgrademysqlstatus in databases/views.py in CyberPanel aka Cyber Panel before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware which is only for a POST request and using shell metacharacters in the...
WordPress Move Addons for Elementor Plugin <= 1.3.5 is vulnerable to Sensitive Data Exposure
Software Move Addons for Elementor Type Plugin Vulnerable versions = 1.3.5 Fixed in 1.3.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10360 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5891e7da8aa3 Credits Ankit Patel...
WordPress Subscribe to Comments Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)
Software Subscribe to Comments Type Plugin Vulnerable versions = 2.3 Fixed in 2.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8792 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e73a4a4fc1e2 Credits vgo0 Required...
CVE-2024-51567
CVE-2024-51567 = CyberPanel pre-auth remote code execution via the upgrademysqlstatus endpoint. Affected CyberPanel builds (through 2.3.6 and unpatched 2.3.7) allow attackers to bypass secMiddleware protecting POST requests and inject commands using shell metacharacters in the statusfile paramete...
CVE-2024-51567
upgrademysqlstatus in databases/views.py in CyberPanel aka Cyber Panel before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware which is only for a POST request and using shell metacharacters in the...
WordPress FileOrganizer Plugin <= 1.0.9 is vulnerable to Arbitrary File Upload
Software FileOrganizer Type Plugin Vulnerable versions = 1.0.9 Fixed in 1.1.0 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7985 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 9a28a4363098 Credits TANG Cheuk Hei siunam Required privilege...
CVE-2024-44237
creationtimestamp| type| source ---|---|--- 2024-10-28 23:42:11+00:00| seen| https://t.me/cvedetector/9205 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1446/...
CVE-2024-44284
creationtimestamp| type| source ---|---|--- 2024-10-28 22:51:51+00:00| seen| https://t.me/cvedetector/9190 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1451/ 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:28+00:00...
CVE-2024-44155
creationtimestamp| type| source ---|---|--- 2024-10-28 21:39:15+00:00| seen| None 2025-03-18 19:02:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7962...
CVE-2024-44137
creationtimestamp| type| source ---|---|--- 2024-10-28 21:39:12+00:00| seen| None 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:28+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...