CVE-2021-34751

A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device. This...

NVIDIA GPU Display Driver - October 2024 - Lenovo Support US

No description provided...

PT-2024-41057 · Unknown · Qbittorrent

Name of the Vulnerable Software and Affected Versions: qBittorrent affected versions not specified Description: The issue concerns the failure to verify SSL certificates in the DownloadManager class. Specifically, if the verification of a certificate failed, the application would log an error and...

Google's AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model LLM assisted framework called Big Sleep formerly Project Naptime. The tech giant described the development as the "first real-world vulnerability" uncovered using the...

CVE-2024-50802

creationtimestamp| type| source ---|---|--- 2024-10-31 21:07:15+00:00| seen| https://t.me/cvedetector/9521...

CVE-2024-44215

creationtimestamp| type| source ---|---|--- 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1443/...

WordPress SIP Reviews Shortcode for WooCommerce Plugin <= 1.2.3 is vulnerable to SQL Injection

Software SIP Reviews Shortcode for WooCommerce Type Plugin Vulnerable versions = 1.2.3 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-6479 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID dfe9c064baeb Credits WordFence Required privilege...

WordPress MPG Plugin <= 4.0.1 is vulnerable to Broken Access Control

Software MPG Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.0.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7424 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 61dc998feee8 Credits Rafshanzani Suhada Required privilege...

What is known about the Spoofing – Windows MSHTML Platform (CVE-2024-43573) vulnerability from the October Microsoft Patch Tuesday?

What is known about the Spoofing - Windows MSHTML Platform CVE-2024-43573 vulnerability from the October Microsoft Patch Tuesday? In fact, just that it is being exploited in the wild. There are no write-ups or public exploits yet. The Acknowledgements section in the Microsoft bulletin is empty. I...

CVE-2024-50512

creationtimestamp| type| source ---|---|--- 2024-10-30 10:00:41+00:00| seen| https://t.me/cvedetector/9406...

WordPress Administrator Z Plugin <= 2024.11.20 is vulnerable to SQL Injection

Software Administrator Z Type Plugin Vulnerable versions = 2024.11.20 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50524 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 23203529cd48 Credits stealthcopter Required privilege Subscriber...

WordPress ID-SK Toolkit Plugin <= 1.7.2 is vulnerable to Cross Site Scripting (XSS)

Software ID-SK Toolkit Type Plugin Vulnerable versions = 1.7.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50517 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8f37480f4086 Credits Gab Required privilege Contributor Publish...

WordPress Stars SMTP Mailer Plugin <= 1.7 is vulnerable to Arbitrary File Upload

Software Stars SMTP Mailer Type Plugin Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-50530 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID f048023ff8ae Credits stealthcopter Required privilege Subscrib...

CVE-2024-8591

creationtimestamp| type| source ---|---|--- 2024-10-29 23:59:01+00:00| seen| https://t.me/cvedetector/9375 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1435/ 2025-02-06 02:40:18+00:00| seen| Telegram/bqYOhFsr-Qw4ep7Qx5sToCUFgrPFILTlnJwVe4KMig4zMY...

CVE-2024-8589

creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:57+00:00| seen| https://t.me/cvedetector/9373 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1437/ 2025-02-06 02:40:18+00:00| seen| Telegram/cNDuyhlgSyyQ2PYdbARI8lTqkg15IuV6c1tjTiYh5KJxrGO...

CVE-2024-8595

creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:50+00:00| seen| https://t.me/cvedetector/9368 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1432/ 2025-04-11 17:51:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11483...

CVE-2024-9489

creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:49+00:00| seen| https://t.me/cvedetector/9366 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1425/ 2025-04-04 21:36:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10572...

CVE-2024-51378

getresetstatus in dns/views.py and ftp/views.py in CyberPanel aka Cyber Panel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware which is only for a POST request and using shell...

CVE-2024-8587

creationtimestamp| type| source ---|---|--- 2024-10-29 23:08:30+00:00| seen| https://t.me/cvedetector/9359 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1441/ 2025-04-11 16:50:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11452...

CVE-2024-48138

A remote code execution RCE vulnerability in the component /PluXml/core/admin/parametresedittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via injecting a crafted payload into a template...