4301 matches found
CVE-2024-8591
creationtimestamp| type| source ---|---|--- 2024-10-29 23:59:01+00:00| seen| https://t.me/cvedetector/9375 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1435/ 2025-02-06 02:40:18+00:00| seen| Telegram/bqYOhFsr-Qw4ep7Qx5sToCUFgrPFILTlnJwVe4KMig4zMY...
CVE-2024-8589
creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:57+00:00| seen| https://t.me/cvedetector/9373 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1437/ 2025-02-06 02:40:18+00:00| seen| Telegram/cNDuyhlgSyyQ2PYdbARI8lTqkg15IuV6c1tjTiYh5KJxrGO...
CVE-2024-8595
creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:50+00:00| seen| https://t.me/cvedetector/9368 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1432/ 2025-04-11 17:51:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11483...
CVE-2024-9489
creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:49+00:00| seen| https://t.me/cvedetector/9366 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1425/ 2025-04-04 21:36:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10572...
CVE-2024-51378
getresetstatus in dns/views.py and ftp/views.py in CyberPanel aka Cyber Panel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware which is only for a POST request and using shell...
CVE-2024-8587
creationtimestamp| type| source ---|---|--- 2024-10-29 23:08:30+00:00| seen| https://t.me/cvedetector/9359 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1441/ 2025-04-11 16:50:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11452...
CVE-2024-48138
A remote code execution RCE vulnerability in the component /PluXml/core/admin/parametresedittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via injecting a crafted payload into a template...
WordPress FileOrganizer Plugin <= 1.0.9 is vulnerable to Arbitrary File Upload
Software FileOrganizer Type Plugin Vulnerable versions = 1.0.9 Fixed in 1.1.0 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7985 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 9a28a4363098 Credits TANG Cheuk Hei siunam Required privilege...
CVE-2024-51378
getresetstatus in dns/views.py and ftp/views.py in CyberPanel aka Cyber Panel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware which is only for a POST request and using shell...
CVE-2024-51567
upgrademysqlstatus in databases/views.py in CyberPanel aka Cyber Panel before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware which is only for a POST request and using shell metacharacters in the...
CVE-2024-51567
upgrademysqlstatus in databases/views.py in CyberPanel aka Cyber Panel before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware which is only for a POST request and using shell metacharacters in the...
WordPress Subscribe to Comments Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)
Software Subscribe to Comments Type Plugin Vulnerable versions = 2.3 Fixed in 2.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8792 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e73a4a4fc1e2 Credits vgo0 Required...
WordPress Move Addons for Elementor Plugin <= 1.3.5 is vulnerable to Sensitive Data Exposure
Software Move Addons for Elementor Type Plugin Vulnerable versions = 1.3.5 Fixed in 1.3.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10360 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5891e7da8aa3 Credits Ankit Patel...
CVE-2024-51567
CVE-2024-51567 = CyberPanel pre-auth remote code execution via the upgrademysqlstatus endpoint. Affected CyberPanel builds (through 2.3.6 and unpatched 2.3.7) allow attackers to bypass secMiddleware protecting POST requests and inject commands using shell metacharacters in the statusfile paramete...
CVE-2024-44237
creationtimestamp| type| source ---|---|--- 2024-10-28 23:42:11+00:00| seen| https://t.me/cvedetector/9205 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1446/...
CVE-2024-44284
creationtimestamp| type| source ---|---|--- 2024-10-28 22:51:51+00:00| seen| https://t.me/cvedetector/9190 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1451/ 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:28+00:00...
CVE-2024-44155
creationtimestamp| type| source ---|---|--- 2024-10-28 21:39:15+00:00| seen| None 2025-03-18 19:02:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7962...
CVE-2024-44137
creationtimestamp| type| source ---|---|--- 2024-10-28 21:39:12+00:00| seen| None 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:28+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...