PT-2025-16877

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.4.1 tvOS versions prior to 18.4.1 visionOS versions prior to 2.4.1 iOS versions prior to 18.4.1 iPadOS versions prior to 18.4.1 watchOS versions prior to 11.5 Description A memory corruption issue exists in t...

CVE-2024-31759

An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function...

PT-2024-3227 · Tenda · Tenda Tx9

Name of the Vulnerable Software and Affected Versions: Tenda TX9 version 22.03.02.10 Description: A critical issue has been found in the function sub 42C014 of the file /goform/PowerSaveSet. The manipulation of the argument time leads to a stack-based buffer overflow. This issue can be exploited...

AI Copilot: Launching Innovation Rockets, But Beware of the Darkness Ahead

Imagine a world where the software that powers your favorite apps, secures your online transactions, and keeps your digital life could be outsmarted and taken over by a cleverly disguised piece of code. This isn't a plot from the latest cyber-thriller; it's actually been a reality for years now...

MAL-2024-1263 Malicious code in trip-component-platform-online-prepermission-popup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e7792da9bcfb9756c78247a525424f0782b412e24f2479452b818867cc71096 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-19156 · Qihoo 360 · 360 Total Security Antivirus

Name of the Vulnerable Software and Affected Versions: 360 Total Security Antivirus versions 11.0.0.1061 and earlier Description: An issue in 360 Total Security Antivirus allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete. This enables attackers to...

PT-2024-24433 · Kaizencoders · Kaizencoders Short Url

Name of the Vulnerable Software and Affected Versions: KaizenCoders Short URL versions n/a through 1.6.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers t...

PT-2024-24428 · Unknown · Epc Ez Form Calculator

Name of the Vulnerable Software and Affected Versions: EZ Form Calculator versions n/a through 2.14.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

CVE-2024-3762 Emlog Pro Whisper Page twitter.php cross site scripting

A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

Use-After-Free

chromium is vulnerable to Use-after-free. The vulnerability is due to improper handling of memory within the web GPU API implementation, the web GPU API implementation, allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2024-24610 · Foxit · Foxit Pdf Reader/Editor

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader and Editor versions prior to 2024.1 Description: The issue allows Local Privilege Escalation during update checks due to weak permissions on the update-service folder. This weakness enables attackers to place crafted DLL file...

BELL-CVE-2024-3651

Bulletin has no description...

BELL-CVE-2024-1874

Bulletin has no description...

BELL-CVE-2024-3096

Bulletin has no description...

BELL-CVE-2024-2757

Bulletin has no description...

CVE-2024-31363 WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in LifterLMS.This issue affects LifterLMS: from n/a through 7.5.0...

BELL-CVE-2024-26816

Bulletin has no description...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

CVE-2024-29461

An issue in Floodlight SDN OpenFlow Controller v.1.2 allows a remote attacker to cause a denial of service via the datapath id component...

PopojiCMS Version 2.0.1 - Remote Command Execution

Exploit Title: PopojiCMS Version : 2.0.1 Remote Command Execution Date: 27/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://www.popojicms.org/ Software Link: https://github.com/PopojiCMS/PopojiCMS/archive/refs/tags/v2.0.1.zip Version: Version : 2.0.1 Tested on:...