UBUNTU-CVE-2024-43444

Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match and debugging for the authentication backend has been enabled. This issue affects: OTRS from 7.0.X through 7.0.50 OTRS 8.0.X OTRS 2023.X...

CVE-2024-43444 Passwords are written to Admin Log Module

Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match and debugging for the authentication backend has been enabled. This issue affects: OTRS from 7.0.X through 7.0.50 OTRS 8.0.X OTRS 2023.X...

CVE-2024-8073

creationtimestamp| type| source ---|---|--- 2024-08-26 06:10:55+00:00| seen| https://t.me/cvedetector/4098 2024-08-26 09:45:06+00:00| seen| https://t.me/CyberBulletin/463 2024-08-26 09:46:29+00:00| seen| https://t.me/InfoSecInsider/23529 2024-08-26 09:46:30+00:00| seen|...

PT-2024-5942 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 7.0.X through 7.0.50 OTRS version 8.0.X OTRS version 2023.X OTRS versions 2024.X through 2024.5.X OTRS Community Edition version 6.0.x Description: The issue is related to the OTRS admin log module, where passwords of agents and...

CVE-2018-19520

creationtimestamp| type| source ---|---|--- 2024-08-25 08:42:29+00:00| seen| https://t.me/WARLOCKDARKARMYOFFICIALS/4507 2024-08-25 11:49:59+00:00| seen| Telegram/BCpPBhLrKDo8iMPvx3AwjUXyHU4dOqMbMmn4fTKrKNg1isQ...

CVE-2016-5773

creationtimestamp| type| source ---|---|--- 2024-08-25 08:42:29+00:00| seen| https://t.me/WARLOCKDARKARMYOFFICIALS/4507 2024-08-25 11:49:59+00:00| seen| Telegram/BCpPBhLrKDo8iMPvx3AwjUXyHU4dOqMbMmn4fTKrKNg1isQ...

CVE-2017-12868

creationtimestamp| type| source ---|---|--- 2024-08-25 08:42:29+00:00| seen| https://t.me/WARLOCKDARKARMYOFFICIALS/4507 2024-08-25 11:49:59+00:00| seen| Telegram/BCpPBhLrKDo8iMPvx3AwjUXyHU4dOqMbMmn4fTKrKNg1isQ...

PT-2024-9332 · Luigi · Luigi

Name of the Vulnerable Software and Affected Versions: luigi versions prior to 3.6.0 Description: The issue is related to improper destination file path validation in the extract packages archive function, which can lead to arbitrary file write via archive extraction, also known as Zip Slip. This...

CVE-2024-36516

creationtimestamp| type| source ---|---|--- 2024-08-23 17:07:56+00:00| seen| https://t.me/cvedetector/3989 2024-08-23 17:07:57+00:00| seen| https://t.me/cvedetector/3990...

BIT-GRAFANA-2024-6322

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query...

CVE-2024-40766

creationtimestamp| type| source ---|---|--- 2024-08-23 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1358 2024-08-23 09:36:13+00:00| seen| https://t.me/cvedetector/3978 2024-08-24 09:50:28+00:00| seen| https://t.me/HackingInsights/11135 2024-08-26 17:55:36+00:00| seen|...

GO-2024-3079 Grafana plugin data sources vulnerable to access control bypass in github.com/grafana/grafana

Grafana plugin data sources vulnerable to access control bypass in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

CVE-2024-28987

creationtimestamp| type| source ---|---|--- 2024-08-22 00:57:11+00:00| seen| https://t.me/cvedetector/3846 2024-08-22 12:21:40+00:00| seen| https://t.me/HackingInsights/10924 2024-08-22 18:38:57+00:00| seen| https://t.me/thehackernews/5461 2024-08-23 14:53:04+00:00| exploited|...

CVE-2022-48898

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: do not complete dpauxcmdfifotx if irq is not for aux transfer There are 3 possible interrupt sources are handled by DP controller, HPDstatus, Controller state changes and Aux read/write transaction. At every irq, DP...

CVE-2024-6337

creationtimestamp| type| source ---|---|--- 2024-08-20 22:59:27+00:00| seen| https://t.me/cvedetector/3682 2024-08-23 12:50:05+00:00| seen| https://t.me/truesecator/6127 2024-08-26 14:44:07+00:00| seen| Telegram/1vcacoomzYihOGFOx2KRxbErYxJjO2PUlegAUICxwpFLpXv 2026-07-06 11:00:04+00:00| seen|...

CVE-2024-6800

creationtimestamp| type| source ---|---|--- 2024-08-20 22:59:26+00:00| seen| https://t.me/cvedetector/3681 2024-08-21 12:52:52+00:00| seen| https://t.me/HackingInsights/10797 2024-08-22 06:54:04+00:00| seen| https://t.me/thehackernews/5455 2024-08-22 09:49:44+00:00| seen|...

CVE-2024-7711

creationtimestamp| type| source ---|---|--- 2024-08-20 22:59:25+00:00| seen| https://t.me/cvedetector/3680 2024-08-23 12:50:05+00:00| seen| https://t.me/truesecator/6127 2024-08-26 14:44:07+00:00| seen| Telegram/1vcacoomzYihOGFOx2KRxbErYxJjO2PUlegAUICxwpFLpXv 2026-07-06 11:00:04+00:00| seen|...

Grafana plugin data sources vulnerable to access control bypass

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query...

GHSA-HH8P-374F-QGR5 Grafana plugin data sources vulnerable to access control bypass

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query...

CVE-2024-6322

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query...