CVE-2024-3080

creationtimestamp| type| source ---|---|--- 2024-06-16 16:57:36+00:00| seen| https://t.me/HackingInsights/2652 2024-06-17 14:11:30+00:00| seen| https://t.me/truesecator/5862 2024-06-17 17:01:54+00:00| seen| Telegram/WdjBp7gTBnVFtFqofM1fa2AktY3uosjlnVDlOTAP1sqRthE 2024-06-17 18:25:35+00:00|...

CVE-2024-30078

creationtimestamp| type| source ---|---|--- 2024-06-15 19:39:01+00:00| seen| https://t.me/LulzsecMuslimsWorld/1115 2024-06-15 19:51:03+00:00| seen| Telegram/kOAwStIrbOGmcaVWg-A-8DnRh7mNgf8FjJwt25VzgqkJtk 2024-06-16 07:05:44+00:00| seen| https://t.me/Incognitodatadefenders/47 2024-06-16...

CVE-2024-34102

creationtimestamp| type| source ---|---|--- 2024-06-13 10:26:36+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus16/2024 2024-06-21 14:20:32+00:00| published-proof-of-concept| https://t.me/HackingInsights/3235 2024-06-21 18:35:05+00:00| seen| https://t.me/truesecator/5886...

CVE-2024-37878

Cross Site Scripting vulnerability in TWCMS v.2.0.3 allows a remote attacker to execute arbitrary code via the /TWCMS-gh-pages/twcms/runtime/twcmsview/default,index.htm.php" PHP directly echoes parameters input from external sources...

PT-2024-4221 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 24.7.3, 25.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker...

PT-2024-4224 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.2, 23.6.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...

Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing

Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and index documents are ambiguous without an accompanying Content-Type HTTP header. Versions of Moby Docker Engine prior to 20.10.11 treat the Content-Type...

CVE-2024-36801

creationtimestamp| type| source ---|---|--- 2024-06-06 07:31:22+00:00| published-proof-of-concept| https://t.me/proxybar/2112 2024-07-01 15:14:04+00:00| published-proof-of-concept| Telegram/Q04ohCeUXG62MKi1aKSWO91bmEsWDlVRGlZ8x3lmxANi1Io...

GO-2024-2629 Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

GHSA-JMH9-6RJQ-GJH9 Vulnerable embedded jQuery Version

Summary PIMCore uses the JavaScript library jQuery in version 3.4.1. This version is vulnerable to cross-site-scripting XSS. Details In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it to one of...

SUSE CVE-2021-32760

containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host's filesystem. Changes to file permissions can deny access t...

RHEL 8 : opendaylight (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jackson-databind: Serialization gadgets in classes of the ehcache package CVE-2019-17267 - A flaw was...

GHSA-76R3-M635-P3VC TYPO3 Cross-Site Scripting in Language Pack Handling

Failing to properly encode information from external sources, language pack handling in the install tool is vulnerable to cross-site scripting...

CVE-2024-22263

creationtimestamp| type| source ---|---|--- 2024-05-30 13:10:48+00:00| published-proof-of-concept| https://t.me/HackingInsights/1166 2024-08-21 20:12:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8324 2024-08-22 18:13:55+00:00| published-proof-of-concept|...

PT-2024-40148 · Packagist · Typo3/Cms-Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue arises from the failure to properly encode information from external sources. Specifically, the language pack handling in the install tool is susceptible to cross-site...

Important: git

Issue Overview: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a...

Important: git

Issue Overview: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2024-1769)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact...

CVE-2024-36371

creationtimestamp| type| source ---|---|--- 2024-05-29 18:53:28+00:00| seen| https://t.me/DARKSPOTTEAM/581 2024-05-29 18:53:28+00:00| seen| Telegram/DASdBAzdyFqiCt-TEWD5i84DOJh0xCyfOR9Q3VL29Y 2024-06-05 05:59:45+00:00| seen| https://t.me/ZeroEthicalCourse/320...

CVE-2024-36369

creationtimestamp| type| source ---|---|--- 2024-05-29 18:53:28+00:00| seen| https://t.me/DARKSPOTTEAM/581 2024-05-29 18:53:28+00:00| seen| Telegram/DASdBAzdyFqiCt-TEWD5i84DOJh0xCyfOR9Q3VL29Y...