CVE-2025-0696

creationtimestamp| type| source ---|---|--- 2025-01-27 11:13:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113900023692284445 2025-01-27 14:19:25+00:00| seen| https://t.me/cvedetector/16449 2025-01-27 14:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgq73k4wgj2...

CVE-2025-0695

creationtimestamp| type| source ---|---|--- 2025-01-27 11:13:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113900023677624332 2025-01-27 14:19:26+00:00| seen| https://t.me/cvedetector/16450 2025-01-27 14:55:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgq73l5zyr2...

GHSA-C33J-W5W4-W9Q4

creationtimestamp| type| source ---|---|--- 2025-01-27 07:07:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3167...

GHSA-FG8C-FXJ5-QP3X

creationtimestamp| type| source ---|---|--- 2025-01-27 07:07:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3163...

CVE-2024-13117

creationtimestamp| type| source ---|---|--- 2025-01-27 06:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3uiqv62i 2025-01-27 06:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjnup72q 2025-01-27 06:51:46+00:00| seen|...

CVE-2024-43446

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...

CVE-2024-12280

creationtimestamp| type| source ---|---|--- 2025-01-27 06:02:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113898798690089537 2025-01-27 06:06:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113898815656486803 2025-01-27 06:15:41+00:00| seen|...

CVE-2024-12773

creationtimestamp| type| source ---|---|--- 2025-01-27 06:02:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113898798754392142 2025-01-27 06:06:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113898815721237909 2025-01-27 06:15:52+00:00| seen|...

CVE-2024-12321

creationtimestamp| type| source ---|---|--- 2025-01-27 06:02:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113898798705820695 2025-01-27 06:06:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113898815672458082 2025-01-27 06:15:46+00:00| seen|...

CVE-2024-43446 Improper check of permissions in Generic Interface

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...

CVE-2024-43446

CVE-2024-43446 affects OTRS: improper privilege management in the Generic Interface module allows users with read-only privileges to change ticket status. Impacted: OTRS 7.0.x, 8.0.x, 2023.x, 2024.x and ((OTRS)) Community Edition 6.0.x (and products built on it). Root cause: insufficient access c...

CVE-2023-46187

creationtimestamp| type| source ---|---|--- 2025-01-27 02:03:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113897857817278961 2025-01-27 02:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgounlu2vs2i 2025-01-27 04:07:38+00:00| seen|...

PT-2025-2648 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 6.0.x through 8.0.x OTRS versions 2023.x through 2024.x Description: An improper privilege management issue in the OTRS Generic Interface module allows users with read-only permissions to change the ticket status. This issue may...

OTRS 安全漏洞

OTRS is a service management solution from the German company OTRS. A security vulnerability exists in OTRS that stems from a rights management vulnerability in the OTRS Common Interface Module that allows the Ticket status to be changed even if the user only has ro privileges...

CVE-2017-20196

creationtimestamp| type| source ---|---|--- 2025-01-26 18:09:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113895996203352073 2025-01-26 18:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnztayn7h2b 2025-01-26 19:07:25+00:00|...

CVE-2024-54728

creationtimestamp| type| source ---|---|--- 2025-01-26 15:54:39+00:00| confirmed| https://gist.github.com/xu-yanbo202000460009/00dacd7bfede713a0f052a531da4fabd 2025-01-26 17:57:50+00:00| seen| https://vulnerability.circl.lu/comment/21f63dda-f998-4c51-b7ce-6efc09015c56 2025-01-27 22:23:49+00:00|...

CVE-2024-31906

creationtimestamp| type| source ---|---|--- 2025-01-26 14:41:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113895178452627897 2025-01-26 15:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnprgcqlu2t 2025-01-26 17:15:18+00:00| seen|...

GHSA-8V6P-C4W2-R9XW

creationtimestamp| type| source ---|---|--- 2025-01-26 07:06:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3113...

CVE-2022-49043

creationtimestamp| type| source ---|---|--- 2025-01-26 05:27:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113892999610922070 2025-01-26 05:31:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113893015259156248 2025-01-26 06:15:38+00:00| seen|...

PT-2025-02: Access to files or directories to external paties in TCPDF

The vulnerability was identified in TCPDF, version 6.8.0. The discovered vulnerability allows an attacker to transmit a specially created HTML file containing an image in Base64 format. Using the specified payload, the attacker can access an arbitrary image outside of the directory. Vulnerability...