24879 matches found
CVE-2024-51175
creationtimestamp| type| source ---|---|--- 2024-12-17 21:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113670373957707285 2024-12-18 00:18:42+00:00| seen| https://t.me/cvedetector/13140...
GHSA-FM9W-7M7V-WXQV
creationtimestamp| type| source ---|---|--- 2024-12-17 21:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113670373972746279 2024-12-18 00:18:39+00:00| seen| https://t.me/cvedetector/13136...
CVE-2024-29646
creationtimestamp| type| source ---|---|--- 2024-12-17 21:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113670348275480482 2024-12-18 00:18:41+00:00| seen| https://t.me/cvedetector/13138...
CVE-2023-37940
creationtimestamp| type| source ---|---|--- 2024-12-17 21:32:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113670300799021960 2024-12-18 00:18:46+00:00| seen| https://t.me/cvedetector/13141...
CVE-2024-55059
creationtimestamp| type| source ---|---|--- 2024-12-17 20:25:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113670039663227079 2024-12-17 23:28:27+00:00| seen| https://t.me/cvedetector/13133...
CVE-2024-11993
creationtimestamp| type| source ---|---|--- 2024-12-17 20:25:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113670039597784398 2024-12-17 23:28:27+00:00| seen| https://t.me/cvedetector/13134 2025-01-28 23:09:41+00:00| published-proof-of-concept|...
CVE-2024-49194
creationtimestamp| type| source ---|---|--- 2024-12-17 19:57:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113669928710434373 2024-12-17 21:48:09+00:00| seen| https://t.me/cvedetector/13127 2024-12-20 06:25:11+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ldpqun5z7c...
urllib3: Request body not stripped after redirect from 303 status changes request method to GET
A flaw was found in urllib3, an HTTP client library for Python. urllib3 doesn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303, after changing the method in a request from one that could accept a request body such as POST to GET, as is required by HTTP...
Malicious code in discordbotstatus (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2dbd628d2baf4f55c8f9c9dcd441ae7deeee86379f73dd79beb48e41d4bfbe8f Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...
CVE-2024-56139
creationtimestamp| type| source ---|---|--- 2024-12-17 18:38:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113669618182463708 2024-12-17 20:57:58+00:00| seen| https://t.me/cvedetector/13123...
CVE-2024-54662
creationtimestamp| type| source ---|---|--- 2024-12-17 18:13:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113669518878898094 2024-12-17 20:07:39+00:00| seen| https://t.me/cvedetector/13116...
CVE-2024-55496
creationtimestamp| type| source ---|---|--- 2024-12-17 17:45:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113669408275533969 2024-12-17 20:07:38+00:00| seen| https://t.me/cvedetector/13115...
CVE-2024-42194
creationtimestamp| type| source ---|---|--- 2024-12-17 17:37:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113669377987918770 2024-12-17 20:07:45+00:00| seen| https://t.me/cvedetector/13120...
CVE-2024-37606
creationtimestamp| type| source ---|---|--- 2024-12-17 14:49:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113668715771189184 2024-12-17 16:46:34+00:00| seen| https://t.me/cvedetector/13095...
CVE-2024-10356
creationtimestamp| type| source ---|---|--- 2024-12-17 12:56:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113668272289530654 2024-12-17 15:06:15+00:00| seen| https://t.me/cvedetector/13092...
CVE-2024-8475
creationtimestamp| type| source ---|---|--- 2024-12-17 11:46:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113667998087319876 2024-12-17 14:15:57+00:00| seen| https://t.me/cvedetector/13082...
CVE-2024-12601
creationtimestamp| type| source ---|---|--- 2024-12-17 11:20:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113667894792440145 2024-12-17 14:16:00+00:00| seen| https://t.me/cvedetector/13085...
CVE-2024-8326
creationtimestamp| type| source ---|---|--- 2024-12-17 09:31:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113667467523852993 2024-12-17 09:35:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113667480628378051 2024-12-17 10:10:06+00:00| seen|...
CVE-2024-12469 WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter
The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘status’ parameter in all versions up to, and including, 4.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...