CVE-2024-41972

creationtimestamp| type| source ---|---|--- 2024-11-18 09:16:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113503201064320976 2024-11-18 12:22:15+00:00| seen| https://t.me/cvedetector/11322 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...

CVE-2024-52583: Download of Code Without Integrity Check

The WesHacks GitHub repository provides the official Hackathon competition website source code for the Muweilah Wesgreen Hackathon. The page schedule.html before 17 November 2024 or commit 93dfb83 contains links to Leostop, a site that hosts a malicious injected JavaScript file that occurs when...

CVE-2023-7261

creationtimestamp| type| source ---|---|--- 2024-11-16 16:34:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11440 2024-11-17 02:59:36+00:00| published-proof-of-concept| https://t.me/CNArsenal/3459 2024-11-20 11:20:03+00:00| published-proof-of-concept|...

CVE-2024-10592

creationtimestamp| type| source ---|---|--- 2024-11-16 09:40:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113491970826892267 2024-11-16 11:53:20+00:00| seen| https://t.me/cvedetector/11231 2024-11-18 20:35:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9074...

BIT-POSTGRESQL-2024-10976 PostgreSQL row security below e.g. subqueries disregards user ID changes

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

CVE-2024-11250

creationtimestamp| type| source ---|---|--- 2024-11-15 17:38:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113488187855034580 2024-11-15 17:42:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113488202379524464...

CVE-2024-10976

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

CVE-2024-10976

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

CVE-2024-10978

creationtimestamp| type| source ---|---|--- 2024-11-14 13:05:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113481449786170984 2024-11-14 14:59:03+00:00| seen| https://t.me/cvedetector/10945 2025-02-20 23:26:54+00:00| seen| Telegram/ZWgJLSHDidKsbED79NYRIJrHIHK98b2Y4jkgVKjeWyYZKj8...

CVE-2024-10976

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

CVE-2024-10976 PostgreSQL row security below e.g. subqueries disregards user ID changes

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

CVE-2024-10976 PostgreSQL row security below e.g. subqueries disregards user ID changes

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

CVE-2024-10976

CVE-2024-10976 affects PostgreSQL row security policy handling when a query is planned under one role and executed under another (e.g., via subqueries, WITH, security invoker views, or SQL-language functions referencing a table with an RLS policy). This incomplete tracking can cause policies to b...

CVE-2024-10976

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

CVE-2020-22840

creationtimestamp| type| source ---|---|--- 2024-11-14 06:08:09+00:00| seen| MISP/8ab39244-bb6c-4d97-b634-dea84993158e...

CVE-2020-22841

creationtimestamp| type| source ---|---|--- 2024-11-14 06:08:09+00:00| seen| MISP/90eeacac-dcdc-462f-8477-ff6eb6d1eda7...

PostgreSQL 安全漏洞

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A security vulnerability exists in PostgreSQL that stems from...

PostgreSQL -- PostgreSQL row security below e.g. subqueries disregards user ID changes

PostgreSQL project reports: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery...

CVE-2024-52549

creationtimestamp| type| source ---|---|--- 2024-11-13 20:55:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113477637439411514 2024-11-13 22:20:22+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113477970956610756 2024-11-13 23:05:33+00:00| seen|...

Context is King: Using API Sessions for Security Context

There’s no doubt that API security is a hot topic these days. The continued growth in API-related breaches and increase in publicized API vulnerabilities has pushed API security to the top of CISO’s lists. The tools in the market for API security still have room for improvement, of course. One of...