CVE-2024-28947

creationtimestamp| type| source ---|---|--- 2024-08-14 17:23:04+00:00| seen| https://t.me/cvedetector/3138...

Adobe Photoshop 资源管理错误漏洞

Adobe Photoshop is a suite of image processing software from the American company Audobee Adobe. The software is primarily used for processing images. A resource management error vulnerability exists in Adobe Photoshop versions 24.x prior to 24.7.3, and 25.x prior to 25.9.1, which stems from bein...

CVE-2024-7740

A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiat...

CVE-2024-38140

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review 2024-08-24 19:32:31+00:00| seen| Telegram/LfogUMBxGpVn17H6Uo0yXtk68arkJ9YyItezZVoolePyzdw...

CVE-2024-38150

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...

CVE-2024-5722

creationtimestamp| type| source ---|---|--- 2024-08-13 07:31:39+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/730 2024-08-13 07:31:57+00:00| published-proof-of-concept| https://t.me/HackerArsenal/160 2024-08-18 06:23:26+00:00| published-proof-of-concept|...

CVE-2024-5717

creationtimestamp| type| source ---|---|--- 2024-08-13 07:17:46+00:00| published-proof-of-concept| https://t.me/proxybar/2225 2024-08-13 07:31:39+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/730 2024-08-13 07:31:57+00:00| published-proof-of-concept|...

WordPress Essential Addons for Elementor plugin <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via nomoreitemstext Parameter vulnerability discovered by Webbernaut in WordPress Plugin Essential Addons for Elementor versions = 5.9.27...

CVE-2024-43224

creationtimestamp| type| source ---|---|--- 2024-08-13 01:12:08+00:00| seen| https://t.me/cvedetector/2907...

HPESBHF04692 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01073, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1670 Performance Storage - Prior to v2.2005-27-2024 HPE StoreEasy 1670 Storage - Prior to v2.2005-27-2024 HPE StoreEasy 1870 Performance Storage - Prior to...

PT-2024-27243 · Unknown · Ada Web Server

Name of the Vulnerable Software and Affected Versions: Ada Web Server version 20.0 Description: An issue was discovered in Ada Web Server when configured to use SSL, which is not the default setting. The SSL/TLS used to establish connections to external services is done without proper hostname...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows. An attacker could exploit the vulnerability to tamper with compressed folders. The following products and versio...

PT-2024-26033 · Telephony · Telephony

Name of the Vulnerable Software and Affected Versions: Telephony versions prior to SMR Aug-2024 Release 1 Description: The issue is related to the improper handling of insufficient permission in Telephony, allowing local attackers to configure the default Message application. Recommendations: For...

PT-2024-26020 · Samsung · Samsunghealthservice

Name of the Vulnerable Software and Affected Versions: SamsungHealthService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in SamsungHealthService, allowing local attackers to bypass restrictions on starting services from the background...

CVE-2024-7461

creationtimestamp| type| source ---|---|--- 2024-08-05 03:02:12+00:00| seen| https://t.me/cvedetector/2418...

CVE-2020-0655

creationtimestamp| type| source ---|---|--- 2024-08-02 12:11:00+00:00| seen| https://t.me/SecLabNews/7584...

CVE-2024-39631

creationtimestamp| type| source ---|---|--- 2024-08-02 02:18:49+00:00| seen| https://t.me/cvedetector/2314...

PT-2024-25530 · Cosy+ · Cosy+

Name of the Vulnerable Software and Affected Versions: Cosy+ devices versions 21.x through 21.2s9 Cosy+ devices versions 22.x through 22.1s2 Description: The issue arises from improper input sanitization when displaying logs, leading to a potential XSS attack. This is due to the improper...

WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by wcraft Patchstack Alliance in WordPress Plugin Essential Addons for Elementor versions = 5.9.26...

1E Platform 安全漏洞

1E Platform is a terminal endpoint management and automation solution from 1E. A security vulnerability exists in versions prior to 1E Platform 23 that stems from an identity server that can enable URL redirection to untrusted sites...