CVE-2024-28434

The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code...

CVE-2024-28435

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload...

CVE-2024-28434

The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code...

CVE-2024-28435

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload...

Twenty 安全漏洞

Twenty is an open source CRM platform from Twenty. A security vulnerability exists in Twenty version 0.3.0, which stems from an easy server-side request forgery attack via file uploads...

CVE-2024-28435

Twenty CRM platform version 0.3.0 is affected by a server-side request forgery (SSRF) via the file upload feature. The root cause is SSRF in the file upload handling, which can allow an attacker to trigger requests to internal resources or make unauthorized requests. PT-Security notes remediation...

CVE-2024-28434

The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code...

Twenty 安全漏洞

Twenty is a CRM platform open-sourced by Twenty. A security vulnerability exists in Twenty version 0.3.0. An attacker can exploit this vulnerability to trigger javascript code execution via a specially crafted svg file...

CVE-2024-28116

creationtimestamp| type| source ---|---|--- 2024-03-24 13:18:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6844 2024-03-24 14:33:18+00:00| published-proof-of-concept| https://t.me/CNArsenal/2168 2024-03-24 15:18:04+00:00| published-proof-of-concept| https://t.me/proxybar/1954...

Medium: nodejs20

Issue Overview: c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files...

RHSA-2024:1376

creationtimestamp| type| source ---|---|--- 2024-03-19 15:16:57+00:00| seen| https://t.me/ctinow/211585...

PT-2024-22745 · Unknown · Aam Advanced Access Manager

Name of the Vulnerable Software and Affected Versions: AAM Advanced Access Manager versions through 6.9.20 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2024-6161 · Unknown · Tap-Windows6

Name of the Vulnerable Software and Affected Versions: tap-windows6 driver version 9.26 and earlier Description: The issue is related to the tap-windows6 driver not properly checking the size data of incoming write operations, which can be used by an attacker to overflow memory buffers. This can...

PT-2024-2291 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 24.0, 23.0.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Animate, which could lead to the disclosure of sensitive memory. An attacker could leverage this vulnerability t...

CVE-2023-51486

creationtimestamp| type| source ---|---|--- 2024-03-16 03:21:34+00:00| seen| https://t.me/ctinow/209298 2024-03-16 03:26:17+00:00| seen| https://t.me/ctinow/209306...

CVE-2023-7009

creationtimestamp| type| source ---|---|--- 2024-03-15 18:27:02+00:00| seen| https://t.me/ctinow/209010...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose...

PT-2024-7023 · Intel · Intel Quartus Prime Pro Edition Design

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition Design Software versions prior to 24.1 Description: The issue is related to an uncontrolled search path in the IntelR QuartusR Prime Pro Edition Design Software. This may allow an authenticated user to...

PT-2024-21208 · Unknown · My Calendar

Name of the Vulnerable Software and Affected Versions: My Calendar versions through 3.4.23 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts...

CVE-2024-2249

creationtimestamp| type| source ---|---|--- 2024-03-14 23:21:45+00:00| seen| https://t.me/ctinow/208272 2024-03-14 23:26:10+00:00| seen| https://t.me/ctinow/208280 2024-03-16 21:11:50+00:00| seen| https://t.me/arpsyndicate/4256...