12898 matches found
CVE-2023-49250
creationtimestamp| type| source ---|---|--- 2024-02-20 11:26:26+00:00| seen| https://t.me/ctinow/188361 2024-02-20 11:31:53+00:00| seen| https://t.me/ctinow/188368 2024-02-21 07:38:10+00:00| seen| https://t.me/arpsyndicate/3735...
CVE-2023-21413
creationtimestamp| type| source ---|---|--- 2024-02-20 08:44:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9989 2025-06-16 17:38:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18490...
GHSA-3JCV-5F9P-2F2P Cross-site Scripting in electron-pdf
electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the HTML content entered by the user...
CVE-2023-6764
A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...
Node.js Security Vulnerabilities
Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js versions 20 and 21 that stems from the presence of a path traversal vulnerability...
Node.js Security Vulnerabilities
Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js versions 20 and 21 that stems from the permissions model's failure to clarify in the documentation that wildcards can only be used as the last character of file paths, potentially...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020, as well as Adobe Acrobat Reader 2020, are related to insufficient input data validation. This vulnerability allows attackers to trigger service interruptions.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause...
PT-2024-17837
Name of the Vulnerable Software and Affected Versions Loomio version 2.22.0 Description The issue allows executing arbitrary commands on the server due to the application being vulnerable to OS Command Injection. Recommendations For Loomio version 2.22.0, update to a version that fixes the OS...
PT-2024-4035 · Node.Js +5 · Node.Js +5
Name of the Vulnerable Software and Affected Versions: Node.js versions 20 through 21 Description: The issue is related to the Node.js Permission Model, which has misleading documentation regarding the use of wildcards in file paths. Specifically, the documentation does not clarify that wildcards...
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management for Windows versions prior to 24.1. An attacker could exploit the vulnerability to view Sysvol...
CVE-2022-23091
creationtimestamp| type| source ---|---|--- 2024-02-15 07:22:02+00:00| seen| https://t.me/ctinow/185284...
OpenText Operations Agent Security Vulnerability
OpenText Operations Agent is a software from OpenText Canada used to manage and monitor OpenText products and solutions. A security vulnerability exists in OpenText Operations Agent versions 12.15, 12.20 through 12.25. An attacker could exploit the vulnerability to escalate privileges...
CVE-2023-32651
Improper validation of specified type of input for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Intel Ethernet Products Security Vulnerability
Intel Ethernet Products is a networking product from Intel Corporation. A security vulnerability exists in Intel Ethernet Products versions prior to 28.2, which stems from an issue with incorrect access control elements that could lead to privilege escalation via local access by an authenticated...
CVE-2024-23796
creationtimestamp| type| source ---|---|--- 2024-02-13 10:22:05+00:00| seen| https://t.me/ctinow/183704...
CVE-2023-28018
creationtimestamp| type| source ---|---|--- 2024-02-13 00:26:11+00:00| seen| https://t.me/ctinow/183521...
Microsoft Windows OLE Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows OLE. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Versi...
Microsoft Windows Kernel Security Vulnerability
Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Kernel. The following products and versions are affected: Windows 11 version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bi...