13074 matches found
CVE-2024-26352
creationtimestamp| type| source ---|---|--- 2024-02-22 15:26:48+00:00| seen| https://t.me/ctinow/190812 2024-02-22 15:27:02+00:00| seen| https://t.me/ctinow/190823...
CVE-2024-26349
creationtimestamp| type| source ---|---|--- 2024-02-22 15:26:45+00:00| seen| https://t.me/ctinow/190809 2024-02-22 15:26:59+00:00| seen| https://t.me/ctinow/190820...
CISA Releases One Industrial Control Systems Advisory
CISA released one Industrial Control Systems ICS advisory on February 22, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-053-01 Delta Electronics CNCSoft-B DOPSoft CISA encourages users and administrators to...
CVE-2024-23135
creationtimestamp| type| source ---|---|--- 2024-02-22 06:26:39+00:00| seen| https://t.me/ctinow/190443 2024-02-22 06:26:54+00:00| seen| https://t.me/ctinow/190453...
GHSA-37GX-JQX9-FWMG
creationtimestamp| type| source ---|---|--- 2024-02-21 01:26:17+00:00| seen| https://t.me/ctinow/189096 2024-02-21 21:23:31+00:00| seen| https://t.me/arpsyndicate/3870...
ConnectWise ScreenConnect Path Traversal Vulnerability
ConnectWise ScreenConnect is a self-hosted remote desktop software application from ConnectWise. A security vulnerability exists in ConnectWise ScreenConnect version 23.9.7 and earlier, which stems from a path traversal vulnerability...
CVE-2024-26267
creationtimestamp| type| source ---|---|--- 2024-02-20 14:22:01+00:00| seen| https://t.me/ctinow/188515 2024-02-20 14:26:23+00:00| seen| https://t.me/ctinow/188525 2024-02-21 15:38:16+00:00| seen| https://t.me/arpsyndicate/3852...
CVE-2023-52433
creationtimestamp| type| source ---|---|--- 2024-02-20 14:21:54+00:00| seen| https://t.me/ctinow/188511 2024-02-20 14:26:18+00:00| seen| https://t.me/ctinow/188521 2024-02-20 21:31:22+00:00| seen| https://t.me/ctinow/188929 2024-02-21 13:07:07+00:00| seen| https://t.me/arpsyndicate/3754 2025-08-1...
mysql: Server: DML unspecified vulnerability (CPU Apr 2024)
A flaw was found in the MySQL Server product of Oracle MySQL component: Server: DML. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability ...
CVE-2023-49250
creationtimestamp| type| source ---|---|--- 2024-02-20 11:26:26+00:00| seen| https://t.me/ctinow/188361 2024-02-20 11:31:53+00:00| seen| https://t.me/ctinow/188368 2024-02-21 07:38:10+00:00| seen| https://t.me/arpsyndicate/3735...
CVE-2023-21413
creationtimestamp| type| source ---|---|--- 2024-02-20 08:44:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9989 2025-06-16 17:38:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18490...
GHSA-3JCV-5F9P-2F2P Cross-site Scripting in electron-pdf
electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the HTML content entered by the user...
CVE-2023-6764
A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...
Node.js Security Vulnerabilities
Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js versions 20 and 21 that stems from the presence of a path traversal vulnerability...
Node.js Security Vulnerabilities
Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js versions 20 and 21 that stems from the permissions model's failure to clarify in the documentation that wildcards can only be used as the last character of file paths, potentially...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020, as well as Adobe Acrobat Reader 2020, are related to insufficient input data validation. This vulnerability allows attackers to trigger service interruptions.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause...
PT-2024-17837
Name of the Vulnerable Software and Affected Versions Loomio version 2.22.0 Description The issue allows executing arbitrary commands on the server due to the application being vulnerable to OS Command Injection. Recommendations For Loomio version 2.22.0, update to a version that fixes the OS...
PT-2024-4035 · Node.Js +5 · Node.Js +5
Name of the Vulnerable Software and Affected Versions: Node.js versions 20 through 21 Description: The issue is related to the Node.js Permission Model, which has misleading documentation regarding the use of wildcards in file paths. Specifically, the documentation does not clarify that wildcards...
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management for Windows versions prior to 24.1. An attacker could exploit the vulnerability to view Sysvol...