CVE-2024-34676

creationtimestamp| type| source ---|---|--- 2024-11-06 02:32:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113433665161191617 2024-11-06 04:57:51+00:00| seen| https://t.me/cvedetector/9986...

CVE-2024-50097

creationtimestamp| type| source ---|---|--- 2024-11-05 17:36:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113431555144366840 2024-11-05 18:54:00+00:00| seen| https://t.me/cvedetector/9909...

CVE-2024-49214

QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality...

PT-2024-33: Business logic vulnerability in Passwork

The vulnerability was identified in Passwork version 6.4.0. The application's logic requires the user to perform a correct sequence of actions to implement the functionality. The vulnerability in the business logic can be exploited by an attacker to gain access to the application's functionality...

kernel: drivers: core: synchronize really_probe() and dev_uevent()

This CVE has been marked as Rejected by the assigning CNA...

Microsoft Power Automate 访问控制错误漏洞

Microsoft Power Automate is a low-code automation platform from Microsoft Corporation USA that allows users to create automated workflows that connect and integrate various applications and services. An access control error vulnerability exists in Microsoft Power Automate. An attacker exploiting...

CVE-2024-37285

creationtimestamp| type| source ---|---|--- 2024-09-09 07:57:07+00:00| seen| https://t.me/CyberBulletin/591 2024-09-09 09:27:41+00:00| published-proof-of-concept| https://t.me/HackingInsights/12529 2024-09-09 09:59:46+00:00| seen| https://t.me/CyberBulletin/597 2024-09-09 10:00:11+00:00| seen|...

CVE-2024-8370

creationtimestamp| type| source ---|---|--- 2024-09-02 01:19:47+00:00| seen| https://t.me/cvedetector/4583 2025-01-06 20:15:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113783244019784638 2025-01-06 20:15:57+00:00| seen|...

CVE-2024-38876

creationtimestamp| type| source ---|---|--- 2024-08-02 14:01:25+00:00| seen| https://t.me/cvedetector/2351 2024-11-13 04:03:41+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113473658534013466 2024-11-20 11:21:14+00:00| published-proof-of-concept| https://t.me/Rootsec2/5109 2024-11-2...

CVE-2024-38879

creationtimestamp| type| source ---|---|--- 2024-08-02 14:01:23+00:00| seen| https://t.me/cvedetector/2349 2024-11-13 04:03:41+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113473658534013466...

PT-2024-4852 · Microsoft · Windows Performance Data Helper Library +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Performance Data Helper Library affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the...

CVE-2024-28397

creationtimestamp| type| source ---|---|--- 2024-06-19 19:08:33+00:00| published-proof-of-concept| https://t.me/proxybar/2126 2024-06-20 11:31:03+00:00| published-proof-of-concept| https://t.me/CNArsenal/2690 2024-06-20 14:26:37+00:00| published-proof-of-concept|...

PT-2024-20: Unauth Time-Based SQL Injection in Pandora FMS

The vulnerability was identified in Pandora FMS versions 700 to 776. Due to insufficient sanitization of the authorization header, Time-Based SQL Injection vulnerability may be exploited. The discovered vulnerability can be exploited by an attacker to access sensitive data. The vulnerability does...

PT-2024-3796 · Cisco · Cisco Telepresence Management Suite

Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Management Suite affected versions not specified Description: The issue is related to insufficient input validation in the web-based management interface, allowing a low-privileged, remote attacker to conduct a cross-site...

SUSE CVE-2023-52575

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Number withdrawn

curl is a tool for transferring data from or to a server. This CVE number has been withdrawn...

PT-2024-36611

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue involves improper input validation on a generic SSO login. No further details are provided about the nature of the issue, affected devices, or real-world incidents...

WordPress Plugin CSprite Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Quick Quiz 2.4 File Upload - Remote Code Execution Vulnerability

Title: Quick-Quiz-2.4 File Upload - RCE Author: nu11secur1ty Vendor: https://mediacity.co.in/mediacity/ Software: https://codecanyon.net/item/quick-quiz-laravel-quiz-and-exam-system/21117633?srank=14 Reference: https://portswigger.net/web-security/file-upload,...

WordPress Plugin Rocket Font Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...