CVE-2024-52538

creationtimestamp| type| source ---|---|--- 2024-12-10 10:21:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113628025811609242 2024-12-10 13:17:28+00:00| seen| https://t.me/cvedetector/12495 2024-12-16 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1691/...

CVE-2024-11946

creationtimestamp| type| source ---|---|--- 2024-12-06 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1644/ 2024-12-30 20:19:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113743623783771556 2024-12-30 22:39:24+00:00| seen| https://t.me/cvedetector/13965...

CVE-2024-46908

creationtimestamp| type| source ---|---|--- 2024-12-02 17:05:15+00:00| seen| https://t.me/cvedetector/11794 2024-12-03 19:14:22+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590485768782792 2024-12-12 05:00:00+00:00| seen|...

CVE-2024-11523

creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1592/...

CVE-2024-52574

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:34+00:00| seen| https://t.me/cvedetector/11353 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1519/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-9726

creationtimestamp| type| source ---|---|--- 2024-11-12 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1475/...

CVE-2024-9714

creationtimestamp| type| source ---|---|--- 2024-11-12 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1483/...

CVE-2024-45315

creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1335/...

CVE-2024-7671

creationtimestamp| type| source ---|---|--- 2024-10-01 00:11:21+00:00| seen| https://t.me/cvedetector/6683 2024-10-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1318/...

CVE-2024-9250

creationtimestamp| type| source ---|---|--- 2024-09-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1303/...

Deep Sea Electronics DSE855 Remote Authentication Bypass Vulnerability

Deep Sea Electronics DSE855 is vulnerable to configuration disclosure when direct object reference is made to the Backup.bin file using an HTTP GET request. This will enable an attacker to disclose sensitive information and help her in authentication bypass, privilege escalation, and full system...

CVE-2024-2886

creationtimestamp| type| source ---|---|--- 2024-03-28 11:01:12+00:00| published-proof-of-concept| https://t.me/truesecator/5578 2024-05-14 22:53:21+00:00| exploited| Telegram/hXBVtqvQALtVQeIFAgKK-S2hj8k3D51My4YiCPF4vPfe-M 2024-05-16 15:41:15+00:00| exploited| https://t.me/itsecnews/4434 2025-01-...

R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure Vulnerability

R Radio Network FM Transmitter version 1.07 suffers from an improper access control that allows an unauthenticated actor to directly reference the system.cgi endpoint and disclose the clear-text password of the admin user allowing authentication bypass and FM station setup access. R Radio Network...

PT-2023-26703 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: Froxlor version 2.0.21 Description: Our research team found a zeroday issue in Froxlor. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was...

ZeroDay vulnerability fixed in Barracuda Email Security Gateway

Barracuda Networks has fixed a vulnerability in its Email Security Gateway appliance ESG. The vulnerability allows an unauthenticated malicious person to gain access gain access to the vulnerable system and execute arbitrary code. execute. Barracuda Networks indicates that this vulnerability has...

WhiteBeam - Transparent Endpoint Security

Transparent endpoint security Features Block and detect advanced attacks Modern audited cryptography: RustCrypto for hashing and encryption Highly compatible: Development focused on all platforms incl. legacy and architectures Source available: Audits welcome Reviewed by security researchers with...

Fronton: Russian IoT Botnet Designed to Run Social Media Disinformation Campaigns

Fronton, a distributed denial-of-service DDoS botnet that came to light in March 2020, is much more powerful than previously thought, per the latest research. "Fronton is a system developed for coordinated inauthentic behavior on a massive scale," threat intelligence firm Nisos said in a report...

Actively Exploited Zero-Day Bug Patched by Microsoft

Microsoft has revealed 73 new patches for May’s monthly update of security fixes, including a patch for one flaw–a zero-day Windows LSA Spoofing Vulnerability rated as “important”—that is currently being exploited with man-in-the-middle attacks. The software giant’s monthly update of patches that...

Warning — Two Unpatched Critical 0-Day RCE Flaws Affect All Windows Versions

Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers remotely take complete control over targeted computers. According to Microsoft, both unpatched flaws are being used in limited, targeted...

Microsoft Windows - Shell COM Server Registrar Local Privilege Escalation

// Axel '0vercl0k' Souchet - December 28 2019 // References: // - Found by an anonymous researcher, written up by Simon '@HexKitchen' Zuckerbraun // - https://www.zerodayinitiative.com/blog/2019/12/19/privilege-escalation-via-the-core-shell-com-registrar-object // -...