GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server, which...

CVE-2024-9681

creationtimestamp| type| source ---|---|--- 2024-11-06 07:20:11+00:00| seen| https://mastodon.social/users/bagder/statuses/113434795032364456 2024-11-06 07:48:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113434907880220824 2024-11-06 09:58:55+00:00| seen|...

CVE-2024-51559

This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters to gain unauthorized access and perform malicious activities on other user accounts...

CVE-2024-51559

The CVE-2024-51559 entry applies to Wave 2.0 and is supported by connected documents that describe a vulnerability caused by improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this by manipulating API input parameters (e.g., user_id) to gain una...

Brokerage Wave 安全漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. A security vulnerability exists in Brokerage Wave version 2.0, which stems from a lack of authorization checking on certain API endpoints, which could allow a remote attacker to manipulate the parameter userid via the API request URL to...

CVE-2024-51378

creationtimestamp| type| source ---|---|--- 2024-10-30 00:49:07+00:00| exploited| https://t.me/cvedetector/9380 2024-10-30 02:57:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8886 2024-11-01 15:52:35+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/6249...

CVE-2021-22707

creationtimestamp| type| source ---|---|--- 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-30 2024-11-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-04 2024-11-10 00:00:00+00:00| exploited| The...

CVE-2024-9574

creationtimestamp| type| source ---|---|--- 2024-10-07 17:38:18+00:00| seen| https://t.me/cvedetector/7235 2025-03-27 11:40:11+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lle7pdqgz624 2026-06-22 21:37:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3movtsu64qn2...

SUSE CVE-2024-8118

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules...

UBUNTU-CVE-2024-8118

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules...

Grafana alerting wrong permission on datasource rule write endpoint

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules. This vulnerability first appeared in Grafana v8.5.0, and is fixed in v11.2.1, v11.1.6, v11.0.5, v10.4.9, and v10.3.10...

Grafana 安全漏洞

Grafana is a set of open source monitoring tools from Grafana open source that provides a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. Grafana suffers from a security vulnerability that stems from incorrect...

Authorization Bypass

Sentry is vulnerable to Authorization Bypass. The vulnerability is due to improper scoping of authorization checks on requests to mute alert rules, which allows authenticated users to mute alerts without being members of the organization or having the required permissions on the project...

GHSA-V345-W9F2-MPM5 Sentry improperly authorizes muting of alert rules

Impact An authenticated user can mute alert rules from arbitrary organizations and projects given a known given rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we have identified no instances where alerts have been muted by...

CVE-2024-27112

creationtimestamp| type| source ---|---|--- 2024-09-11 17:00:57+00:00| seen| https://t.me/cvedetector/5362 2025-03-11 14:40:21+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk4ccrrxss24...

CVE-2024-27113

creationtimestamp| type| source ---|---|--- 2024-09-11 17:00:53+00:00| seen| https://t.me/cvedetector/5361 2025-03-11 14:40:23+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk4ccsk67u2p...

CVE-2024-27115

creationtimestamp| type| source ---|---|--- 2024-09-11 17:00:52+00:00| seen| https://t.me/cvedetector/5359 2025-01-20 21:02:11+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6kcpm2d 2025-02-10 21:01:59+00:00| seen|...

CVE-2024-30085

creationtimestamp| type| source ---|---|--- 2024-09-10 09:26:48+00:00| published-proof-of-concept| https://t.me/ptescalator/80 2024-12-22 15:49:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ldvrcv5rgk26 2024-12-24 05:07:55+00:00| seen|...

CVE-2024-20439

creationtimestamp| type| source ---|---|--- 2024-09-04 20:15:49+00:00| seen| https://t.me/cvedetector/4823 2024-09-05 06:52:28+00:00| seen| https://t.me/thehackernews/5522 2024-09-05 07:07:50+00:00| seen| https://t.me/CyberBulletin/551 2024-09-05 07:50:52+00:00| seen|...

The vulnerability of the file /api/v1/alerts of the Prometheus monitoring system, which is used to process alerts from Alertmanager, allows a perpetrator to execute arbitrary code.

The vulnerability of the Prometheus monitoring system’s /api/v1/alerts file for processing alerts by Alertmanager is related to improper handling of input data during the generation of web pages. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...