1913 matches found
CVE-2024-27115
creationtimestamp| type| source ---|---|--- 2024-09-11 17:00:52+00:00| seen| https://t.me/cvedetector/5359 2025-01-20 21:02:11+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6kcpm2d 2025-02-10 21:01:59+00:00| seen|...
CVE-2024-30085
creationtimestamp| type| source ---|---|--- 2024-09-10 09:26:48+00:00| published-proof-of-concept| https://t.me/ptescalator/80 2024-12-22 15:49:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ldvrcv5rgk26 2024-12-24 05:07:55+00:00| seen|...
CVE-2024-20439
creationtimestamp| type| source ---|---|--- 2024-09-04 20:15:49+00:00| seen| https://t.me/cvedetector/4823 2024-09-05 06:52:28+00:00| seen| https://t.me/thehackernews/5522 2024-09-05 07:07:50+00:00| seen| https://t.me/CyberBulletin/551 2024-09-05 07:50:52+00:00| seen|...
The vulnerability of the file /api/v1/alerts of the Prometheus monitoring system, which is used to process alerts from Alertmanager, allows a perpetrator to execute arbitrary code.
The vulnerability of the Prometheus monitoring system’s /api/v1/alerts file for processing alerts by Alertmanager is related to improper handling of input data during the generation of web pages. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
[SECURITY] Fedora 40 Update: zabbix-6.0.33-1.fc40
Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...
CVE-2024-36517
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...
CVE-2024-36517
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...
CVE-2024-36517 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...
CVE-2024-36517 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...
CVE-2024-36517
CVE-2024-36517 affects Zohocorp ManageEngine ADAudit Plus versions below 8000, due to an authenticated SQL injection in the alerts module. Public details consistently describe exploitability via the authenticated user in the affected component, enabling attackers to execute arbitrary queries and ...
PT-2024-27045 · Zohocorp · Zoho Manageengine Adaudit Plus
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8000 Description: The issue concerns an authenticated SQL injection vulnerability in the alerts module. This vulnerability affects versions of Zohocorp ManageEngine ADAudit Plus below 8000...
GO-2023-2020 Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager...
CVE-2023-52897
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: do not warn on record without oldroots populated BUG There are some reports from the mailing list that since v6.1 kernel, the WARNON inside btrfsqgroupaccountextent gets triggered during rescan: WARNING: CPU: 3 PID...
Strategies for performing security migrations
Advice for tackling and completing these major projects, including metrics, alerts, and prevention strategies...
CVE-2024-7262
creationtimestamp| type| source ---|---|--- 2024-08-15 17:38:17+00:00| seen| https://t.me/cvedetector/3244 2024-08-15 17:38:19+00:00| seen| https://t.me/cvedetector/3245 2024-08-16 11:46:16+00:00| exploited| https://t.me/CyberBulletin/390 2024-08-17 10:33:56+00:00| exploited|...
MAL-2024-7925 Malicious code in alerts-mfe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b491ce95a8873451531352a990256160314d0026f1fb2a06c2161ac828b63a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2024-7518
Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1...
Kibana 8.14.2 / 7.17.23 Security Update (ESA-2024-22)
Kibana arbitrary code execution via prototype pollution ESA-2024-22 A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability,...
PT-2024-38348 · Simple Machines · Simplemachines Smf
Name of the Vulnerable Software and Affected Versions: SimpleMachines SMF version 2.1.4 Description: A vulnerability has been found in the User Alert Read Status Handler component, specifically in the file /index.php?action=profile;u=2;area=showalerts;do=read. The manipulation of the aid argument...