CVE-2024-24025

An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: upload. An attacker can pass in specially crafted filename parameter to perform arbitrary File download...

CVE-2024-24017

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /common/dict/list...

CVE-2021-44716 affecting package libcontainers-common for versions less than 20210626-3

CVE-2021-44716 affecting package libcontainers-common for versions less than 20210626-3. A patched version of the package is available...

CVE-2024-24592

creationtimestamp| type| source ---|---|--- 2024-02-06 16:22:12+00:00| seen| https://t.me/ctinow/180096 2024-02-11 21:56:38+00:00| published-proof-of-concept| https://t.me/pwnai/114 2024-02-15 19:17:16+00:00| seen| https://t.me/ctinow/185803 2024-03-01 10:17:08+00:00| seen|...

CVE-2023-46360

Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges...

CVE-2013-1751

creationtimestamp| type| source ---|---|--- 2024-02-05 14:47:14+00:00| seen| https://t.me/ctinow/179232...

CVE-2024-22667

creationtimestamp| type| source ---|---|--- 2024-02-05 09:31:32+00:00| seen| https://t.me/ctinow/179064 2024-02-06 15:11:45+00:00| seen| https://t.me/ctinow/180037 2024-02-14 23:16:33+00:00| seen| https://t.me/ctinow/185105 2024-02-23 18:32:10+00:00| seen| https://t.me/ctinow/192009 2024-02-29...

CVE-2019-18674

creationtimestamp| type| source ---|---|--- 2024-02-05 08:11:58+00:00| seen| https://t.me/ctinow/179022...

Malicious code in health-gbm-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31170222d23eda1bafbe62eb13c6a349bed16902d0fbaaccc1a5258c32926b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-962 Malicious code in health-gbm-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31170222d23eda1bafbe62eb13c6a349bed16902d0fbaaccc1a5258c32926b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-46902

creationtimestamp| type| source ---|---|--- 2024-02-04 22:31:27+00:00| seen| https://t.me/ctinow/178936 2024-02-25 17:17:09+00:00| seen| https://t.me/ctinow/192942 2025-06-17 17:42:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18636...

CVE-2019-5089

creationtimestamp| type| source ---|---|--- 2024-02-04 11:11:21+00:00| seen| https://t.me/ctinow/178794...

CVE-2019-1877

creationtimestamp| type| source ---|---|--- 2024-02-04 10:41:27+00:00| seen| https://t.me/ctinow/178773...

CVE-2021-21831

creationtimestamp| type| source ---|---|--- 2024-02-03 18:24:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3935...

CVE-2023-48645

creationtimestamp| type| source ---|---|--- 2024-02-02 10:31:48+00:00| seen| https://t.me/ctinow/178016 2024-02-25 09:11:25+00:00| seen| https://t.me/ctinow/192782...

CVE-2024-22533

creationtimestamp| type| source ---|---|--- 2024-02-02 04:21:48+00:00| seen| https://t.me/ctinow/177912 2024-02-10 08:16:25+00:00| seen| https://t.me/ctinow/182461 2024-02-24 13:46:24+00:00| seen| https://t.me/ctinow/192585...

The vulnerability of the web interface of the E-DDC3.3 automation station’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the E-DDC3.3 automation station’s web interface involves incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted web requests via the CGI protocol...

Payment EX vulnerable to information disclosure

Overview Payment EX provided by Simplesite contains an information disclosure vulnerability CWE-200. Impact A remote unauthenticated attacker may obtain the information of the user who purchases merchandise using Payment EX. Solution Update the Software Update the software to the latest version...

Ubuntu 16.04 ESM / 18.04 ESM : X.Org X Server regression (USN-6587-4)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6587-4 advisory. USN-6587-1 fixed vulnerabilities in X.Org X Server. The fix was incomplete resulting in a possible regression. This update fixes the problem. Tenable...

CVE-2023-52028

creationtimestamp| type| source ---|---|--- 2024-01-30 12:16:52+00:00| seen| https://t.me/ctinow/175857 2025-01-31 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-31 2025-02-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-01...