GCVE-1-2025-0002

creationtimestamp| type| source ---|---|--- 2024-10-06 08:21:05+00:00| confirmed| Reporter 2025-07-01 09:05:03+00:00| seen| https://www.hackthebox.com/blog/cve-2023-34362-explained 2025-07-01 09:52:06+00:00| seen| https://social.circl.lu/@[email protected]/114777352334943118 2025-07-0...

CVE-2024-9007

creationtimestamp| type| source ---|---|--- 2024-09-20 02:11:42+00:00| seen| https://t.me/cvedetector/6084 2025-07-16 13:28:47+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9007.yaml 2025-07-17 21:02:28+00:00| seen|...

PT-2024-24: Local privilege escalation (LPE) in ESET products

The vulnerability was identified in the following products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate ESET Small Business Security and ESET Safe Server ESET Endpoint Antivirus and ESET Endpoint Security for Windows ESET Server Security for...

CVE-2024-43971

creationtimestamp| type| source ---|---|--- 2024-09-18 03:20:08+00:00| seen| https://t.me/cvedetector/5898 2026-01-03 21:25:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-43971.yaml 2026-01-05 21:03:10+00:00| seen|...

CVE-2024-38812

creationtimestamp| type| source ---|---|--- 2024-09-17 20:37:49+00:00| seen| https://t.me/cvedetector/5831 2024-09-18 07:13:10+00:00| seen| https://t.me/thehackernews/5595 2024-09-18 08:24:29+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus22/2024 2024-09-18 09:07:11+00:00|...

Security Advisory Ivanti Cloud Service Appliance (CSA) (CVE-2024-8190)

Summary Ivanti has released a security update for Ivanti CSA 4.6 which addresses a high severity vulnerability. Successful exploitation could lead to unauthorized access to the device running the CSA. Dual-homed CSA configurations with eth0 as an internal network, as recommended by Ivanti, are at...

CVE-2024-7591

creationtimestamp| type| source ---|---|--- 2024-09-05 21:23:16+00:00| seen| https://t.me/cvedetector/4935 2024-09-06 10:59:54+00:00| seen| https://t.me/CyberBulletin/566 2024-09-06 11:36:42+00:00| seen| https://t.me/InfoSecInsider/23688 2024-09-06 11:36:44+00:00| seen|...

CVE-2024-24759

creationtimestamp| type| source ---|---|--- 2024-09-05 09:40:20+00:00| published-proof-of-concept| https://github.com/mindsdb/minds-platform/security/advisories/GHSA-4jcv-vp96-94xr 2024-09-05 19:43:06+00:00| seen| https://t.me/cvedetector/4933 2024-09-08 06:29:52+00:00| seen|...

CVE-2024-40711

creationtimestamp| type| source ---|---|--- 2024-09-05 07:08:09+00:00| seen| https://t.me/CyberBulletin/552 2024-09-05 17:15:55+00:00| seen| Telegram/JV0n6pLsOT6VJZsgrEwvOevCq5yhBWTCVGtt7W2JJuNFjI 2024-09-05 17:18:44+00:00| seen| https://t.me/CyberSecurityIL/55923 2024-09-05 18:58:23+00:00| seen|...

CVE-2024-8252

creationtimestamp| type| source ---|---|--- 2024-08-30 13:08:36+00:00| seen| https://t.me/cvedetector/4511 2026-04-08 08:56:40+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-8252.yaml 2026-04-10 21:03:07+00:00| seen|...

CVE-2024-7313

creationtimestamp| type| source ---|---|--- 2024-08-26 08:41:28+00:00| seen| https://t.me/cvedetector/4099 2025-04-04 13:43:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-7313.yaml...

PT-2024-94: Cross-Site Request Forgery (CSRF) and Reflected Cross-Site Scripting (XSS) in Netcat CMS (module netshop)

The vulnerability was identified in Netcat CMS module netshop, version 6.4 Extra. The vulnerability is related to cross-site request forgery. The discovered vulnerability allows an authorized attacker with the administrator role to execute arbitrary JavaScript code in the browser of the attacked...

PT-2024-76: Time-based SQL Injection in Netcat CMS (module comments)

The vulnerability was identified in Netcat CMS module comments, version 6.4 Extra. The discovered vulnerability allows an attacker to read information from the database. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 20.08.2024 Recommendations: Update to version or...

PT-2024-77: Time-based SQL Injection in Netcat CMS (module comments)

The vulnerability was identified in Netcat CMS module comments, version 6.4 Extra. The discovered vulnerability allows an attacker to read information from the database. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 20.08.2024 Recommendations: Update to version or...

PT-2024-91: Time-based SQL Injection in Netcat CMS

The vulnerability was identified in Netcat, version 6.4 Extra. The discovered vulnerability allows an attacker to read information from the database. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 20.08.2024 Recommendations: Update to version or higher Additional...

CVE-2023-7246

creationtimestamp| type| source ---|---|--- 2024-08-16 22:05:07+00:00| seen| https://t.me/cvedetector/3364 2025-04-04 14:05:31+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-7246.yaml...

CVE-2024-6651

creationtimestamp| type| source ---|---|--- 2024-08-06 09:09:08+00:00| seen| https://t.me/cvedetector/2536 2025-03-13 03:09:39+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6651.yaml 2025-03-13 21:02:10+00:00| seen|...

CVE-2024-7314

creationtimestamp| type| source ---|---|--- 2024-08-02 19:52:13+00:00| seen| https://t.me/cvedetector/2356 2025-04-04 06:21:26+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-7314.yaml 2025-04-04 21:02:09+00:00| seen|...

CVE-2024-7357

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgimain of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. The...

PT-2024-09: Creating arbitrary files during project creation in PT Application Inspector (PT AI)

The vulnerability was identified in PT AI affecting versions 4.3.1 to 4.7.2. The vulnerability can be exploited by an attacker with network access to the PT AI control server to create arbitrary files without the ability to overwrite existing files. Exploitation of the vulnerability requires...