CVE-2024-42411 User creation date manipulation in POST /api/v4/users

Mattermost versions 9.9.x = 9.9.1, 9.5.x = 9.5.7, 9.10.x = 9.10.0, 9.8.x = 9.8.2 fail to restrict the input in POST /api/v4/users which allows a user to manipulate the creation date in POST /api/v4/users tricking the admin into believing their account is much older...

CVE-2024-42411 User creation date manipulation in POST /api/v4/users

Mattermost versions 9.9.x = 9.9.1, 9.5.x = 9.5.7, 9.10.x = 9.10.0, 9.8.x = 9.8.2 fail to restrict the input in POST /api/v4/users which allows a user to manipulate the creation date in POST /api/v4/users tricking the admin into believing their account is much older...

SUSE: Security Advisory (SUSE-SU-2024:2983-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-29932 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.8.x through 9.8.2 Mattermost versions 9.9.x through 9.9.1 Mattermost versions 9.5.x through 9.5.7 Mattermost versions 9.10.x through 9.10.0 Description: The issue arises from the failure to restrict input in the POST...

SUSE: Security Advisory (SUSE-SU-2024:1863-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-43328

creationtimestamp| type| source ---|---|--- 2024-08-19 22:43:35+00:00| seen| https://t.me/cvedetector/3564...

CVE-2024-43326

creationtimestamp| type| source ---|---|--- 2024-08-19 22:43:31+00:00| seen| https://t.me/cvedetector/3562...

CVE-2023-7246

creationtimestamp| type| source ---|---|--- 2024-08-16 22:05:07+00:00| seen| https://t.me/cvedetector/3364 2025-04-04 14:05:31+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-7246.yaml...

CVE-2024-38131

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...

CVE-2024-38125

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...

CVE-2024-36971

creationtimestamp| type| source ---|---|--- 2024-08-04 16:33:44+00:00| seen| https://t.me/MrVGunz/1229 2024-08-06 08:15:42+00:00| exploited| https://t.me/thehackernews/5367 2024-08-06 08:57:04+00:00| exploited| https://t.me/tengkorakcybercrewz/3340 2024-08-06 08:57:04+00:00| exploited|...

CVE-2024-40723

creationtimestamp| type| source ---|---|--- 2024-08-02 14:01:20+00:00| seen| https://t.me/cvedetector/2346...

CVE-2024-40883

creationtimestamp| type| source ---|---|--- 2024-08-01 05:23:19+00:00| seen| https://t.me/cvedetector/2199 2026-05-11 22:15:30+00:00| seen| https://jvn.jp/en/jp/JVN06672778...

CVE-2024-7188

creationtimestamp| type| source ---|---|--- 2024-07-29 09:36:05+00:00| seen| https://t.me/cvedetector/1815 2024-07-30 10:58:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8123 2024-09-07 05:42:04+00:00| published-proof-of-concept| https://t.me/codeb0ss/1529...

CVE-2024-39304

creationtimestamp| type| source ---|---|--- 2024-07-26 21:22:56+00:00| seen| https://t.me/cvedetector/1708 2025-04-10 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmifneicnl27...

CVE-2024-37414

creationtimestamp| type| source ---|---|--- 2024-07-22 11:57:35+00:00| seen| https://t.me/cvedetector/1397...

CVE-2024-36491

creationtimestamp| type| source ---|---|--- 2024-07-17 12:21:58+00:00| seen| https://t.me/cvedetector/1069 2025-04-01 05:40:16+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llq5wdny3y2m...

CVE-2024-6531

creationtimestamp| type| source ---|---|--- 2024-07-11 20:50:23+00:00| seen| https://t.me/cvedetector/695 2024-11-28 14:07:07+00:00| seen| MISP/3a089118-12d0-4531-a56f-c07879ef75da 2025-06-11 15:29:00+00:00| seen| https://gist.github.com/EduardoCorpay/fdaeb4ec65cc4a1c8fcd2fb0162de09c 2026-04-22...

CVE-2024-38095

creationtimestamp| type| source ---|---|--- 2024-07-09 19:48:35+00:00| seen| https://t.me/cvedetector/396 2025-05-03 00:16:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14631 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-02 2026-07-22...

CVE-2024-38396

creationtimestamp| type| source ---|---|--- 2024-06-16 18:51:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7677 2024-06-18 11:31:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10697 2024-06-26 16:06:39+00:00| seen|...