CVE-2024-10204

creationtimestamp| type| source ---|---|--- 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1529/ 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1528/ 2024-11-19 13:20:35+00:00| seen|...

CVE-2024-11393

creationtimestamp| type| source ---|---|--- 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1514/ 2024-11-19 16:51:46+00:00| seen| https://infosec.exchange/users/thezdi/statuses/113510652704842916 2024-12-08 00:33:01+00:00| published-proof-of-concept|...

CVE-2024-51503

creationtimestamp| type| source ---|---|--- 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1516/ 2024-11-19 21:00:47+00:00| seen| https://t.me/cvedetector/11501...

WordPress plugin Multi-day Booking Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2024-51873: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Masashi Takizawa Multi-day Booking Calendar multi-day-booking-calendar allows DOM-Based XSS.This issue affects Multi-day Booking Calendar: from n/a through = 1.0.1...

CVE-2024-52566

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:40+00:00| seen| https://t.me/cvedetector/11360 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1524/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-52567

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:40+00:00| seen| https://t.me/cvedetector/11361 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1525/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-52571

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:37+00:00| seen| https://t.me/cvedetector/11357 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1526/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-52569

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:35+00:00| seen| https://t.me/cvedetector/11355 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1521/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

Most of 2023’s Top Exploited Vulnerabilities Were Zero-Days

Zero-day vulnerabilities are more commonly used, according to the Five Eyes: Key Findings In 2023, malicious cyber actors exploited more zero-day vulnerabilities to compromise enterprise networks compared to 2022, allowing them to conduct cyber operations against higher-priority targets. In 2023,...

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11 - Nov 17)

What do hijacked websites, fake job offers, and sneaky ransomware have in common? They're proof that cybercriminals are finding smarter, sneakier ways to exploit both systems and people. This week makes one thing clear: no system, no person, no organization is truly off-limits. Attackers are...

A week in security (November 11 – November 17)

Last week on Malwarebytes Labs: Malicious QR codes sent in the mail deliver malware 122 million people’s business contact info leaked by data broker Advertisers are pushing ad and pop-up blockers using old tricks Scammer robs homebuyers of life savings in $20 million theft spree Temu must respect...

CVE-2024-49592

creationtimestamp| type| source ---|---|--- 2024-11-15 21:12:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113489027313480593 2024-11-15 23:19:39+00:00| seen| https://t.me/cvedetector/11182 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1517/...

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

On Friday, November 8, 2024, cybersecurity firm Palo Alto Networks PAN published a bulletin PAN-SA-2024-0015 advising firewall customers to take steps to secure their firewall management interfaces amid unverified rumors of a possible new vulnerability. Rapid7 threat intelligence teams have also...

CVE-2024-36488

creationtimestamp| type| source ---|---|--- 2024-11-14 00:28:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113478473299029775 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1613/...

CVE-2024-34787

creationtimestamp| type| source ---|---|--- 2024-11-13 03:22:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113473495529817510 2024-11-13 04:07:31+00:00| seen| https://t.me/cvedetector/10783 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1501/...

CVE-2024-34781

creationtimestamp| type| source ---|---|--- 2024-11-13 03:07:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113473436500635075 2024-11-13 04:07:29+00:00| seen| https://t.me/cvedetector/10780 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1497/...

CVE-2024-32841

creationtimestamp| type| source ---|---|--- 2024-11-13 02:52:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113473377456204144 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1494/ 2024-11-13 09:12:33+00:00| seen|...

PT-2026-2326

Name of the Vulnerable Software and Affected Versions npm cli affected versions not specified Description The npm command-line interface has a flaw related to incorrect permission assignment that can lead to local privilege escalation. This issue allows an attacker to gain elevated privileges on ...

Patch Tuesday - November 2024

Microsoft is addressing 90 vulnerabilities this November 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today, although as with last month’s batch, it does not evaluate any of these zero-day vulnerabilities...